Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/JNZzt2N5AgxrK60tgVz3FL3dNnQ.roa
File:                     JNZzt2N5AgxrK60tgVz3FL3dNnQ.roa (raw, json)
Hash identifier:          nMOjmw86afcUDCTUdYefueh04KLgcmZhSsm31M34H8A=
Subject key identifier:   24:D6:73:B7:63:79:02:0C:6B:2B:AD:2D:81:5C:F7:14:BD:DD:36:74
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4498
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JNZzt2N5AgxrK60tgVz3FL3dNnQ.roa
Signing time:             Sun 13 Mar 2022 00:30:08 +0000
ROA not before:           Sun 13 Mar 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17560 (0x4498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 13 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=24D673B76379020C6B2BAD2D815CF714BDDD3674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:b4:11:0a:4e:c4:21:31:01:40:4f:e4:9d:
                    04:6f:d4:91:a7:72:ea:77:fe:07:4f:69:ee:68:ac:
                    76:aa:0e:29:df:3a:e4:fb:f3:28:05:4b:21:34:ed:
                    8e:27:cb:e6:10:38:b7:32:93:18:59:ec:ea:e8:e4:
                    5f:5d:1f:4c:95:84:c0:c1:2b:11:3d:60:36:95:ec:
                    ec:34:98:2c:e1:ed:b8:8c:bf:59:43:cc:10:22:b3:
                    01:a6:a0:f6:36:7b:7e:b4:c0:2e:a8:84:bb:87:b9:
                    42:03:be:d0:5e:c3:16:88:6c:6e:ee:b4:c3:43:c8:
                    5a:f8:b1:8c:36:b4:d3:a0:70:22:05:c2:27:94:a0:
                    69:e6:19:c4:cb:2f:fe:29:30:24:1e:e8:3b:57:59:
                    47:97:52:db:cf:89:1b:cb:af:73:cd:07:80:93:87:
                    cb:a6:cc:6a:17:cf:02:80:0d:79:00:d7:f4:87:20:
                    96:77:19:65:d3:a9:d3:68:74:72:b2:42:a9:fd:55:
                    f2:eb:7a:9c:de:cb:3a:b6:d6:46:a5:7a:24:a3:00:
                    c6:10:89:e0:cc:e8:54:e1:54:67:bd:5e:7d:ea:55:
                    4d:c3:b3:35:dc:9d:00:a8:59:ff:a2:9d:48:e4:70:
                    a4:b4:ec:0f:a3:39:b3:b2:2d:68:1d:7b:8f:42:3f:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D6:73:B7:63:79:02:0C:6B:2B:AD:2D:81:5C:F7:14:BD:DD:36:74
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JNZzt2N5AgxrK60tgVz3FL3dNnQ.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:18:ab:13:f5:33:6c:b6:eb:5d:9e:d9:de:e4:62:13:0f:c8:
         3b:3b:58:11:1f:9d:9d:df:f1:f0:f9:9a:5d:ee:77:92:c5:15:
         37:68:10:ff:84:b7:8d:3b:22:fe:6c:02:2c:ea:f9:db:04:49:
         d1:fb:05:94:53:58:8f:d4:0e:82:46:fb:18:21:49:0f:ac:dc:
         d8:e7:01:b0:0e:81:36:f5:4e:04:8f:eb:5f:66:2e:b5:6d:3a:
         1d:de:62:15:76:b4:f9:08:42:52:58:c1:7e:57:e9:19:fb:c2:
         8d:33:22:9f:f8:4f:d0:59:43:91:d7:71:61:6d:d3:d2:a1:71:
         9f:be:c2:f4:43:8f:6c:e9:9a:e0:8c:91:a9:4f:e6:97:7f:de:
         27:f3:b6:bc:51:8c:e8:aa:61:d0:41:ec:dd:0d:32:b4:91:73:
         ca:16:6b:55:47:13:47:f6:5d:8d:60:ce:90:75:6a:59:9d:d3:
         0d:6b:d1:46:ed:ad:34:c6:e4:dd:ca:0b:9e:9a:63:bb:c6:46:
         b6:f3:9d:49:41:b5:80:00:55:15:dd:f6:3b:32:b8:15:35:93:
         c5:c5:d0:2f:ba:bc:9e:47:8b:45:04:7a:05:80:05:67:0a:47:
         04:dc:1e:0a:c8:ae:ee:3d:da:41:1c:c9:9c:59:00:51:ce:86:
         6e:b2:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----