Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/CwiJ03W9_B-Fjc3QT0Iel8KWmZk.roa
File:                     CwiJ03W9_B-Fjc3QT0Iel8KWmZk.roa (raw, json)
Hash identifier:          sIL6OuHcLI41l68bmsDe2lIrIngaPgm+gQJ+9Xhs1Lc=
Subject key identifier:   0B:08:89:D3:75:BD:FC:1F:85:8D:CD:D0:4F:42:1E:97:C2:96:99:99
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       434F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CwiJ03W9_B-Fjc3QT0Iel8KWmZk.roa
Signing time:             Thu 17 Feb 2022 00:30:06 +0000
ROA not before:           Thu 17 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17231 (0x434f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 17 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=0B0889D375BDFC1F858DCDD04F421E97C2969999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:ad:fc:22:d7:f0:98:14:7e:80:3f:9b:a0:
                    c2:a2:b3:f4:09:fd:35:a5:22:4a:b1:8d:da:f7:5e:
                    87:89:48:88:ba:25:b8:80:93:e3:00:d6:fd:3e:7e:
                    2f:0e:ab:56:ee:6d:f0:e8:d7:88:4a:e4:1f:a1:72:
                    16:08:dd:c1:33:4b:88:b0:94:2a:b4:89:fa:8c:b6:
                    1e:01:c2:ed:af:d7:e9:b0:bf:36:e5:ac:a9:8c:13:
                    42:cc:43:4c:b2:ef:8b:78:61:c3:04:13:be:9c:8e:
                    b8:4e:a6:97:9a:75:00:3d:04:b2:3a:3e:47:63:35:
                    75:a2:2f:ef:0c:d1:52:49:15:44:36:f9:40:27:54:
                    80:64:2f:be:65:2e:3e:bc:c7:1c:66:fc:c0:7a:47:
                    63:02:dc:d8:cd:c7:e6:14:b1:e8:25:9f:02:e5:05:
                    1c:c0:d9:25:46:bb:65:04:63:a4:67:e0:d4:5b:55:
                    dd:b3:b2:5e:9a:01:a5:cf:2c:bb:f2:9b:57:10:ad:
                    34:b8:79:04:d5:8b:fb:d1:26:ec:3e:1e:55:71:9b:
                    2f:81:4c:d3:38:00:99:7b:e5:39:54:b5:cf:b2:d4:
                    f2:82:82:d8:bb:80:d3:79:b1:16:7b:5a:43:e7:7e:
                    b5:ca:f1:9a:9d:54:3d:7b:d5:61:d6:f4:dd:5f:7f:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:08:89:D3:75:BD:FC:1F:85:8D:CD:D0:4F:42:1E:97:C2:96:99:99
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/CwiJ03W9_B-Fjc3QT0Iel8KWmZk.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:04:fd:7f:92:ab:80:2e:69:7d:e7:fa:25:ef:1b:d5:eb:b7:
         4c:73:ee:b9:9e:a2:5a:25:a5:90:83:d2:51:f4:53:93:7e:d2:
         46:44:94:8e:d2:64:1d:09:7c:58:01:0a:53:9e:26:4a:da:d5:
         94:01:0f:6f:56:fb:bf:e7:6b:98:5f:0d:91:d5:1b:f9:cd:d4:
         5a:75:35:ca:f1:43:f8:3f:4f:15:d1:f9:90:2f:67:a3:ee:78:
         a0:f0:ed:44:63:59:3c:7a:9e:e2:93:2b:31:24:75:8e:ce:b3:
         4e:f0:5a:8b:19:f6:29:83:c1:94:02:f3:e8:9e:57:49:fa:d7:
         f1:69:e0:8d:31:1d:43:63:70:7a:15:6e:b3:e7:74:a3:2a:6a:
         cf:6b:40:a8:71:8a:b3:e6:e6:5c:1a:8d:2d:a7:af:49:7c:65:
         22:5c:2d:b7:b1:d9:ea:54:c6:d9:9f:ff:99:85:69:ed:68:71:
         80:09:e0:cb:c8:68:c6:d2:57:f1:d4:ff:13:b5:29:4e:6b:f8:
         f2:27:9c:bd:3f:6d:4a:03:69:9b:26:47:ee:db:08:d9:9f:74:
         31:a6:a4:06:98:24:63:16:fc:a9:cb:e1:c0:73:30:c1:0f:eb:
         8d:a3:7c:5d:dc:e2:fa:64:25:58:17:a8:b6:ff:42:04:5c:3e:
         8e:34:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----