Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/MeVGLqw2ZTu4S0mN3mZ70PSU5k8.roa
File:                     MeVGLqw2ZTu4S0mN3mZ70PSU5k8.roa (raw, json)
Hash identifier:          0GdSm8SkJQyuJ9v8eLWi/vpVklM4qNzIhKoP2wAc2xE=
Subject key identifier:   31:E5:46:2E:AC:36:65:3B:B8:4B:49:8D:DE:66:7B:D0:F4:94:E6:4F
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       47B4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MeVGLqw2ZTu4S0mN3mZ70PSU5k8.roa
Signing time:             Mon 09 May 2022 00:30:08 +0000
ROA not before:           Mon 09 May 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18356 (0x47b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May  9 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=31E5462EAC36653BB84B498DDE667BD0F494E64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:be:88:e4:a8:c5:b2:c0:da:10:ac:be:9f:
                    8b:2c:10:2c:df:57:96:07:5a:82:d1:9d:8b:d6:df:
                    36:d0:83:84:2b:93:3c:91:66:06:8a:7c:09:2c:ed:
                    9f:00:c9:82:d7:0f:73:04:c0:fb:a2:bc:3f:c0:b9:
                    57:0a:0c:4c:c7:66:e1:d3:9e:ad:d9:66:db:bb:b2:
                    c2:f7:64:e6:0f:8c:ff:ca:bd:45:27:b5:99:31:7e:
                    9e:db:8d:49:45:ce:6d:cd:e0:d7:3d:da:e0:7d:c4:
                    f5:52:00:5a:ed:79:78:61:1a:18:2a:19:52:b8:55:
                    6c:f7:29:e3:6b:d6:6a:40:49:25:13:fc:5a:4c:99:
                    cb:a7:32:fb:a2:9b:69:1c:fa:11:55:fb:51:2c:61:
                    e1:00:c5:e1:7d:09:10:70:2a:91:b8:1c:24:c5:19:
                    0c:51:47:c6:f4:4a:77:94:63:31:d1:73:01:f6:60:
                    e8:93:38:27:39:e9:24:38:77:72:a4:4f:a8:3b:d5:
                    23:dc:0f:1a:f5:53:4d:b3:19:d0:c7:b1:22:fd:94:
                    56:75:4d:cd:47:8a:66:ba:00:59:74:be:d0:62:67:
                    3c:c9:99:55:64:83:90:32:c5:2b:e5:28:6c:74:ee:
                    29:77:a2:5d:7e:54:15:22:a3:a7:9c:04:be:d3:6f:
                    7a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E5:46:2E:AC:36:65:3B:B8:4B:49:8D:DE:66:7B:D0:F4:94:E6:4F
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MeVGLqw2ZTu4S0mN3mZ70PSU5k8.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e1:5c:81:4b:db:43:ea:3a:81:b3:c6:c7:36:b7:90:91:b3:
         d1:33:67:bc:b7:6e:25:b3:31:58:b8:f8:ef:3f:03:50:df:9b:
         50:4a:65:ef:61:fd:b2:0b:17:58:8f:7d:4f:8c:5b:85:63:99:
         37:17:27:ca:ea:1d:4b:77:9b:87:ee:e5:da:d3:e1:03:21:b7:
         53:4e:13:5a:7c:df:f3:dc:06:91:5e:e7:58:d5:a3:f9:55:a0:
         64:d6:35:35:42:f2:6b:0d:8c:99:fd:f9:0a:aa:ce:5c:34:39:
         9e:4d:17:c1:58:f5:74:2b:40:cb:42:e6:a2:4c:e4:29:28:df:
         3c:05:1b:91:d3:a0:08:ab:06:f5:fd:8c:c6:22:4a:d7:99:79:
         10:e4:e3:be:ec:83:8e:d0:53:93:2b:27:f4:15:b8:6d:ec:6b:
         08:3c:bf:9b:25:95:7c:25:f8:2b:c3:c3:56:24:8e:64:30:17:
         bc:3d:ef:2a:1f:4e:c4:27:be:e6:9d:3a:eb:36:ec:19:15:27:
         a5:67:f2:1a:7d:ad:c0:b8:24:3c:f8:30:13:91:62:7a:5e:7a:
         69:d4:08:b1:83:8a:a2:6f:a1:86:5d:86:d1:ea:41:53:1d:97:
         59:3d:69:1d:2d:69:c7:f1:38:ed:72:c4:89:4f:96:9a:ea:5c:
         b6:73:7c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----