Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/I9hu7F-RU5eQwzZEphTR1olNotw.roa
File:                     I9hu7F-RU5eQwzZEphTR1olNotw.roa (raw, json)
Hash identifier:          D/+bTu/cEn2rAb1yn+b2QHT+rJkXZgrZX+QLz4I8GdE=
Subject key identifier:   23:D8:6E:EC:5F:91:53:97:90:C3:36:44:A6:14:D1:D6:89:4D:A2:DC
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       45DE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/I9hu7F-RU5eQwzZEphTR1olNotw.roa
Signing time:             Tue 05 Apr 2022 00:30:07 +0000
ROA not before:           Tue 05 Apr 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17886 (0x45de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  5 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=23D86EEC5F91539790C33644A614D1D6894DA2DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:9d:1a:ba:05:52:5b:04:9b:2d:e0:1d:c5:
                    7d:57:0a:34:17:63:4c:b1:ce:c6:b8:37:81:2a:83:
                    6c:ee:26:bd:0b:e5:c5:bd:a4:50:57:a2:25:81:7e:
                    05:1a:2f:8e:5e:28:fe:10:39:68:69:26:b1:68:c9:
                    7f:21:e3:3f:aa:c3:b6:c1:97:be:5c:c6:c4:3c:fd:
                    74:4c:c0:79:09:3f:a6:3e:b6:fa:c6:ed:43:d2:b3:
                    af:f7:77:e6:aa:a7:06:54:45:50:41:ef:7b:08:44:
                    8b:61:c1:f4:9b:8d:6c:1c:84:f4:0f:57:4a:19:02:
                    1f:c5:57:26:74:df:b0:ec:07:06:b9:e4:68:b6:77:
                    6c:34:e1:cb:07:f1:06:4c:aa:9b:77:55:74:36:1c:
                    51:8c:d6:07:6b:ee:03:70:48:7d:ea:59:4c:05:b0:
                    49:a9:87:6e:02:9d:ce:60:ef:f9:0c:81:93:cc:78:
                    1e:8f:ca:41:b8:7b:3e:5f:2a:d1:9e:51:72:22:80:
                    12:b4:ab:e2:5c:95:ef:ff:8b:47:de:e6:0b:ac:78:
                    9a:85:73:03:ac:b1:81:da:49:3c:2c:1c:36:f5:5e:
                    ee:32:b8:8e:c7:f4:e6:83:d5:10:91:11:c0:ad:99:
                    bb:1a:4a:c8:d2:b6:73:55:31:24:93:2f:66:ee:87:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D8:6E:EC:5F:91:53:97:90:C3:36:44:A6:14:D1:D6:89:4D:A2:DC
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/I9hu7F-RU5eQwzZEphTR1olNotw.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:d6:23:39:07:27:28:39:74:09:c5:6f:6f:f8:1a:3d:84:3e:
         e0:b3:77:f5:a6:b6:22:df:6c:fa:77:14:47:f0:9a:fc:1c:23:
         10:1e:69:6d:e6:23:2c:ad:25:eb:a8:84:49:a7:68:e9:d2:7f:
         3f:26:d7:69:05:f2:dd:94:5a:14:0e:ba:ec:f1:c7:03:a5:00:
         55:9f:f8:a9:89:6e:24:45:05:3d:8c:0b:db:fd:2b:d3:4d:08:
         28:4d:13:1e:52:4b:68:0a:ce:28:91:61:f1:6a:65:cd:a6:05:
         56:fe:3a:e5:ed:f2:64:9e:94:c4:d9:e9:af:f3:64:3a:bb:73:
         05:93:cb:46:e5:b0:2d:22:3f:a7:a6:fb:82:e0:5c:62:6c:82:
         9c:bb:e0:46:a9:18:01:11:79:d1:1f:56:93:59:81:84:a6:90:
         0b:19:4f:a5:9d:e2:5f:5f:7d:33:73:9a:a0:13:96:5f:b5:e4:
         d0:bb:e8:46:d4:d5:b2:3f:d3:81:45:24:6a:2a:0c:e7:bd:c8:
         cd:bd:82:ab:66:a9:45:7d:23:40:95:c2:1c:1f:2d:bf:c7:a8:
         8a:99:29:09:b4:96:25:09:c0:0e:c6:95:34:1f:b2:e3:18:8d:
         27:16:d7:94:80:29:89:f4:ec:ab:6d:70:18:ab:5b:8a:5c:46:
         74:70:f8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----