Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ek0CrbbnbNr3ol4hmGfBB9EUOgg.roa
File:                     ek0CrbbnbNr3ol4hmGfBB9EUOgg.roa (raw, json)
Hash identifier:          FxE8wzZrAFBovgrHlMji46XO580fZzON5348BQpHvng=
Subject key identifier:   7A:4D:02:AD:B6:E7:6C:DA:F7:A2:5E:21:98:67:C1:07:D1:14:3A:08
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43D4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ek0CrbbnbNr3ol4hmGfBB9EUOgg.roa
Signing time:             Sun 27 Feb 2022 00:30:10 +0000
ROA not before:           Sun 27 Feb 2022 00:30:10 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17364 (0x43d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 27 00:30:10 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=7A4D02ADB6E76CDAF7A25E219867C107D1143A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:d1:54:a3:73:48:12:d7:ac:d1:8f:7d:3c:
                    44:c1:a0:ee:b4:eb:21:c0:d9:8f:ef:1b:85:c4:4c:
                    ce:72:6d:e9:6c:f7:e3:20:e3:5f:f6:df:66:13:59:
                    5a:2d:c8:14:22:0e:e0:30:05:15:dc:d8:0c:a7:52:
                    d7:46:69:fc:db:28:10:b4:c2:23:f9:08:fb:9b:ec:
                    fd:3c:10:bf:79:04:72:42:41:e5:a6:2c:b1:6d:b3:
                    e8:b7:ec:1b:71:da:d0:d9:c3:18:33:61:51:f1:8d:
                    67:d1:8d:31:01:d0:a5:00:b0:85:40:f6:1e:24:50:
                    94:12:cf:01:52:ed:f2:76:0d:51:90:52:78:cf:54:
                    25:56:83:c9:f7:73:2d:76:d6:54:a7:0d:f6:d0:48:
                    d0:ec:30:fb:54:62:6c:f9:4d:48:06:e9:a9:38:6b:
                    50:42:c3:1e:d5:22:33:f4:8b:fb:52:73:06:c4:74:
                    ba:2b:da:74:b3:ff:15:d8:92:dc:fa:96:79:63:10:
                    1e:83:e7:2f:4c:32:ca:6d:a5:f4:95:64:48:c5:9d:
                    28:7d:36:28:40:60:ef:b2:43:ad:6a:1c:3c:dc:96:
                    43:e7:9b:d3:c8:5b:28:2f:d8:8f:7a:89:dc:eb:b1:
                    7f:b4:5f:0e:2b:3d:c3:6d:2f:9d:82:ea:0d:0b:66:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4D:02:AD:B6:E7:6C:DA:F7:A2:5E:21:98:67:C1:07:D1:14:3A:08
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ek0CrbbnbNr3ol4hmGfBB9EUOgg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:0c:96:bf:7f:64:0b:df:a4:37:e1:e2:93:0f:f0:43:87:fd:
         ba:ba:77:cf:bd:f6:5c:a0:6d:30:ed:11:46:00:88:8e:41:db:
         f3:4f:96:78:1e:04:ab:f2:87:31:b6:98:d1:ac:81:b9:24:a3:
         32:bf:ae:fe:3e:0c:42:dc:25:39:70:7a:45:36:dd:87:77:a9:
         2e:0a:10:64:3d:ef:a0:39:68:71:1c:10:60:ef:0d:bb:03:9f:
         3d:53:cf:b8:fa:b5:51:69:7a:3d:fc:4a:81:16:20:67:82:ea:
         ea:45:6f:df:38:09:86:a5:f8:db:7f:6d:3b:8c:3e:8c:ef:0f:
         62:65:20:b5:f4:61:ce:12:64:b9:93:59:83:38:ac:4a:06:96:
         66:0c:23:39:c4:9d:85:81:d6:34:d2:58:e3:48:a0:69:2a:7f:
         c2:35:0c:20:45:24:7e:1a:f4:b6:df:03:d1:8a:8e:31:0d:14:
         38:36:b5:74:6a:fb:2f:9d:20:92:5e:4c:fe:05:5c:0d:7b:d8:
         d2:bb:34:54:a4:ab:6e:e9:f1:ab:73:a6:a8:68:3b:5a:eb:6b:
         e7:f0:f4:43:ae:8b:d8:52:47:ed:7f:6b:9a:17:f6:d4:8c:b7:
         18:9a:5c:4d:b2:7c:2d:72:98:9c:79:f6:a9:fc:65:59:2c:06:
         60:87:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----