Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/DCdJk-AIBiSkQOt_UGa6VqJT3as.roa
File:                     DCdJk-AIBiSkQOt_UGa6VqJT3as.roa (raw, json)
Hash identifier:          wXrkpImGXXiENl0G337wLhdSXLBKY4HCcc9u1ubf70A=
Subject key identifier:   0C:27:49:93:E0:08:06:24:A4:40:EB:7F:50:66:BA:56:A2:53:DD:AB
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4837
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DCdJk-AIBiSkQOt_UGa6VqJT3as.roa
Signing time:             Wed 18 May 2022 00:30:06 +0000
ROA not before:           Wed 18 May 2022 00:30:06 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18487 (0x4837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 18 00:30:06 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=0C274993E0080624A440EB7F5066BA56A253DDAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:33:4e:18:b6:c7:0a:01:be:21:67:c2:64:
                    c0:8a:ab:8e:83:bb:16:34:66:52:03:c0:5d:71:53:
                    9c:c0:7a:6c:91:12:f9:71:7c:3b:1d:c2:03:9e:ce:
                    d2:c7:6b:58:9b:4f:86:7d:02:26:ec:98:94:b1:1a:
                    63:5a:25:8f:23:a8:05:f1:52:f5:b9:67:38:bc:8f:
                    c2:e5:07:da:5f:3f:9e:07:74:a5:ce:63:1f:f0:fa:
                    ba:0d:ae:52:47:f3:71:cf:10:9f:ad:42:0b:fd:ab:
                    9b:2c:82:35:14:7c:98:30:b1:34:f9:0c:c9:f6:03:
                    d9:5a:cd:16:65:af:00:f4:5d:a4:e4:e8:79:6b:af:
                    b5:d4:5f:cd:b9:8a:9b:fd:cc:3b:e4:4a:36:fb:bd:
                    df:17:9b:0d:e8:e0:5c:6f:b7:39:9a:13:9c:d4:57:
                    60:a8:9f:8b:95:72:ce:cd:ad:1b:26:29:60:a4:fa:
                    a2:3d:29:7c:8f:1b:e4:84:50:48:b1:06:7d:46:1c:
                    82:6f:3c:84:7f:c5:b0:e4:9b:74:37:9c:8e:4d:8c:
                    96:fb:f8:51:e8:9d:49:50:18:97:08:13:f6:03:f4:
                    2f:89:34:dd:7f:5e:ab:46:f7:8f:b9:01:65:43:1f:
                    1a:be:ad:15:f5:74:07:2b:42:33:1d:53:db:fc:e1:
                    c1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:27:49:93:E0:08:06:24:A4:40:EB:7F:50:66:BA:56:A2:53:DD:AB
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/DCdJk-AIBiSkQOt_UGa6VqJT3as.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2f:eb:d8:9a:77:92:bc:a0:1b:98:fc:7c:75:d0:8a:f2:ee:
         52:4a:bb:24:e7:45:c5:83:89:0f:31:05:bf:a9:bf:68:96:0d:
         b5:49:89:83:eb:be:a6:89:92:1d:98:6b:5e:3f:86:09:31:88:
         bf:bb:6a:cd:27:3f:2b:aa:bf:18:27:ff:40:88:30:5b:01:b9:
         6e:c6:e1:88:3e:70:07:84:78:b1:be:8c:d7:00:5b:2f:53:14:
         47:03:2f:ab:39:5f:5c:0d:9f:e9:93:c5:d0:eb:a5:c7:c1:f4:
         9b:aa:fe:8c:17:36:5f:dc:58:bb:a2:e5:d3:0e:4c:82:b2:9b:
         58:b3:40:1f:52:97:11:b8:76:09:46:d9:8f:65:a3:f7:b7:86:
         a5:4e:b3:1a:22:5f:02:eb:6e:07:18:62:22:62:10:1c:1c:bd:
         3c:47:d4:61:17:24:25:72:b2:c7:bf:e2:6f:d5:d6:b0:11:13:
         3c:58:5b:e9:58:4f:9c:73:2e:33:cf:6a:27:e3:39:1f:7c:42:
         15:06:35:42:c6:43:9f:a5:de:a2:72:5e:56:d2:0b:12:e0:26:
         30:ae:57:38:51:37:9a:27:ef:e9:7d:11:3b:41:f5:9f:5f:e0:
         35:b3:48:41:4c:4b:88:9b:e7:22:e5:d1:83:79:3c:4c:4d:72:
         56:e9:a6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----