Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jstGYHxQ2ShxAnhMx2nyGeYvMaA.roa
File:                     jstGYHxQ2ShxAnhMx2nyGeYvMaA.roa (raw, json)
Hash identifier:          V59lHQ+GPIkbgelHijEeudlQDm8dEqycm7j3kvS4mnY=
Subject key identifier:   8E:CB:46:60:7C:50:D9:28:71:02:78:4C:C7:69:F2:19:E6:2F:31:A0
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4612
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jstGYHxQ2ShxAnhMx2nyGeYvMaA.roa
Signing time:             Sat 09 Apr 2022 00:30:09 +0000
ROA not before:           Sat 09 Apr 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17938 (0x4612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  9 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=8ECB46607C50D9287102784CC769F219E62F31A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:f1:cb:65:44:e3:37:22:c1:4f:0a:3a:fa:
                    06:53:33:85:08:fe:32:c2:61:e5:b6:25:7d:90:e7:
                    49:8c:81:02:97:30:a1:3c:f6:0a:1b:81:41:06:36:
                    b2:fe:7f:f3:84:72:64:27:1f:4b:ba:85:7d:c5:5b:
                    d1:f1:81:bf:e4:80:a5:17:26:21:a4:a9:82:da:87:
                    9f:29:7d:50:7e:96:42:b3:0e:83:ca:80:d7:db:79:
                    9b:ea:40:5c:e7:c3:b7:fa:5f:e6:8f:9d:76:4a:d6:
                    1c:10:22:08:3c:a1:e5:73:ec:92:a0:d2:32:53:f1:
                    5f:de:8d:18:6b:67:e4:b3:d9:49:8e:e8:33:65:2e:
                    76:8f:71:32:5e:b7:0a:c7:6b:39:48:3e:de:ab:cd:
                    9c:5a:4f:ce:61:1f:bf:3f:76:50:8f:62:89:2e:ef:
                    21:40:d0:a4:05:ac:b4:91:10:33:34:f5:48:26:2b:
                    71:96:cb:94:ac:fa:38:33:d0:b7:ce:48:ea:93:85:
                    81:c5:19:cd:66:fe:3f:35:f5:84:bd:e6:44:ad:f1:
                    33:0f:79:46:5b:33:11:70:1c:48:f8:d5:70:cd:63:
                    a0:a2:90:6c:cd:f1:47:cb:09:67:8c:a4:2f:7b:43:
                    b7:08:93:9a:1b:13:71:b1:01:3a:91:7d:61:38:f7:
                    58:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CB:46:60:7C:50:D9:28:71:02:78:4C:C7:69:F2:19:E6:2F:31:A0
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jstGYHxQ2ShxAnhMx2nyGeYvMaA.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:8f:eb:e4:92:e7:70:cc:ae:d0:bd:2c:eb:90:f1:e6:a0:
         64:73:7d:54:89:e2:e1:f4:f7:02:53:ba:67:94:e2:9f:5e:a1:
         aa:9f:29:ce:4e:e3:5e:dd:f3:0b:e5:32:75:0b:74:cd:aa:ac:
         5f:ec:d7:8c:47:72:3d:4a:35:ab:71:41:90:b8:ed:ab:02:1d:
         85:a2:78:f5:d8:eb:8f:f2:a8:ad:4a:39:6a:1f:81:15:e0:9f:
         27:58:bf:ae:6c:7f:c4:46:d8:3f:1d:44:9c:d9:c1:e7:a3:63:
         fc:98:b5:82:86:63:9e:e8:03:91:32:b0:55:d1:77:40:3b:62:
         70:fc:04:92:7a:35:7c:31:0e:33:cd:17:da:11:1a:ea:69:6f:
         23:c0:37:c0:1e:fa:3e:e3:e6:b0:53:ea:a7:3e:b3:69:14:9b:
         be:ab:3e:21:2c:3a:fd:8f:c6:e8:b6:5f:79:3a:7c:71:6a:b7:
         f6:d5:d0:81:87:1b:5d:a3:48:b2:8b:f4:2b:a2:32:a1:7b:6d:
         44:e4:e1:f9:5f:2d:83:53:88:ae:3b:53:ae:96:bf:e0:ef:1b:
         e2:da:74:27:f8:a3:e9:10:64:01:99:ff:9d:5c:76:27:00:56:
         03:85:c4:c9:78:7f:e3:61:db:92:a7:08:b7:21:9d:42:b0:e2:
         98:03:43:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----