Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/d2Ol6orJCFYHmfQxzulz713fGPc.roa
File:                     d2Ol6orJCFYHmfQxzulz713fGPc.roa (raw, json)
Hash identifier:          WO/If+qk3JdwqNv9bAO17waAMbmvYCrh9bu0b0zEGdk=
Subject key identifier:   77:63:A5:EA:8A:C9:08:56:07:99:F4:31:CE:E9:73:EF:5D:DF:18:F7
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4335
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/d2Ol6orJCFYHmfQxzulz713fGPc.roa
Signing time:             Tue 15 Feb 2022 00:30:08 +0000
ROA not before:           Tue 15 Feb 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17205 (0x4335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 15 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=7763A5EA8AC908560799F431CEE973EF5DDF18F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:ca:bf:98:7e:79:77:22:3c:88:d2:31:6d:
                    4c:d8:1b:47:be:00:6d:51:78:2d:e7:70:d9:6a:9b:
                    e4:80:fa:ea:cf:2d:8f:d9:f1:fa:18:c3:95:82:82:
                    57:f8:ad:78:01:46:e5:a6:b2:cd:b0:39:a5:45:87:
                    21:34:6f:59:55:02:7e:46:84:77:6a:ed:60:d4:53:
                    27:6b:01:7e:ea:25:0d:5b:8d:71:dd:67:1e:be:81:
                    cb:70:52:2a:ba:4a:d3:4d:bf:b6:26:70:9c:97:6a:
                    05:19:04:7a:02:48:1c:31:04:b1:58:51:4d:1b:f2:
                    66:c5:96:1f:0d:9a:31:fd:60:f6:73:61:55:87:e9:
                    c9:13:6d:cc:b4:1f:ad:42:d0:b2:07:64:1f:e7:2a:
                    19:1a:be:fd:f3:dc:69:43:cb:3f:7a:51:16:ff:1d:
                    aa:f4:08:8e:ad:6a:26:f1:fe:b7:c5:e9:71:0a:4b:
                    6d:19:0f:82:d8:95:c4:25:b8:64:4d:31:e2:85:fd:
                    a0:fe:86:8c:71:2d:39:01:79:ac:4d:b3:47:5e:20:
                    79:ff:16:1e:54:e6:1b:f6:fa:f4:68:8b:84:6e:35:
                    21:9f:d7:c2:06:9b:11:90:eb:da:ee:5b:0a:fb:39:
                    13:d4:1c:fd:1b:2d:e7:43:50:ab:b8:91:4c:dc:01:
                    33:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:A5:EA:8A:C9:08:56:07:99:F4:31:CE:E9:73:EF:5D:DF:18:F7
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/d2Ol6orJCFYHmfQxzulz713fGPc.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:74:2b:2e:44:26:71:db:20:de:c4:15:6f:96:a7:32:97:21:
         8a:10:8a:17:d2:da:8d:d2:58:29:20:33:ed:a1:37:db:a9:e8:
         59:a7:2f:96:4b:e7:6e:a6:01:2b:ff:1c:17:1f:9f:54:87:b8:
         8e:62:14:30:f9:dc:03:01:77:04:30:d1:47:16:50:fa:ff:4d:
         50:53:88:0b:1c:de:76:b1:ff:c8:dc:dc:93:86:3d:6e:49:d0:
         e3:8e:3a:02:71:38:c4:97:97:70:4b:b1:c8:db:06:e1:f2:e5:
         c5:d0:16:41:a0:c7:90:ff:d3:32:f6:6f:a9:b4:7d:b2:70:3f:
         8e:92:55:d0:d2:d9:8a:4d:8b:78:ef:e9:0c:c5:49:ab:1e:ec:
         a4:80:0c:b7:89:69:c1:9a:7b:58:d7:7b:eb:43:3e:46:24:fb:
         96:f8:24:c6:42:2c:29:99:2c:0f:d4:b3:51:86:ba:87:ae:5b:
         46:15:35:e8:3b:3a:eb:dd:ac:48:c5:32:c2:62:e8:b2:e3:6c:
         f6:4f:eb:24:b7:f1:6b:4e:ec:d0:0b:82:db:5a:fa:11:04:bb:
         ca:11:25:7b:74:c0:eb:8d:a1:c9:18:fd:74:3b:c2:71:ae:0f:
         0c:cb:eb:60:84:f9:3a:31:89:3c:1b:f0:cf:25:73:0d:4c:ec:
         ee:96:14:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----