Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ZBmPee0DIBm15Z5TIGUCrQOOHCE.roa
File:                     ZBmPee0DIBm15Z5TIGUCrQOOHCE.roa (raw, json)
Hash identifier:          L9FqOK/ynPFuF7LqrA5yHgEanBpWDmMOyBclM2VGqF4=
Subject key identifier:   64:19:8F:79:ED:03:20:19:B5:E5:9E:53:20:65:02:AD:03:8E:1C:21
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42B4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZBmPee0DIBm15Z5TIGUCrQOOHCE.roa
Signing time:             Sun 06 Feb 2022 00:30:06 +0000
ROA not before:           Sun 06 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17076 (0x42b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  6 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=64198F79ED032019B5E59E53206502AD038E1C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:21:84:2e:a3:a2:58:6b:af:4d:a9:2e:7e:
                    ec:48:d5:bc:50:cb:88:2a:4e:f3:85:b9:74:93:8a:
                    a9:8f:88:15:5b:31:40:cb:a8:e8:3d:e2:d4:36:90:
                    1b:15:ec:6d:1d:bf:00:a4:ed:62:3e:48:54:58:f6:
                    fd:d3:97:fc:e6:0c:f2:b9:49:4f:ee:b5:07:62:72:
                    05:40:62:57:52:db:7c:d9:ee:7b:b9:19:b1:8f:96:
                    bb:2e:e9:3a:8f:de:79:f3:a7:bd:d9:ce:af:c9:ae:
                    22:dc:73:d5:dd:b6:49:36:32:22:1a:a9:1b:1c:9a:
                    ff:d1:e7:02:d4:6a:57:b5:d5:3a:2d:c8:71:4c:2d:
                    88:56:09:f0:97:6e:8e:14:e4:9b:39:64:c4:ae:49:
                    81:39:8b:5f:73:12:a0:e9:f0:5a:f2:fb:82:8d:28:
                    ad:1e:69:46:7b:f3:a3:60:5d:3c:15:ea:9f:e6:5c:
                    e9:d9:2c:8f:f3:f9:ba:14:d2:51:be:e8:3e:e2:17:
                    ac:b1:74:76:75:35:55:64:71:74:3d:5b:ed:ca:24:
                    52:e0:bb:c1:73:7f:bc:7f:fb:a6:f9:2b:f1:cf:ee:
                    a7:f1:ee:20:bb:97:d1:0f:66:fe:86:86:d9:46:ab:
                    52:4c:69:fc:1f:d2:a4:01:fd:a1:2d:23:a6:50:56:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:19:8F:79:ED:03:20:19:B5:E5:9E:53:20:65:02:AD:03:8E:1C:21
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZBmPee0DIBm15Z5TIGUCrQOOHCE.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c5:ef:45:c5:56:df:29:62:27:d1:23:ba:d9:47:e6:05:76:
         50:80:76:e6:fa:46:32:48:a6:d9:bb:30:f8:3b:94:5c:82:94:
         55:30:f6:10:f3:71:21:03:8a:69:32:24:74:09:fa:2a:8f:9f:
         37:03:6c:83:81:3b:04:fe:ba:c2:80:cb:65:cc:9c:b3:8e:8f:
         a8:a0:d8:e1:cc:8e:2b:19:09:33:d2:de:cc:33:98:20:42:ff:
         a9:42:fb:c6:cc:a1:2f:7e:8f:b2:2e:8b:13:03:ca:cc:78:27:
         03:ae:3e:7d:76:20:56:29:d5:31:09:d1:9b:eb:60:5c:96:19:
         4b:69:50:2b:69:cc:fd:83:6d:40:0e:7c:65:71:fd:97:0e:8a:
         6b:ac:03:0e:06:84:c6:f1:9e:46:1f:99:56:64:b9:cb:3d:c6:
         a4:4a:87:25:8a:52:ed:ce:b8:68:52:ac:1b:92:e7:4a:32:28:
         60:55:e3:ee:1e:00:40:9b:d8:a5:4e:e3:0a:5b:67:77:c1:7e:
         18:95:e9:b6:31:b0:93:34:c7:df:58:ee:45:4f:3c:76:83:79:
         2b:92:a1:28:75:53:5d:9f:cb:ba:ab:31:df:cb:60:b6:61:ff:
         ff:45:e5:fb:28:ce:fc:1a:a9:16:99:f7:d4:a5:3d:ba:7b:a3:
         68:5d:b1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----