Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pogbsYZpGwjAtimY0Eb2raykrPI.roa
File:                     pogbsYZpGwjAtimY0Eb2raykrPI.roa (raw, json)
Hash identifier:          eK9Vi5EZxiWsVkxc/vawgY3+pgbtPxlK/9vQNkxGihc=
Subject key identifier:   A6:88:1B:B1:86:69:1B:08:C0:B6:29:98:D0:46:F6:AD:AC:A4:AC:F2
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43AF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pogbsYZpGwjAtimY0Eb2raykrPI.roa
Signing time:             Thu 24 Feb 2022 00:30:08 +0000
ROA not before:           Thu 24 Feb 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17327 (0x43af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 24 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=A6881BB186691B08C0B62998D046F6ADACA4ACF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:18:be:64:98:33:05:0f:f5:35:9a:0b:07:37:
                    f2:eb:f8:7f:f8:88:69:9f:1b:8b:ad:b2:ba:f7:86:
                    9b:1e:15:1c:a2:96:9f:b3:a8:29:7e:14:30:f5:f0:
                    3e:15:cd:12:cc:15:f1:58:d6:9b:6d:d2:0e:ec:8c:
                    2e:1a:8c:06:d8:fc:30:2d:bf:12:c8:8d:be:3b:33:
                    7d:eb:61:e5:e2:58:a9:eb:1e:20:46:94:6b:04:f0:
                    52:62:e8:5a:64:5a:2a:7a:02:e9:69:ae:f2:9d:38:
                    09:e7:3c:02:5b:07:b2:52:1f:d5:b7:75:13:d6:54:
                    36:57:2f:48:97:06:c5:be:3a:9d:03:45:03:cc:f3:
                    de:55:27:65:fb:d0:54:7d:9e:cb:89:64:5d:e8:47:
                    72:87:79:2e:d2:d6:cf:85:aa:6b:b2:ab:bd:b7:35:
                    8e:54:25:98:67:a2:d0:ec:e4:2b:8d:4a:01:3c:5e:
                    1b:d7:87:01:d3:11:23:ea:c7:34:1f:cd:82:79:bb:
                    a0:46:e0:27:da:1b:1f:d7:54:c4:13:1d:40:f9:15:
                    84:63:fb:e4:58:89:92:c3:a0:e5:77:ae:c7:4b:c6:
                    de:5a:68:32:c9:4a:b7:31:fd:ea:bd:a5:42:70:9e:
                    56:25:26:f3:62:55:ca:17:2a:b9:b6:9f:d6:31:58:
                    cf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:88:1B:B1:86:69:1B:08:C0:B6:29:98:D0:46:F6:AD:AC:A4:AC:F2
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pogbsYZpGwjAtimY0Eb2raykrPI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:be:f5:42:02:6b:4e:8e:df:ec:9a:db:83:e0:6c:23:b2:0c:
         e5:42:84:b6:98:4a:b2:86:a5:28:fc:9b:eb:73:0b:43:a5:5f:
         8a:98:82:45:ad:56:60:44:00:be:cd:3c:3d:4b:41:45:8a:d6:
         20:76:bf:2d:b9:19:86:f4:18:d0:55:06:a7:f8:6b:23:be:8f:
         5b:26:2f:00:5b:0c:7f:a5:b1:db:f7:69:56:0e:91:93:d6:a0:
         08:e4:52:ea:4d:d8:3f:b1:5c:a4:13:20:93:f1:17:8e:0a:24:
         4a:8f:cc:3f:e7:c8:32:31:3b:c2:1f:dd:18:48:d9:09:f6:0b:
         a5:6d:31:42:a5:da:cd:6c:4a:f2:2f:de:0b:a9:68:da:fc:ba:
         bf:c2:a1:e5:4c:47:ff:70:31:a1:72:74:7b:43:46:5b:d1:0d:
         f8:f6:ea:26:cb:c3:9b:c6:ad:a7:a6:cb:16:f7:a7:e1:d7:79:
         12:59:ca:c0:64:a8:59:81:15:55:d2:eb:e0:b4:13:31:ae:7a:
         dc:93:99:a2:f6:67:69:2f:d2:f4:b4:d6:4d:a4:76:4c:57:98:
         b6:fb:82:6d:5c:af:05:ab:77:6e:7c:1e:ca:64:ec:cd:dc:07:
         33:36:28:af:2f:93:89:d3:c3:f8:62:d5:f0:96:ba:89:9e:44:
         8e:59:b8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----