Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/eqDx3f3xAGlgMXgdnldTndbxtFc.roa
File:                     eqDx3f3xAGlgMXgdnldTndbxtFc.roa (raw, json)
Hash identifier:          pDkAtEzLaZZDIXc8RKEQe0yu9yBUEQ4HKUpve116NVw=
Subject key identifier:   7A:A0:F1:DD:FD:F1:00:69:60:31:78:1D:9E:57:53:9D:D6:F1:B4:57
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43D9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eqDx3f3xAGlgMXgdnldTndbxtFc.roa
Signing time:             Sun 27 Feb 2022 00:30:13 +0000
ROA not before:           Sun 27 Feb 2022 00:30:13 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17369 (0x43d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 27 00:30:13 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=7AA0F1DDFDF100696031781D9E57539DD6F1B457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:97:d8:d1:8c:47:46:e4:02:4f:2a:22:dc:
                    42:f4:39:db:2b:7e:b7:d1:20:b5:4a:b1:2a:2d:82:
                    a9:fe:74:b5:ff:70:c5:6f:e6:f1:7f:0d:20:4a:88:
                    de:be:25:72:f9:ca:ea:8c:8a:f1:ff:22:33:e8:56:
                    a8:0a:3c:ef:8a:e8:40:9a:6b:12:0c:9b:30:08:5b:
                    6d:f4:eb:9d:d2:49:db:ca:6b:da:cf:47:84:3a:36:
                    de:e2:21:e9:13:38:04:ae:4c:66:5e:c8:84:8e:77:
                    15:49:fc:d6:9e:13:39:4d:49:7a:4c:0f:a4:e5:c6:
                    04:ff:52:66:e9:de:d3:30:20:c2:2d:38:5e:d5:b5:
                    a3:39:cb:5d:93:b1:b9:de:e5:ac:20:be:8b:cb:11:
                    b7:d9:c4:03:c5:bf:64:b6:68:50:f5:5f:7b:b7:c7:
                    68:7e:10:e0:8f:6d:ae:d0:65:be:3a:89:73:7c:63:
                    16:28:31:c0:e1:e7:df:90:38:73:34:ed:a9:31:4b:
                    cc:7b:6a:21:4b:d0:34:bb:3a:94:7f:02:26:d7:11:
                    05:1c:82:cf:0c:7c:ef:86:01:0d:b0:f1:5e:92:e5:
                    6b:f6:2f:84:7a:be:01:e7:41:ca:33:ae:33:46:4c:
                    91:98:89:63:ff:14:9b:47:1e:bc:56:32:76:bd:da:
                    e9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A0:F1:DD:FD:F1:00:69:60:31:78:1D:9E:57:53:9D:D6:F1:B4:57
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eqDx3f3xAGlgMXgdnldTndbxtFc.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:16:20:9f:0c:7d:b6:30:7c:35:38:53:48:6c:69:4e:2c:
         1c:d5:09:67:87:69:e1:50:a0:72:f7:1c:cb:86:a7:69:80:87:
         af:96:61:7b:4f:6b:a5:f1:78:be:36:0e:a5:ef:02:42:38:13:
         e7:a0:b7:3b:17:94:2a:cc:41:55:6d:0f:67:ac:5b:97:de:17:
         84:72:4a:5e:1d:49:49:7a:b5:7f:f8:34:d8:de:3c:88:28:2a:
         57:b0:11:18:4e:cf:34:fe:b0:77:eb:e4:a3:e4:59:d5:aa:56:
         50:19:35:7e:0f:12:33:fa:00:ff:fb:10:df:db:6a:e7:17:9c:
         c8:91:a3:66:9a:42:2d:b5:14:5b:6b:fe:1a:6d:91:04:c8:95:
         7a:ea:0c:64:da:4c:3c:30:8e:2a:33:04:3d:ab:b1:36:3a:ed:
         39:67:9f:8d:8d:1c:6b:3c:59:3f:d1:d1:e2:b2:77:5e:dd:6a:
         10:b9:78:d7:63:90:9f:57:7e:df:a1:e0:40:f2:1d:ac:b7:b4:
         4a:e0:e3:ec:e4:ae:b8:a8:a4:e8:36:8d:67:5a:fa:f7:da:05:
         bf:e1:03:3d:2d:28:2a:2e:2a:3e:8d:ae:68:a4:84:91:66:54:
         ed:21:77:68:e9:71:8e:a2:ab:27:ce:00:33:f7:02:da:5a:09:
         fa:b8:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----