Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/JFNTZZnTBiR5brQTlf-w0m6sCos.roa
File:                     JFNTZZnTBiR5brQTlf-w0m6sCos.roa (raw, json)
Hash identifier:          UTuDK8g3v5bqfo+ZBRx5QqHvwz5zl4Yx0Q7dYsGMOLU=
Subject key identifier:   24:53:53:65:99:D3:06:24:79:6E:B4:13:95:FF:B0:D2:6E:AC:0A:8B
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       48A8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JFNTZZnTBiR5brQTlf-w0m6sCos.roa
Signing time:             Thu 26 May 2022 00:30:18 +0000
ROA not before:           Thu 26 May 2022 00:30:18 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18600 (0x48a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 26 00:30:18 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=2453536599D30624796EB41395FFB0D26EAC0A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:1d:b8:99:14:99:39:6d:9d:35:23:67:2a:
                    97:ea:1e:12:33:80:3c:f2:66:0c:fb:a4:58:eb:4d:
                    7a:ee:47:8c:81:d2:fc:2f:38:5c:29:94:29:f6:f2:
                    25:9f:fa:99:f1:04:63:fc:fb:c0:e2:16:46:fa:ca:
                    83:40:5d:19:0f:f2:12:ad:7f:56:77:e4:e2:03:12:
                    56:41:aa:a1:cc:eb:48:01:1d:3c:59:9b:72:35:cd:
                    e8:09:77:e3:59:a8:74:5f:cd:95:22:06:90:89:a6:
                    da:a1:50:50:36:73:70:b6:31:36:10:b4:52:ba:f6:
                    fd:b0:f4:d8:ec:c2:b3:73:ff:35:33:49:e8:7e:fe:
                    11:19:2a:fd:3f:c6:90:6a:be:9e:13:0f:7b:e9:19:
                    d2:11:46:a5:41:ad:32:0d:b1:13:98:8e:07:60:c8:
                    6d:12:96:13:32:7f:5b:38:d3:de:cb:b8:af:a7:17:
                    3e:a3:9d:59:7f:2a:5a:31:9f:ea:49:28:79:17:e4:
                    6b:c9:04:20:72:9a:be:27:42:3f:44:ea:0b:65:60:
                    5e:10:93:be:d8:13:c2:9b:67:19:38:39:95:ff:44:
                    1b:01:d6:c8:75:57:3a:2d:3a:58:6c:c9:cc:c4:0b:
                    b6:16:2c:07:f7:8f:ed:22:76:56:2d:c9:3b:fc:ad:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:53:53:65:99:D3:06:24:79:6E:B4:13:95:FF:B0:D2:6E:AC:0A:8B
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JFNTZZnTBiR5brQTlf-w0m6sCos.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:fd:7b:a0:76:1c:3b:07:30:47:27:72:79:9d:e8:ba:94:4a:
         3b:b8:81:6f:5d:04:b9:5b:3e:6e:81:25:b9:90:28:0e:9e:94:
         9b:24:a2:ae:fe:54:a4:bb:9f:51:16:58:31:b4:30:c7:84:75:
         71:ce:d2:0b:9f:22:72:31:0c:5f:6b:6c:e2:27:e4:13:d6:7e:
         ca:a3:fd:aa:af:37:c1:8c:8e:62:9a:2b:5e:b1:30:0d:bb:f6:
         83:16:ce:3f:c3:a2:b2:48:e1:5c:d1:ba:17:49:05:57:71:02:
         e0:2e:56:4b:e6:84:0a:d8:46:be:5a:ef:9f:26:34:72:0b:db:
         55:7c:fe:0e:a1:b7:ee:67:fa:e8:12:cb:34:d7:e9:8f:de:be:
         4b:d7:c3:61:b3:9e:48:22:7a:e5:2a:18:f7:4c:2a:56:ca:c5:
         a0:29:05:58:10:89:9d:38:73:21:0f:02:32:ac:4f:6a:28:cb:
         3b:56:2f:7e:d8:99:3a:f0:d1:b2:fa:ed:5b:ed:1f:b5:09:51:
         51:6e:68:36:f8:9d:34:9f:7f:6a:57:5c:d3:92:5d:d3:ae:b9:
         5a:3b:7a:4e:52:70:1c:85:95:ec:23:14:ed:ef:93:ed:e3:d5:
         1c:dd:ee:d1:3c:76:bf:fe:bc:5b:b3:ea:9b:e5:ec:10:1e:bd:
         1b:0c:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----