Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/BtuRyMnwge-FU4R-H8uG_LVGWo8.roa
File:                     BtuRyMnwge-FU4R-H8uG_LVGWo8.roa (raw, json)
Hash identifier:          ozsSEneOkGV2GHL2gqQrgGlOebVqjOO2GvZQbcK5U/s=
Subject key identifier:   06:DB:91:C8:C9:F0:81:EF:85:53:84:7E:1F:CB:86:FC:B5:46:5A:8F
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       48CE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BtuRyMnwge-FU4R-H8uG_LVGWo8.roa
Signing time:             Sun 29 May 2022 00:30:06 +0000
ROA not before:           Sun 29 May 2022 00:30:06 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18638 (0x48ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 29 00:30:06 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=06DB91C8C9F081EF8553847E1FCB86FCB5465A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:1f:e7:43:28:85:80:a3:bb:82:d0:c6:87:
                    d9:7d:11:7d:56:e1:f1:b2:04:ca:55:90:8f:7e:52:
                    ab:0f:93:9c:52:eb:23:4b:db:95:66:b6:2e:f3:6f:
                    6a:25:43:66:07:01:1a:07:79:0d:d4:ec:e1:7c:e3:
                    66:bc:a3:54:dd:f0:8e:67:c8:28:02:60:c5:1d:89:
                    24:06:f3:69:b7:e4:0a:df:3b:10:50:6e:9d:e1:74:
                    22:f8:c2:b6:12:59:94:dd:90:fe:b2:bc:b9:12:59:
                    60:55:22:5c:ee:77:19:29:ba:16:23:56:eb:af:4d:
                    35:10:65:66:99:73:81:cd:db:08:3b:80:17:e3:b2:
                    f3:af:9b:ad:dc:86:05:7e:07:a1:aa:9a:56:dd:76:
                    05:58:ac:01:03:eb:5b:79:f7:ac:15:7c:bc:e8:3b:
                    24:b7:07:a3:b1:6c:55:24:ab:58:69:cd:c7:8c:18:
                    d7:bd:b5:f7:6c:3f:da:10:5d:74:fc:41:36:5b:7e:
                    f4:69:85:22:a8:20:e3:37:d5:38:6b:6b:fe:d0:38:
                    03:c3:8f:36:af:ec:4f:62:3f:fb:77:21:3c:c2:c4:
                    90:cd:bf:2b:33:5d:d8:35:d0:e5:5b:32:de:c5:9d:
                    2c:45:2e:19:51:fa:41:69:f4:14:35:a8:4b:88:c3:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DB:91:C8:C9:F0:81:EF:85:53:84:7E:1F:CB:86:FC:B5:46:5A:8F
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BtuRyMnwge-FU4R-H8uG_LVGWo8.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:b7:15:28:fe:d2:16:a4:99:98:0b:03:a6:67:37:ef:ae:fc:
         3f:ef:2d:c6:1e:8a:4e:14:3b:f3:03:04:a3:7d:52:8e:40:02:
         37:1e:75:22:2b:f1:c2:5a:4c:a5:77:a9:ba:a5:79:5a:0b:38:
         07:79:3f:2c:db:8d:81:05:87:ac:52:46:4d:04:b0:29:12:94:
         78:28:33:08:4b:3a:77:b4:27:7c:50:e9:8c:78:c4:fc:41:dd:
         ad:af:2b:2b:6b:de:cf:f0:11:ad:47:ac:52:cc:be:f6:d9:fa:
         21:fc:cd:83:16:5c:bf:47:be:6f:4d:2e:6f:b2:81:65:db:8c:
         ef:62:83:47:6f:4e:21:58:db:ea:e7:fe:fd:40:98:d4:47:30:
         44:21:06:26:70:49:87:a1:33:9d:3f:37:9b:24:1e:22:11:90:
         69:f0:c1:6c:ef:be:c3:5b:fc:84:cd:a8:63:60:c9:ff:f9:44:
         bb:47:b9:50:84:04:95:e2:0a:f5:64:97:2c:02:ad:34:99:ba:
         69:ae:fd:a3:40:08:a1:48:8b:48:d1:3d:18:c1:2f:eb:bd:9d:
         5b:6c:97:30:a0:5d:fa:29:6a:58:da:e4:9b:99:e4:59:59:55:
         90:48:83:b6:05:bc:bb:3e:ef:e2:e0:2b:38:e7:d6:ca:76:a7:
         31:75:c9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org