Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/SQInLFvSJ9n1OVNv45bJPTIfdw0.roa
File:                     SQInLFvSJ9n1OVNv45bJPTIfdw0.roa (raw, json)
Hash identifier:          kHQg/Rzgo4iAT0MGRHQqAZTIKBOMHomvHaggxS46hvk=
Subject key identifier:   49:02:27:2C:5B:D2:27:D9:F5:39:53:6F:E3:96:C9:3D:32:1F:77:0D
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       486F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SQInLFvSJ9n1OVNv45bJPTIfdw0.roa
Signing time:             Sun 22 May 2022 00:30:09 +0000
ROA not before:           Sun 22 May 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18543 (0x486f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 22 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=4902272C5BD227D9F539536FE396C93D321F770D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:50:aa:8f:03:2d:5c:50:1e:c3:b6:12:b4:
                    77:e2:e1:5e:3f:7f:99:4b:56:d0:95:57:86:62:35:
                    69:07:32:bd:08:b3:a5:e7:be:84:80:b9:d0:0b:b0:
                    69:eb:67:13:f3:8b:0b:d8:67:ad:45:fa:60:8c:85:
                    45:6f:66:0e:71:90:a3:7f:02:38:53:c3:3a:77:81:
                    af:66:39:99:97:79:ef:65:5b:38:72:84:29:f9:3c:
                    91:6d:74:02:8b:bd:09:c7:68:79:69:55:9c:13:14:
                    09:f3:ea:0e:af:86:1b:fe:0b:07:1e:86:40:0c:45:
                    0d:ef:6a:82:52:bf:1d:85:12:86:51:2b:53:6c:e8:
                    55:05:e2:2f:40:72:cb:ff:08:9b:ed:26:ab:17:56:
                    a2:86:f2:fd:d4:79:a9:f0:ba:17:98:c7:53:eb:4b:
                    2b:7d:de:6e:8f:32:c5:37:ba:98:28:ef:e0:49:49:
                    83:bf:cd:13:6f:32:c6:4e:b5:31:15:6c:df:64:ae:
                    6e:19:b6:3c:48:84:8e:10:6d:37:be:0e:3d:51:7b:
                    65:f3:22:8c:fa:28:10:f4:90:7a:09:0b:22:b3:b7:
                    43:bc:e4:5e:12:a2:90:67:08:f7:ba:e7:84:ca:45:
                    01:3f:73:87:f3:f3:92:9d:9d:db:e6:94:8b:8e:e1:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:02:27:2C:5B:D2:27:D9:F5:39:53:6F:E3:96:C9:3D:32:1F:77:0D
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SQInLFvSJ9n1OVNv45bJPTIfdw0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:b5:d8:4a:6c:de:4a:46:4e:ad:8a:c2:05:46:30:60:3e:
         4e:c2:82:b0:83:0f:43:30:36:ba:b8:78:f1:14:46:85:4d:d6:
         23:42:0b:e2:f8:b8:c2:8a:4c:22:b2:71:8a:07:5d:1d:c2:6a:
         0b:9b:68:18:37:b9:d4:f6:94:94:5b:13:38:31:44:06:00:35:
         61:ad:be:7d:da:b1:95:4e:cc:26:2b:21:1d:27:3c:59:c2:df:
         3e:f7:f6:a3:dd:7f:cb:28:fc:e3:71:f0:a9:71:14:9f:de:1f:
         bc:2f:0e:aa:0b:8c:a1:bc:2f:cb:af:6f:58:ed:fa:a9:ee:12:
         94:85:d3:61:3a:6a:b8:c5:67:66:ec:52:1b:d2:c2:e2:92:82:
         42:ee:cc:e4:7c:c9:0d:1e:5b:93:f1:6f:85:1b:38:bb:36:62:
         4e:36:ea:20:d7:13:0f:c7:0d:af:b8:11:28:da:52:3d:6f:9d:
         3d:45:fc:37:91:bc:76:fb:c2:0c:76:4d:28:cd:25:63:69:fc:
         34:a1:4f:26:ce:6d:43:36:93:01:70:39:6e:d9:92:e5:7c:25:
         a7:b8:6b:7b:48:28:21:b0:56:1c:e9:2e:ce:13:3c:ae:cc:4d:
         a2:0f:4e:33:06:de:27:64:b7:04:58:bd:89:75:ad:ad:6a:d6:
         38:fd:42:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----