Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Fw8yGL-qm3Ex38vgf36D9XuccNU.roa
File:                     Fw8yGL-qm3Ex38vgf36D9XuccNU.roa (raw, json)
Hash identifier:          au3sMO7HjolNBZJEt+XVQLPGJ5KjF5Cv9OALSiBIwZw=
Subject key identifier:   17:0F:32:18:BF:AA:9B:71:31:DF:CB:E0:7F:7E:83:F5:7B:9C:70:D5
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4328
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Fw8yGL-qm3Ex38vgf36D9XuccNU.roa
Signing time:             Mon 14 Feb 2022 00:30:09 +0000
ROA not before:           Mon 14 Feb 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17192 (0x4328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 14 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=170F3218BFAA9B7131DFCBE07F7E83F57B9C70D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:ed:c0:82:d9:d8:4e:45:9e:da:c3:6e:6d:
                    73:d3:f1:d9:22:ac:e2:bb:a4:30:49:76:f2:b3:41:
                    45:cd:99:ce:64:87:3c:97:6c:d3:6c:53:4c:5c:f3:
                    1a:f5:57:9e:bc:7c:9d:34:47:65:99:20:fc:9a:18:
                    de:76:fd:05:72:de:57:f8:5c:65:a7:97:f6:82:08:
                    67:0b:ae:df:ba:ed:6d:5e:d8:f6:56:e0:07:83:0f:
                    e0:14:6b:bc:7f:ca:e4:13:4e:3f:96:b0:b6:d3:a8:
                    c5:0f:05:e8:89:b4:b6:13:d7:a7:9d:1e:35:e2:b7:
                    82:fd:d4:2b:d4:f2:1d:d6:a9:fc:35:c4:ab:f3:d8:
                    31:3a:ac:b2:63:f8:e4:99:be:39:a0:33:52:e0:e2:
                    8b:0a:eb:8b:6b:4e:45:0b:ae:a6:40:4d:15:dd:12:
                    f0:42:2e:a9:1f:27:ac:31:1c:b7:f2:c4:d5:21:08:
                    c9:71:80:41:ed:6d:f6:06:3e:89:70:53:91:bd:8f:
                    9f:f6:ec:37:70:00:c7:62:25:ab:55:a8:4d:b3:a2:
                    60:35:eb:04:23:7b:b8:be:94:2d:28:50:10:a2:a1:
                    d6:dc:00:72:1d:7d:f0:aa:7c:20:bb:d9:ed:28:b5:
                    f1:47:f2:4c:13:cd:c3:75:3e:bf:5f:bf:cd:83:1b:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0F:32:18:BF:AA:9B:71:31:DF:CB:E0:7F:7E:83:F5:7B:9C:70:D5
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Fw8yGL-qm3Ex38vgf36D9XuccNU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:99:b5:eb:b0:26:4a:6c:93:b3:a8:c9:71:cd:17:89:56:e3:
         86:0d:51:25:62:13:c1:07:2d:56:e9:e1:07:3f:37:9a:20:5b:
         2f:ea:b0:13:b1:62:cf:2a:e3:1b:f6:82:e8:95:c8:fc:66:20:
         2e:e2:ce:31:9a:6d:c0:9f:6d:db:47:60:ff:76:43:b1:8d:22:
         e6:0a:1b:4d:be:7e:b4:2c:ea:a4:b6:64:7d:7a:ad:c5:36:44:
         b0:9a:db:ba:7f:0c:10:97:f2:21:c9:2c:53:6b:d5:fa:68:cb:
         17:4a:f6:ed:9b:ed:2f:3d:ca:47:19:95:7d:1f:a2:0e:de:00:
         cf:f8:48:9f:8a:1b:48:0a:22:7b:a7:36:09:b7:5d:da:57:95:
         36:69:c1:68:24:2c:6c:94:95:81:67:9c:43:9b:10:f1:a1:57:
         94:52:bf:2a:bf:0b:63:9e:c9:96:3c:4c:ed:94:c3:ad:74:7b:
         d0:89:0d:65:7a:02:db:27:46:94:99:35:1b:59:6f:d9:fc:d8:
         46:b6:cd:82:1b:bb:8b:cb:88:23:2f:29:77:b6:22:73:68:0c:
         d5:5d:bb:78:ba:74:29:da:97:18:0f:71:0a:8b:fd:55:97:6c:
         5f:eb:5d:fb:13:cd:fd:dd:71:8d:76:88:87:f1:e6:8c:8d:4d:
         f1:d2:84:6a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQygwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMTQw
MDMwMDlaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDE3MEYzMjE4QkZBQTlC
NzEzMURGQ0JFMDdGN0U4M0Y1N0I5QzcwRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuvu3AgtnYTkWe2sNubXPT8dkirOK7pDBJdvKzQUXNmc5khzyX
bNNsU0xc8xr1V568fJ00R2WZIPyaGN52/QVy3lf4XGWnl/aCCGcLrt+67W1e2PZW
4AeDD+AUa7x/yuQTTj+WsLbTqMUPBeiJtLYT16edHjXit4L91CvU8h3Wqfw1xKvz
2DE6rLJj+OSZvjmgM1Lg4osK64trTkULrqZATRXdEvBCLqkfJ6wxHLfyxNUhCMlx
gEHtbfYGPolwU5G9j5/27DdwAMdiJatVqE2zomA16wQje7i+lC0oUBCiodbcAHId
ffCqfCC72e0otfFH8kwTzcN1Pr9fv82DGxKLAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUFw8yGL+qm3Ex38vgf36D9XuccNUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9Gdzh5R0wtcW0zRXgzOHZnZjM2RDlYdWNjTlUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AFaZteuwJkpsk7OoyXHNF4lW44YNUSViE8EHLVbp4Qc/N5ogWy/qsBOxYs8q4xv2
guiVyPxmIC7izjGabcCfbdtHYP92Q7GNIuYKG02+frQs6qS2ZH16rcU2RLCa27p/
DBCX8iHJLFNr1fpoyxdK9u2b7S89ykcZlX0fog7eAM/4SJ+KG0gKInunNgm3XdpX
lTZpwWgkLGyUlYFnnEObEPGhV5RSvyq/C2OeyZY8TO2Uw610e9CJDWV6AtsnRpSZ
NRtZb9n82Ea2zYIbu4vLiCMvKXe2InNoDNVdu3i6dCnalxgPcQqL/VWXbF/rXfsT
zf3dcY12iIfx5oyNTfHShGo=
-----END CERTIFICATE-----