Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Filtcd1tEgVRYY0Zx9XXXxycQNg.roa
File:                     Filtcd1tEgVRYY0Zx9XXXxycQNg.roa (raw, json)
Hash identifier:          RTOsPM9H6f06xHFu3ApulW8IiU622yicazNbVUMq6To=
Subject key identifier:   16:29:6D:71:DD:6D:12:05:51:61:8D:19:C7:D5:D7:5F:1C:9C:40:D8
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       49C4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Filtcd1tEgVRYY0Zx9XXXxycQNg.roa
Signing time:             Sun 12 Jun 2022 00:30:08 +0000
ROA not before:           Sun 12 Jun 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18884 (0x49c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun 12 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=16296D71DD6D120551618D19C7D5D75F1C9C40D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:18:ed:88:1a:c9:c2:68:f3:d5:9a:84:49:
                    85:4d:5b:1e:7d:0c:95:6f:c4:87:32:7e:57:bd:e0:
                    ef:b9:fa:b7:d4:5d:78:13:84:c9:8c:90:4a:04:07:
                    ad:db:3d:6f:25:69:f0:77:16:89:e2:b3:04:6d:6a:
                    4a:f3:4f:95:34:19:71:47:f2:ad:02:3b:cd:50:89:
                    f6:ad:95:78:48:e0:a6:e6:20:41:4d:6b:d5:d4:22:
                    6d:2b:f7:4f:99:dc:03:8a:26:28:9b:83:73:ff:2d:
                    3e:95:4f:98:3c:d1:fe:6f:04:e4:a5:7b:98:d6:da:
                    7c:95:c6:3b:5d:ce:10:c7:b7:75:c4:15:8d:f1:3d:
                    f1:8e:d2:bd:b5:be:b0:cd:83:be:b0:a7:c3:25:00:
                    7e:aa:22:a0:55:d7:d5:1e:8a:24:b6:07:80:6f:58:
                    11:83:39:9d:04:80:f0:0b:c9:86:ea:19:c7:e6:6b:
                    49:dd:40:f5:c2:12:e9:7b:69:16:6a:6b:13:df:09:
                    97:e0:98:a1:96:94:d3:99:d2:01:2a:30:a6:12:1f:
                    94:0f:2f:ca:52:66:1f:c7:f3:42:fd:12:ec:09:4d:
                    70:3c:d9:7a:5d:f6:51:b6:a3:0a:fb:c7:b2:15:37:
                    09:4d:a6:8c:d7:c3:75:9b:07:8a:8e:5a:6c:e9:78:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:29:6D:71:DD:6D:12:05:51:61:8D:19:C7:D5:D7:5F:1C:9C:40:D8
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Filtcd1tEgVRYY0Zx9XXXxycQNg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0b:48:1b:ce:f1:4e:5b:0f:b8:0a:a5:e1:38:80:6c:1d:59:
         bc:58:2e:68:10:d6:2c:ed:c5:e9:1d:44:23:35:e9:2c:7c:7f:
         a4:b8:bf:66:82:a4:b4:4b:ea:b0:85:0b:28:28:97:59:4a:2c:
         fb:6d:62:07:e9:cb:e6:81:68:6d:5f:fe:f2:4d:c7:4a:e3:34:
         bc:83:bc:ed:72:5c:3c:b8:82:62:7b:54:a2:db:15:c6:18:fd:
         eb:54:e2:56:98:f4:3c:3b:8a:30:38:a5:ef:40:ce:2e:f1:07:
         09:57:da:45:56:d2:be:f1:46:c8:21:8f:66:ae:d4:79:da:6f:
         86:ab:0b:ab:64:c6:18:3f:06:9e:cb:39:28:1f:41:93:b8:5d:
         37:5e:96:13:05:6a:f0:64:6e:db:19:3b:89:e0:cb:89:2d:ca:
         7c:64:bc:f5:92:ca:16:87:6f:21:ac:a8:c3:b3:2f:d7:8f:02:
         4a:bd:20:fe:28:03:3a:59:08:8c:f0:50:59:03:05:ec:6d:a6:
         d8:45:7e:f2:4b:85:da:da:a1:f8:6a:b6:fe:cb:63:2d:26:19:
         f7:32:56:5f:0e:27:62:56:d1:dc:9f:de:fc:4b:51:5c:b9:5e:
         82:5d:e3:38:80:e0:08:df:e1:85:c7:a7:a7:7a:f4:76:b7:65:
         50:df:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----