Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VlzbzVehntDVmhCB0Pn8cRwz368.roa
File:                     VlzbzVehntDVmhCB0Pn8cRwz368.roa (raw, json)
Hash identifier:          Fl6U/CZu/FpP2uqNEohyWAMzyM7MHwrUgoO+bHpLdvI=
Subject key identifier:   56:5C:DB:CD:57:A1:9E:D0:D5:9A:10:81:D0:F9:FC:71:1C:33:DF:AF
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4616
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VlzbzVehntDVmhCB0Pn8cRwz368.roa
Signing time:             Sat 09 Apr 2022 00:30:11 +0000
ROA not before:           Sat 09 Apr 2022 00:30:11 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17942 (0x4616)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  9 00:30:11 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=565CDBCD57A19ED0D59A1081D0F9FC711C33DFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:76:c1:ee:be:42:c3:c9:07:b0:3d:d0:59:
                    dd:52:ed:4e:bc:7c:82:5d:a9:33:c0:39:d9:ae:e6:
                    d4:fe:33:e2:e3:05:2a:bb:e6:74:35:2f:1b:01:52:
                    9c:ac:ff:a8:bf:dc:d7:3f:3f:ee:e3:d5:47:d8:7d:
                    ec:38:de:00:7e:57:f1:6c:d5:74:49:db:54:32:19:
                    79:53:61:4b:3e:67:da:84:26:a1:71:58:1e:0e:a5:
                    12:87:51:01:83:65:06:78:87:5d:d0:9f:97:00:e6:
                    fb:ba:f6:bf:65:41:06:e4:f2:fb:a8:1c:4d:b6:9c:
                    07:19:f8:40:c3:22:f2:14:cb:07:42:b7:4e:fd:6f:
                    02:a0:e6:71:b1:6d:12:fa:3b:b5:b9:14:1b:1d:a6:
                    c1:4a:94:74:55:e9:4f:c1:ee:8f:bd:56:aa:2d:91:
                    82:91:0a:cb:bc:b7:11:c3:d2:93:57:90:b1:c3:f3:
                    b8:b3:89:f6:c6:c8:e0:c3:77:ce:33:b4:44:65:56:
                    82:a3:5f:1c:22:74:72:8f:97:fd:8b:d1:c3:5c:7f:
                    52:16:de:c9:9f:bb:06:81:4a:bd:c5:61:24:24:a5:
                    8a:62:4d:c2:77:8c:eb:f9:f4:7b:4b:15:26:97:c0:
                    23:e9:e0:e4:4a:e4:2e:1b:82:a3:90:ee:87:fb:77:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5C:DB:CD:57:A1:9E:D0:D5:9A:10:81:D0:F9:FC:71:1C:33:DF:AF
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VlzbzVehntDVmhCB0Pn8cRwz368.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:bb:dc:15:e4:e2:34:52:e0:a9:eb:14:5a:b8:10:11:54:c1:
         b8:78:9b:5c:9e:ab:53:38:2a:db:fe:f3:2b:55:a4:d4:bd:af:
         c0:92:2d:04:3c:be:13:7b:a5:01:5c:b2:1c:45:8d:7e:bb:4c:
         2d:dc:e3:1d:02:24:cf:92:4c:00:17:c7:7e:c0:0b:cb:a8:e9:
         34:07:ee:87:f7:3a:0c:93:2e:4d:d1:1f:92:0f:0f:91:44:a9:
         18:8c:f1:72:fa:5b:89:56:1f:f8:2c:59:e7:93:9b:73:90:45:
         ee:e5:92:b5:18:42:a5:4c:a8:f4:53:e6:16:53:f3:6c:f2:1b:
         ad:27:ef:b9:6e:e7:41:a1:0b:6e:8a:7f:ff:f2:9c:6b:aa:79:
         cc:ae:1d:1c:d3:a9:a4:0b:df:4b:a7:e8:b2:d2:cc:5b:ae:ff:
         49:da:56:7b:a5:2d:c0:1f:da:72:35:0a:20:d5:b2:6b:63:d8:
         d7:de:6e:16:84:29:87:cf:1c:5b:62:1b:45:ca:06:f2:3e:34:
         92:d7:71:95:52:8e:3c:c8:f3:91:3c:79:3c:c2:22:7b:c2:75:
         d8:0f:58:ab:a9:cb:95:66:8d:95:e0:44:24:0c:bf:7d:ca:c4:
         45:c3:99:da:a6:6e:d8:71:5a:cd:06:7c:32:03:5c:cc:1c:60:
         78:c6:1c:8d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDkw
MDMwMTFaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDU2NUNEQkNENTdBMTlF
RDBENTlBMTA4MUQwRjlGQzcxMUMzM0RGQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHvHbB7r5Cw8kHsD3QWd1S7U68fIJdqTPAOdmu5tT+M+LjBSq7
5nQ1LxsBUpys/6i/3Nc/P+7j1UfYfew43gB+V/Fs1XRJ21QyGXlTYUs+Z9qEJqFx
WB4OpRKHUQGDZQZ4h13Qn5cA5vu69r9lQQbk8vuoHE22nAcZ+EDDIvIUywdCt079
bwKg5nGxbRL6O7W5FBsdpsFKlHRV6U/B7o+9VqotkYKRCsu8txHD0pNXkLHD87iz
ifbGyODDd84ztERlVoKjXxwidHKPl/2L0cNcf1IW3smfuwaBSr3FYSQkpYpiTcJ3
jOv59HtLFSaXwCPp4ORK5C4bgqOQ7of7d9YRAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUVlzbzVehntDVmhCB0Pn8cRwz368wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9WbHpielZlaG50RFZtaENCMFBuOGNSd3ozNjgucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AFK73BXk4jRS4KnrFFq4EBFUwbh4m1yeq1M4Ktv+8ytVpNS9r8CSLQQ8vhN7pQFc
shxFjX67TC3c4x0CJM+STAAXx37AC8uo6TQH7of3OgyTLk3RH5IPD5FEqRiM8XL6
W4lWH/gsWeeTm3OQRe7lkrUYQqVMqPRT5hZT82zyG60n77lu50GhC26Kf//ynGuq
ecyuHRzTqaQL30un6LLSzFuu/0naVnulLcAf2nI1CiDVsmtj2NfebhaEKYfPHFti
G0XKBvI+NJLXcZVSjjzI85E8eTzCInvCddgPWKupy5VmjZXgRCQMv33KxEXDmdqm
bthxWs0GfDIDXMwcYHjGHI0=
-----END CERTIFICATE-----