Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Sqp0q9qi5yH-OH6TNCivk7Gyr3Q.roa
File:                     Sqp0q9qi5yH-OH6TNCivk7Gyr3Q.roa (raw, json)
Hash identifier:          sSWnDZBhXVoXjClzrIYU0oxdcVW7XQOYVAnsEZeR8+o=
Subject key identifier:   4A:AA:74:AB:DA:A2:E7:21:FE:38:7E:93:34:28:AF:93:B1:B2:AF:74
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       44A3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Sqp0q9qi5yH-OH6TNCivk7Gyr3Q.roa
Signing time:             Mon 14 Mar 2022 00:30:08 +0000
ROA not before:           Mon 14 Mar 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17571 (0x44a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 14 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=4AAA74ABDAA2E721FE387E933428AF93B1B2AF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:e9:b7:bb:e9:84:f7:27:9a:c9:47:8a:c1:
                    36:ba:d7:ab:76:53:d1:2d:03:cf:8d:2f:d0:66:73:
                    83:61:f2:00:0f:26:30:13:a9:53:73:be:d1:6c:44:
                    54:d6:ff:6a:0a:f4:b7:36:9f:ad:0e:74:9d:5c:7a:
                    db:1e:ac:04:fb:08:e7:2d:47:41:7a:d2:76:de:72:
                    fc:8a:cf:26:ff:c8:68:a7:1c:25:e5:50:ae:46:a3:
                    a9:4c:bb:50:c3:ac:56:6f:7e:ad:f8:9c:d8:60:52:
                    d1:b6:10:2d:f1:71:35:3b:7c:8c:55:89:3a:ec:5a:
                    dc:fd:ea:8f:c8:c0:59:5a:5f:aa:6c:c9:f8:78:85:
                    c3:bc:3a:f8:9f:a8:60:4b:7d:b9:26:2a:03:c1:b8:
                    c7:55:52:01:66:9a:d7:c1:d2:85:69:be:ce:1d:c3:
                    c2:13:87:b2:35:bb:d4:8e:ec:01:2c:56:04:b2:10:
                    fb:03:7a:65:b8:48:d2:28:ee:96:63:2d:34:a6:64:
                    12:20:e3:b9:e5:2a:42:70:40:13:34:43:c4:e2:c9:
                    6f:1a:8c:1b:75:42:d7:6f:6c:7a:ae:5b:d9:f5:a1:
                    aa:75:c0:94:19:0b:ef:50:9a:b9:77:b2:17:fb:94:
                    0c:e0:9d:57:fa:be:60:0e:9a:44:83:77:f5:28:22:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AA:74:AB:DA:A2:E7:21:FE:38:7E:93:34:28:AF:93:B1:B2:AF:74
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Sqp0q9qi5yH-OH6TNCivk7Gyr3Q.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:9a:03:02:95:ce:ad:54:57:b1:99:6a:66:44:66:ca:a8:
         54:cd:be:23:f5:28:51:fb:8c:36:88:ef:82:67:a9:cb:c1:4f:
         80:67:80:0b:94:e2:13:06:b1:0d:f9:ab:6b:f7:90:e6:82:93:
         ef:b7:8e:f6:fe:6f:0f:f0:57:b9:1c:08:18:61:e9:8c:51:6d:
         ad:60:2c:06:c7:51:41:0f:c2:41:61:38:d6:94:fe:79:3c:04:
         12:12:dc:26:87:3b:e5:75:7d:2b:4f:1e:ee:76:e0:5c:38:f5:
         90:ae:30:f8:18:66:7d:33:20:2f:c3:0c:3e:33:c1:92:bd:c5:
         ba:d9:ab:e8:24:aa:b4:b5:21:76:52:3e:e4:30:10:3b:72:07:
         de:5b:aa:79:91:79:88:6d:a5:56:e1:fe:43:bb:19:4a:c2:4e:
         d2:6a:31:cb:f0:12:a9:d8:89:ee:5c:5e:25:cf:d6:4a:24:f3:
         c5:42:8e:f6:14:18:cc:56:0c:fc:80:9a:cc:42:d8:a0:82:18:
         62:d7:d3:51:cb:7a:22:31:73:1a:76:23:79:da:8e:54:87:f2:
         c2:03:d4:6c:78:fb:dc:87:f8:7e:18:26:2a:e3:3c:09:ad:25:
         91:10:f9:74:be:c1:54:b2:98:bb:8a:13:b8:90:cb:2e:a8:60:
         d6:bf:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----