Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ChijnCei7KwRMi3CniaNDZuoJuU.roa
File:                     ChijnCei7KwRMi3CniaNDZuoJuU.roa (raw, json)
Hash identifier:          x0PYQog6csKyZbp83aLLs5rWf3ugttbfR9XIwuaysnM=
Subject key identifier:   0A:18:A3:9C:27:A2:EC:AC:11:32:2D:C2:9E:26:8D:0D:9B:A8:26:E5
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4900
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ChijnCei7KwRMi3CniaNDZuoJuU.roa
Signing time:             Wed 01 Jun 2022 00:30:06 +0000
ROA not before:           Wed 01 Jun 2022 00:30:06 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18688 (0x4900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  1 00:30:06 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=0A18A39C27A2ECAC11322DC29E268D0D9BA826E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:88:49:73:05:7a:db:3e:c0:27:e7:1f:17:
                    a5:53:3f:f7:59:31:d5:5f:de:64:20:9a:94:2c:bd:
                    13:e6:1c:05:d7:fc:20:74:49:ed:fd:75:32:a2:3d:
                    8c:8f:76:9b:60:88:f5:e4:64:31:6f:8a:66:bd:29:
                    28:9e:8c:d0:cd:20:d0:56:9b:a1:f4:b2:a3:c8:7b:
                    18:88:13:13:ca:0c:32:f9:28:e0:b3:2f:2a:28:c3:
                    d0:e1:3f:90:b3:b1:55:ce:5f:f4:5f:79:d9:20:d9:
                    7e:72:53:6e:50:a0:fc:2b:d6:38:ad:c8:4e:75:60:
                    7d:35:c9:56:0a:70:73:2d:ca:39:93:d6:09:3c:65:
                    cd:8d:04:83:93:a0:11:bc:b0:36:b8:88:f4:dc:50:
                    38:a1:9d:57:10:3e:e9:12:c5:c2:cf:7f:77:b6:d7:
                    45:7f:49:ed:c5:22:b6:7e:78:b3:20:b0:de:92:22:
                    08:8d:bc:30:dd:b2:89:99:8a:ac:76:6c:08:e7:0a:
                    a7:7b:2b:01:20:4a:20:67:72:d3:ca:ee:62:30:13:
                    e9:20:90:53:91:82:66:45:b7:ec:eb:37:7c:20:7a:
                    51:31:f6:97:bc:6a:bc:68:c9:d6:51:46:12:ba:11:
                    66:4e:79:d0:d4:2b:11:38:3a:82:27:5f:b3:97:72:
                    55:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:18:A3:9C:27:A2:EC:AC:11:32:2D:C2:9E:26:8D:0D:9B:A8:26:E5
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ChijnCei7KwRMi3CniaNDZuoJuU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:08:05:f8:c9:2d:84:23:88:6f:c3:71:94:5b:9f:b4:82:ca:
         1e:84:52:03:16:15:6f:b2:f2:a1:68:b6:04:bc:6f:74:1d:33:
         5c:85:88:dc:94:b0:b7:24:b6:82:57:52:24:70:67:29:2b:67:
         bb:be:13:70:ed:91:a8:a3:6d:b9:6d:ac:41:ac:a7:a3:fc:94:
         91:30:8d:e7:a8:a9:14:be:e8:0d:f2:0a:7c:27:c6:2c:ed:7a:
         4c:17:fd:71:a1:73:42:40:39:14:92:60:60:74:e8:f9:6f:16:
         7d:1c:24:ff:d4:80:00:d5:5b:a9:d2:a1:6e:ac:60:fd:e4:1b:
         7f:c2:10:10:fb:3f:39:91:5f:ae:d1:5d:83:9c:66:5c:f6:a0:
         69:b6:dc:5d:08:bd:7f:15:ea:6a:14:bb:f3:f8:b9:c6:93:b9:
         c2:47:92:52:c2:ec:41:f5:ad:1c:0e:89:a6:fd:15:03:ab:8b:
         57:65:90:11:fa:29:ba:40:a2:5c:67:43:a5:b2:f4:e2:f5:2e:
         73:75:c1:68:1e:d1:d4:c1:36:d9:94:5f:68:92:96:ee:f2:82:
         5c:ed:92:80:96:1c:1b:0c:e7:bf:e7:75:04:c8:78:30:f3:ae:
         c8:7f:20:b3:e4:85:0c:35:d7:de:7b:77:c1:51:9b:2d:07:52:
         74:ac:89:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----