Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/d-S2ZSwSjXtZglOoaF0ix6nCcws.roa
File:                     d-S2ZSwSjXtZglOoaF0ix6nCcws.roa (raw, json)
Hash identifier:          Pr8UHK/oyumxhrgk8bu+y5wQZf4ZtD1dFQVhROMKOHo=
Subject key identifier:   77:E4:B6:65:2C:12:8D:7B:59:82:53:A8:68:5D:22:C7:A9:C2:73:0B
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       44BF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/d-S2ZSwSjXtZglOoaF0ix6nCcws.roa
Signing time:             Wed 16 Mar 2022 00:30:07 +0000
ROA not before:           Wed 16 Mar 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17599 (0x44bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 16 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=77E4B6652C128D7B598253A8685D22C7A9C2730B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:2b:5e:cd:71:ee:73:94:c3:43:02:c2:fb:
                    e4:1f:60:ad:87:24:12:69:2b:c4:87:6f:dd:31:36:
                    35:f7:12:3b:0d:5a:64:b4:34:c7:c8:88:86:07:de:
                    e2:7f:44:0e:fc:dd:52:2c:84:51:05:b4:94:b2:f9:
                    94:88:34:73:1e:18:da:fc:4f:d2:7c:03:18:29:aa:
                    8c:8d:b7:83:cd:ed:35:72:26:6b:87:9d:28:f6:f1:
                    3f:74:78:05:bb:39:ee:a1:e9:2e:6e:19:06:64:da:
                    43:b1:32:8f:c7:57:6c:40:26:9b:d2:65:5f:63:9e:
                    51:04:e8:d6:97:37:6c:97:df:74:91:ab:a8:fb:c5:
                    76:42:3f:3f:14:14:d3:9d:cf:a0:d7:60:07:3e:64:
                    e5:91:f0:dc:64:54:cb:4e:20:e3:1b:55:40:28:56:
                    49:00:5e:53:56:90:e1:f4:db:d8:f4:7e:6b:2b:14:
                    40:b8:b3:d1:8b:a1:97:03:91:b3:7c:46:81:00:a3:
                    0d:a9:bb:7a:e8:07:7b:ef:2f:68:7b:54:ce:c6:a3:
                    a0:f0:74:c2:a2:81:4e:16:9a:8f:95:89:2b:68:c5:
                    30:fb:b0:8f:01:ca:66:21:de:f1:1d:da:10:df:d5:
                    3b:11:03:94:b2:60:c9:0a:16:7a:60:04:e4:5f:59:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:B6:65:2C:12:8D:7B:59:82:53:A8:68:5D:22:C7:A9:C2:73:0B
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/d-S2ZSwSjXtZglOoaF0ix6nCcws.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:b1:3e:95:fb:00:29:34:36:cf:d5:5e:7a:97:c0:a6:1b:5b:
         32:cf:7d:ce:1a:24:97:e0:df:48:3d:42:ab:b4:2d:52:57:e7:
         09:80:54:ad:6d:15:07:42:36:7f:0f:02:af:81:f8:5a:74:d2:
         d5:da:91:c6:5d:a9:cd:d7:f6:c4:7e:8e:12:78:c4:b1:81:14:
         d3:5b:33:2a:c1:0a:bb:ae:14:fd:90:ea:25:c2:5d:b3:ca:1e:
         83:d6:a3:4f:23:c2:e3:56:ec:a2:75:75:b2:4c:b0:d2:e2:72:
         99:96:5b:15:83:97:22:c5:6b:a5:a4:2f:46:93:09:51:40:fd:
         88:49:36:48:71:48:e4:e7:d2:08:0c:77:49:e0:82:00:55:a1:
         1c:c7:7f:bc:96:cc:5e:1f:9d:a1:03:3a:14:8d:c7:75:9a:d5:
         ee:47:f6:e6:f4:bf:71:9f:ad:95:bc:45:80:24:c9:ce:a8:f8:
         a8:2b:65:da:96:a3:da:83:0b:f8:39:a6:5f:80:01:fd:e2:76:
         0a:f5:e9:e7:ce:12:ce:9f:6a:de:e9:93:5f:ce:57:9b:8b:98:
         a8:70:51:a1:5b:e1:b3:fa:4c:f5:05:28:61:bb:a7:fc:1b:cc:
         46:45:48:97:11:2f:d7:66:1e:c3:ea:0d:d4:58:ab:fd:93:d8:
         7c:ab:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----