Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/kaTvrnsgZ0DiiREO07kf832dibI.roa
File:                     kaTvrnsgZ0DiiREO07kf832dibI.roa (raw, json)
Hash identifier:          WNfFANAgcjuKjBOa3OLs5LVgYMNMEBVcz4cxSJ5seY4=
Subject key identifier:   91:A4:EF:AE:7B:20:67:40:E2:89:11:0E:D3:B9:1F:F3:7D:9D:89:B2
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4560
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kaTvrnsgZ0DiiREO07kf832dibI.roa
Signing time:             Sun 27 Mar 2022 00:30:09 +0000
ROA not before:           Sun 27 Mar 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17760 (0x4560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 27 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=91A4EFAE7B206740E289110ED3B91FF37D9D89B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:b9:82:39:cb:a9:7d:e4:50:07:e7:7f:94:
                    7a:22:b5:fb:7e:fb:5c:60:e8:80:7b:84:3a:a4:3d:
                    87:cd:f2:75:02:56:39:d5:2f:81:ca:21:c7:53:73:
                    53:66:09:a3:09:42:91:b3:c7:9b:6b:01:a6:12:b6:
                    62:fe:a0:61:02:66:9c:16:42:b1:88:53:1b:a0:d2:
                    69:3f:c6:d7:13:ab:1b:ac:4b:b0:82:9d:bd:32:a2:
                    f3:f2:9f:69:ca:01:c2:3c:58:bd:10:b8:44:ef:a2:
                    e7:3c:cd:8c:7d:b1:90:5e:3c:ef:a7:a4:e7:fc:09:
                    f0:76:2a:a4:0f:5d:93:b6:d1:e5:4b:77:ce:c9:74:
                    98:4c:a0:84:98:be:ba:b1:0b:c4:79:43:a1:56:1b:
                    61:1a:bf:7b:24:13:02:50:92:6e:2e:a1:38:d3:e2:
                    67:a5:e7:37:d9:d2:dc:b2:b4:b9:86:06:67:b8:d0:
                    1d:d8:66:5e:cc:07:5c:87:e2:27:7f:6d:27:14:68:
                    0f:88:6a:d5:3e:b2:61:74:17:03:ea:ba:47:61:4b:
                    6c:97:1e:e3:b4:78:cd:a6:7b:70:9d:70:cc:a4:4d:
                    87:82:34:7c:bb:03:2b:e1:9b:d3:00:8d:7c:76:4d:
                    96:76:42:c7:61:23:d8:7b:37:74:9d:cb:55:52:3e:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A4:EF:AE:7B:20:67:40:E2:89:11:0E:D3:B9:1F:F3:7D:9D:89:B2
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kaTvrnsgZ0DiiREO07kf832dibI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:bb:a8:85:1a:90:f5:a3:17:25:71:81:99:46:bc:3e:b9:bb:
         54:9b:18:92:ab:0d:aa:32:0c:b0:fa:53:97:f1:03:dd:24:db:
         63:d1:b6:96:9d:13:e1:ab:a9:1f:df:9b:2e:fb:b0:2d:69:9f:
         a5:6f:61:60:1e:c8:ba:b0:ad:eb:d8:1f:93:a3:4e:aa:a9:39:
         f8:08:78:6f:f5:55:ef:c3:40:f3:15:c4:46:d8:6e:27:e0:e3:
         ad:7c:d2:b4:d3:db:64:76:47:91:b1:3e:d5:e8:5d:f8:bf:cd:
         21:75:ed:e5:48:f0:e5:4e:0f:8a:50:34:e3:31:f9:e0:9f:84:
         7d:88:8c:bd:90:04:94:bf:21:44:bc:16:07:8c:86:68:58:1f:
         23:34:e7:71:29:ce:d8:3e:b0:36:ba:97:76:2e:6f:b8:0d:3c:
         78:d9:f6:ba:94:a6:15:c9:93:53:ae:7d:9d:61:ce:2a:3d:cb:
         7d:66:72:58:5f:26:a4:16:fe:95:26:2f:24:e5:b9:9d:07:8d:
         5c:3a:bf:ba:48:71:94:7a:4a:87:73:84:83:10:b6:87:a4:a2:
         c6:b1:9a:84:97:45:ca:1a:9a:c6:80:49:24:c4:47:bb:78:f0:
         8d:aa:55:55:be:b8:db:93:f5:18:81:0a:6d:eb:63:dc:dd:f9:
         b8:f1:82:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----