Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/lNStPzwJbGmHv0BchoYWYsCeP9c.roa
File:                     lNStPzwJbGmHv0BchoYWYsCeP9c.roa (raw, json)
Hash identifier:          +PTDWI7l9+xEsTakGG+Enq8AUF8AsipqwrvkvqS0z9I=
Subject key identifier:   94:D4:AD:3F:3C:09:6C:69:87:BF:40:5C:86:86:16:62:C0:9E:3F:D7
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       44A6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lNStPzwJbGmHv0BchoYWYsCeP9c.roa
Signing time:             Mon 14 Mar 2022 00:30:09 +0000
ROA not before:           Mon 14 Mar 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17574 (0x44a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 14 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=94D4AD3F3C096C6987BF405C86861662C09E3FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:e8:7e:23:f4:22:e0:e5:30:0e:db:6d:b9:
                    27:9d:39:4d:7f:ef:74:ad:a5:92:30:5a:3e:55:54:
                    ff:d0:7d:d6:e4:94:22:6f:d9:f0:65:8f:52:b2:46:
                    2a:c4:fc:8f:73:d5:40:98:af:49:cb:45:1f:d6:9b:
                    3c:bd:b9:51:0d:d8:3d:8e:31:22:6e:ce:d5:8b:a4:
                    7d:28:97:2a:b5:3f:1f:c5:08:26:29:56:2f:60:12:
                    16:09:a4:dc:b5:c3:6a:da:0a:36:05:38:71:0a:41:
                    f9:b2:5e:aa:50:5e:9f:56:1a:28:f1:0e:ed:77:d2:
                    31:3b:99:96:b9:44:58:6b:5f:17:f2:d6:b5:71:5f:
                    94:d6:3c:90:2b:7b:24:c3:f0:c6:b8:51:60:87:76:
                    ed:80:37:ec:43:53:dd:96:9f:5d:63:32:a8:a8:dd:
                    78:01:4a:f7:0f:5b:64:81:9f:ff:1f:59:3f:ac:7f:
                    e3:2f:49:71:95:ff:68:94:25:79:de:2c:22:1b:6a:
                    a1:eb:a1:61:a4:b9:35:85:0f:7e:40:88:f8:d5:75:
                    9c:eb:63:f4:18:e7:3f:01:f5:a4:d1:5a:b2:f0:90:
                    99:ad:bf:57:87:24:bb:41:79:80:e0:9f:fa:34:68:
                    20:8a:e0:f2:b1:d5:13:0e:2f:56:db:33:17:3d:ac:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D4:AD:3F:3C:09:6C:69:87:BF:40:5C:86:86:16:62:C0:9E:3F:D7
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lNStPzwJbGmHv0BchoYWYsCeP9c.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:14:0f:31:3b:8d:16:5c:31:eb:45:92:fb:6c:00:76:89:33:
         53:24:91:a9:d7:0a:86:26:94:cd:10:64:d6:b8:df:f0:0d:35:
         e6:e5:09:4f:73:8a:1b:ec:14:0f:38:95:90:bb:29:87:5b:ea:
         2f:7f:68:b1:60:fd:3f:1d:f5:b1:c5:9b:27:62:8c:0b:00:e3:
         b5:3d:04:28:a2:33:62:40:44:23:87:7f:68:91:a4:af:a0:3b:
         0d:8f:70:1a:a5:2b:5b:45:7c:b2:ff:2c:9e:6e:a2:44:20:a6:
         a2:74:6f:8a:5e:09:97:7c:ab:9b:82:96:de:fc:44:f1:b2:83:
         89:0c:74:ef:8f:66:d4:70:34:7a:ec:3a:e5:13:e6:13:e7:67:
         ba:f7:22:5a:1d:12:f1:62:a3:2e:4c:36:c0:a7:60:a0:b8:c7:
         a8:a8:12:8f:35:92:08:5f:ab:98:a8:3d:1d:3b:7b:8a:9e:3f:
         1b:41:27:25:11:03:80:42:4f:40:b3:48:84:a9:a1:3f:5e:68:
         d6:c9:e9:42:89:05:6f:b2:04:13:e6:e4:5d:81:73:1b:ca:82:
         35:b1:0d:2d:ad:65:51:70:9d:11:c4:6e:11:33:5f:58:d2:2b:
         cb:16:22:45:fb:c5:8a:74:09:1c:74:54:5f:c8:53:71:ea:1a:
         bf:0b:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----