Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/n3PtK7c1IC47eXup9JXzv-8LgLs.roa
File:                     n3PtK7c1IC47eXup9JXzv-8LgLs.roa (raw, json)
Hash identifier:          /0vsR97q7hnbZhgiSLk+dwa+91fjudo0IrtuS7Ect88=
Subject key identifier:   9F:73:ED:2B:B7:35:20:2E:3B:79:7B:A9:F4:95:F3:BF:EF:0B:80:BB
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       48B6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/n3PtK7c1IC47eXup9JXzv-8LgLs.roa
Signing time:             Fri 27 May 2022 00:30:09 +0000
ROA not before:           Fri 27 May 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18614 (0x48b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 27 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=9F73ED2BB735202E3B797BA9F495F3BFEF0B80BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9f:2a:0b:09:88:8f:6e:36:02:64:9e:7e:f8:
                    aa:b2:0a:1c:a3:2f:f2:7e:c1:71:03:51:06:8d:0f:
                    50:6b:97:5e:ca:8a:fe:fd:15:8b:50:c0:91:f4:7a:
                    d4:a4:e8:2d:e6:51:c1:cb:41:cf:be:3e:48:b3:9c:
                    e2:0b:8b:df:d5:0b:8b:63:22:c7:7d:80:f1:c1:33:
                    e1:04:eb:b5:d7:0b:e9:a7:ca:77:35:67:c5:80:1e:
                    8c:0e:59:41:39:23:3f:10:7c:0e:ea:ab:7e:10:22:
                    f1:89:0c:c4:68:cd:0b:5d:9f:a2:f2:7d:a9:01:96:
                    a2:dc:35:49:7d:29:72:54:d6:e1:1d:47:ac:01:09:
                    69:ea:1d:9b:08:8e:7e:94:48:97:60:ca:51:e2:7c:
                    2f:5c:97:20:64:6e:fc:15:82:95:f6:70:c7:14:bb:
                    3f:f8:a4:87:22:99:1c:af:2e:f9:29:07:33:e1:10:
                    34:22:16:7f:de:89:1a:4f:6c:61:d5:9c:6a:56:c0:
                    94:5f:af:54:89:1c:c3:2c:9a:27:67:ba:bc:c1:29:
                    8f:e7:53:fe:5a:bc:22:1a:77:3d:71:fe:ab:90:b4:
                    6f:3b:2b:ee:e5:74:3e:c2:4c:9e:e0:fa:cb:5f:68:
                    77:57:b6:82:4f:4e:24:af:d3:46:ff:2c:a0:3c:33:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:73:ED:2B:B7:35:20:2E:3B:79:7B:A9:F4:95:F3:BF:EF:0B:80:BB
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/n3PtK7c1IC47eXup9JXzv-8LgLs.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:76:2e:28:0f:e8:a5:34:3f:dc:97:9d:e9:e2:20:89:b6:91:
         95:3c:8a:4d:55:13:50:6a:79:9f:79:dd:7b:1f:ec:7d:79:ac:
         87:7f:88:25:c6:79:b7:5d:60:b8:84:7a:af:91:08:82:2d:ad:
         51:d6:ca:d6:1f:41:00:43:de:c2:58:de:e6:a5:f6:a2:ec:c4:
         e8:8e:50:2f:d1:e6:cb:66:df:b6:b3:1d:fa:29:7f:51:5c:fd:
         df:9f:d5:7c:9c:e9:f8:98:00:d2:00:ce:d3:3a:8b:4f:63:52:
         20:44:0b:2e:da:9d:d2:46:a4:ff:ed:1e:b5:94:b5:e3:de:fa:
         da:b6:3d:81:7e:67:7a:84:14:16:7a:bb:2a:81:af:7e:3e:b0:
         4e:5e:03:03:bb:fa:a5:cf:e9:65:8d:6a:b4:e7:aa:e1:97:95:
         19:9f:ae:4f:90:a7:10:f5:8f:42:70:c6:9d:07:b5:5b:9a:dd:
         d9:8e:84:65:53:a6:b9:48:88:b5:39:7f:34:16:aa:fb:2c:0c:
         ba:f4:39:46:85:a8:73:37:56:a2:d9:4e:ad:0e:cc:31:7c:db:
         c8:52:5f:0a:1c:c2:88:88:a7:01:f8:7e:fb:4c:cb:30:01:8d:
         f7:aa:d5:a2:1b:a6:25:f6:6d:7b:4b:16:8e:dd:ff:62:5e:40:
         08:fa:b8:d2
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1Mjcw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDlGNzNFRDJCQjczNTIw
MkUzQjc5N0JBOUY0OTVGM0JGRUYwQjgwQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDenyoLCYiPbjYCZJ5++KqyChyjL/J+wXEDUQaND1Brl17Kiv79
FYtQwJH0etSk6C3mUcHLQc++PkiznOILi9/VC4tjIsd9gPHBM+EE67XXC+mnync1
Z8WAHowOWUE5Iz8QfA7qq34QIvGJDMRozQtdn6LyfakBlqLcNUl9KXJU1uEdR6wB
CWnqHZsIjn6USJdgylHifC9clyBkbvwVgpX2cMcUuz/4pIcimRyvLvkpBzPhEDQi
Fn/eiRpPbGHVnGpWwJRfr1SJHMMsmidnurzBKY/nU/5avCIadz1x/quQtG87K+7l
dD7CTJ7g+stfaHdXtoJPTiSv00b/LKA8M+PfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUn3PtK7c1IC47eXup9JXzv+8LgLswHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9uM1B0SzdjMUlDNDdlWHVwOUpYenYtOExnTHMucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AGl2LigP6KU0P9yXneniIIm2kZU8ik1VE1BqeZ953Xsf7H15rId/iCXGebddYLiE
eq+RCIItrVHWytYfQQBD3sJY3ual9qLsxOiOUC/R5stm37azHfopf1Fc/d+f1Xyc
6fiYANIAztM6i09jUiBECy7andJGpP/tHrWUtePe+tq2PYF+Z3qEFBZ6uyqBr34+
sE5eAwO7+qXP6WWNarTnquGXlRmfrk+QpxD1j0Jwxp0HtVua3dmOhGVTprlIiLU5
fzQWqvssDLr0OUaFqHM3VqLZTq0OzDF828hSXwocwoiIpwH4fvtMyzABjfeq1aIb
piX2bXtLFo7d/2JeQAj6uNI=
-----END CERTIFICATE-----