Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/hK4B8zGB1JOFDszylWlTZgzOOoI.roa
File:                     hK4B8zGB1JOFDszylWlTZgzOOoI.roa (raw, json)
Hash identifier:          DnPDgKRTOUFoaCm+poAdGNbQvNz4JnJTxoo6iX5MTNM=
Subject key identifier:   84:AE:01:F3:31:81:D4:93:85:0E:CC:F2:95:69:53:66:0C:CE:3A:82
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       431A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hK4B8zGB1JOFDszylWlTZgzOOoI.roa
Signing time:             Sun 13 Feb 2022 00:30:09 +0000
ROA not before:           Sun 13 Feb 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17178 (0x431a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 13 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=84AE01F33181D493850ECCF2956953660CCE3A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:b4:56:d4:ee:58:20:70:68:00:3e:0b:01:
                    3a:d2:f5:f2:95:3f:a8:2b:2b:8b:11:04:10:4a:31:
                    69:60:9f:11:01:7c:f1:33:12:1a:34:11:5d:86:cd:
                    9a:6e:93:73:17:07:eb:62:23:a0:24:f0:ff:ed:c7:
                    11:4c:6c:96:c2:20:2d:14:aa:f3:2d:52:02:3a:a2:
                    c1:ac:a0:88:a7:7e:61:11:b8:c4:3e:4f:5c:35:81:
                    5a:05:07:3f:16:b9:c2:a8:be:94:89:1b:b6:84:fc:
                    01:42:51:8c:58:9d:d2:8a:50:ce:1f:5f:8d:18:3e:
                    61:3e:87:26:28:2d:be:45:04:50:1c:60:bc:be:92:
                    02:71:fb:d2:19:42:6e:6f:f9:ee:5b:85:81:37:a6:
                    0e:51:99:fa:88:7e:14:75:b4:04:bd:04:40:a3:e3:
                    4c:d5:5e:41:c5:5c:42:b0:db:00:54:41:24:e5:ad:
                    37:23:ec:34:d0:bb:25:6f:97:55:48:5a:41:bb:4b:
                    3f:75:7b:e7:54:46:89:fd:1c:11:e4:90:ed:fe:9c:
                    00:6f:23:2d:09:a1:ff:ef:0d:d8:23:43:be:3d:ed:
                    ff:e7:42:e0:67:46:2d:b0:c0:3d:ed:7f:b1:a8:ca:
                    b5:71:4a:5f:ab:17:88:73:22:13:f5:dc:83:4f:91:
                    e4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AE:01:F3:31:81:D4:93:85:0E:CC:F2:95:69:53:66:0C:CE:3A:82
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hK4B8zGB1JOFDszylWlTZgzOOoI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:d5:87:d8:9a:b9:5d:8d:aa:45:dc:84:c8:82:0c:15:73:69:
         5e:7a:c9:c9:29:3b:bb:d1:10:0a:01:9a:57:3f:c4:d0:5b:5c:
         38:56:be:9f:ab:47:4a:ed:40:83:5a:44:ca:2c:ec:4c:03:fa:
         4c:42:1a:c6:02:cc:97:c7:1c:5e:cd:f4:00:ca:5b:05:7e:0f:
         c9:a8:ef:16:77:af:88:73:1d:d7:e7:e9:26:b1:ee:ed:b5:3c:
         67:3f:d0:e1:b8:19:02:21:c4:17:d6:82:65:38:a1:22:31:94:
         b7:6c:96:8c:02:cd:b5:93:cc:15:82:ae:bd:ba:b1:81:ce:4e:
         d4:a4:9b:6d:f0:f1:5f:bb:b9:fc:27:82:06:23:eb:61:ca:61:
         5a:35:8d:d8:f1:28:db:28:18:7b:73:33:27:90:04:f5:29:9a:
         42:7d:d5:48:35:f9:2f:5b:1d:9c:e0:6e:d4:7c:2f:35:37:7d:
         ef:51:ec:db:9a:af:0e:b7:86:51:29:03:50:82:36:51:0e:37:
         e6:12:70:ff:07:55:c4:cc:d5:c4:13:22:59:8a:ab:9e:26:59:
         c4:ef:0e:a2:49:37:8b:da:f9:97:d7:3a:c1:bb:70:29:06:77:
         68:70:7d:38:0f:93:f8:4a:f5:37:57:76:fc:cd:9a:52:f9:14:
         aa:fd:88:08
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQxowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMTMw
MDMwMDlaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDg0QUUwMUYzMzE4MUQ0
OTM4NTBFQ0NGMjk1Njk1MzY2MENDRTNBODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZ5LRW1O5YIHBoAD4LATrS9fKVP6grK4sRBBBKMWlgnxEBfPEz
Eho0EV2GzZpuk3MXB+tiI6Ak8P/txxFMbJbCIC0UqvMtUgI6osGsoIinfmERuMQ+
T1w1gVoFBz8WucKovpSJG7aE/AFCUYxYndKKUM4fX40YPmE+hyYoLb5FBFAcYLy+
kgJx+9IZQm5v+e5bhYE3pg5RmfqIfhR1tAS9BECj40zVXkHFXEKw2wBUQSTlrTcj
7DTQuyVvl1VIWkG7Sz91e+dURon9HBHkkO3+nABvIy0Jof/vDdgjQ7497f/nQuBn
Ri2wwD3tf7GoyrVxSl+rF4hzIhP13INPkeTBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUhK4B8zGB1JOFDszylWlTZgzOOoIwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9oSzRCOHpHQjFKT0ZEc3p5bFdsVFpnek9Pb0kucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AKPVh9iauV2NqkXchMiCDBVzaV56yckpO7vREAoBmlc/xNBbXDhWvp+rR0rtQINa
RMos7EwD+kxCGsYCzJfHHF7N9ADKWwV+D8mo7xZ3r4hzHdfn6Sax7u21PGc/0OG4
GQIhxBfWgmU4oSIxlLdslowCzbWTzBWCrr26sYHOTtSkm23w8V+7ufwnggYj62HK
YVo1jdjxKNsoGHtzMyeQBPUpmkJ91Ug1+S9bHZzgbtR8LzU3fe9R7Nuarw63hlEp
A1CCNlEON+YScP8HVcTM1cQTIlmKq54mWcTvDqJJN4va+ZfXOsG7cCkGd2hwfTgP
k/hK9TdXdvzNmlL5FKr9iAg=
-----END CERTIFICATE-----