Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ipgDVSPRwiWnVvZslSIVmjc6XTs.roa
File:                     ipgDVSPRwiWnVvZslSIVmjc6XTs.roa (raw, json)
Hash identifier:          qYypWZLUeHR28kLap+4dqVW2t/aVJ8i4wJUqIQQ8aik=
Subject key identifier:   8A:98:03:55:23:D1:C2:25:A7:56:F6:6C:95:22:15:9A:37:3A:5D:3B
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       45C0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ipgDVSPRwiWnVvZslSIVmjc6XTs.roa
Signing time:             Sun 03 Apr 2022 00:30:10 +0000
ROA not before:           Sun 03 Apr 2022 00:30:10 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17856 (0x45c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  3 00:30:10 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=8A98035523D1C225A756F66C9522159A373A5D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c9:41:45:21:8e:8f:f1:5e:9e:18:48:a4:d5:
                    fb:96:f0:90:fe:74:df:fd:16:43:b1:e8:42:a0:0e:
                    36:f9:31:b5:53:5f:52:4c:f2:c5:e3:8f:52:e2:91:
                    d9:02:6b:c0:cf:95:58:24:69:fb:44:32:ac:ed:98:
                    64:49:24:5c:b1:d7:cb:81:88:f9:a7:8e:17:ff:37:
                    73:10:0c:1f:2d:d0:6e:aa:ed:fd:15:5b:8b:c9:17:
                    ee:dc:bf:9d:56:10:7d:c1:4e:b8:a4:e7:36:b6:35:
                    6c:26:4c:d8:45:4e:48:8d:c9:0a:46:3a:f6:78:36:
                    18:3a:83:b1:bc:d4:fe:f1:c9:de:1f:d6:6f:b2:fe:
                    05:3d:9b:77:c5:55:70:e5:47:68:7d:7a:36:29:81:
                    e7:87:fa:5b:cf:c8:e3:df:92:43:2e:f1:41:b8:ff:
                    6e:45:97:cc:2c:35:fe:17:87:ad:0e:94:1a:c1:0a:
                    3c:78:5f:2e:9f:51:78:96:f9:42:df:0f:f2:50:a1:
                    14:e0:6c:c4:b5:b2:e4:76:7f:b7:14:32:95:4e:81:
                    f5:40:cf:2b:eb:d0:7c:80:42:89:42:62:c3:af:0b:
                    f2:1b:e2:8c:81:c3:14:35:21:20:60:87:3d:6d:07:
                    d7:d1:f9:bd:bc:8f:16:be:8a:90:d2:35:fd:e5:94:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:98:03:55:23:D1:C2:25:A7:56:F6:6C:95:22:15:9A:37:3A:5D:3B
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ipgDVSPRwiWnVvZslSIVmjc6XTs.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:2e:d4:b8:0f:e9:c6:be:a1:b1:54:61:25:bb:8d:a2:a9:
         fe:20:c3:50:bd:ac:f1:d1:49:d0:d3:db:37:8f:3e:e0:12:6b:
         c7:99:51:1d:76:13:16:f6:d1:0c:95:b5:29:e5:49:71:2d:b5:
         bc:8e:82:50:06:d7:99:ae:1d:07:26:fa:f2:45:1c:65:c8:dd:
         28:d6:5e:ba:83:f9:4c:2c:97:dc:7f:28:59:79:ee:68:c5:ae:
         c5:3f:f4:5b:05:25:5e:9b:d2:d7:05:8e:ae:4d:74:12:2d:cb:
         87:b6:97:4f:59:71:2f:74:03:c1:12:50:9a:db:bf:11:74:d1:
         dd:d2:4b:dd:2b:b4:39:51:6a:a1:b8:04:17:63:ab:8b:3c:a5:
         c7:0b:4e:8f:41:16:a6:79:2e:bc:63:78:59:4e:d1:81:50:0d:
         6d:43:87:22:bb:c9:41:f7:de:11:bc:b6:7e:7a:75:76:78:c5:
         7e:ea:4a:44:1d:ef:e2:4f:ac:9b:d4:cb:1c:da:52:3a:33:22:
         bb:62:c4:2d:7e:5c:0c:25:b7:41:5d:ca:6f:6d:27:63:31:44:
         a8:ab:4a:2d:bb:84:04:97:2d:8b:8e:ba:b9:f9:06:49:79:13:
         09:b7:d5:c5:58:65:78:26:a9:da:f9:ba:eb:b1:f3:c3:f2:88:
         ae:7f:69:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----