Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/rsRQ9fntdx-uJVVCt575jOe3NTY.roa
File:                     rsRQ9fntdx-uJVVCt575jOe3NTY.roa (raw, json)
Hash identifier:          QaljjLGrHgd+QE3XSHdnFKtcmy3+BwNozVckA/kKTAU=
Subject key identifier:   AE:C4:50:F5:F9:ED:77:1F:AE:25:55:42:B7:9E:F9:8C:E7:B7:35:36
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       46BB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rsRQ9fntdx-uJVVCt575jOe3NTY.roa
Signing time:             Thu 21 Apr 2022 00:30:09 +0000
ROA not before:           Thu 21 Apr 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18107 (0x46bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 21 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=AEC450F5F9ED771FAE255542B79EF98CE7B73536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:0b:23:14:a8:a5:03:f5:44:f9:3f:87:4b:
                    d6:47:fe:7b:7f:0d:fe:09:03:08:99:26:c0:1d:0f:
                    93:b0:fb:55:bb:1c:47:5a:8e:50:a0:f0:bc:6e:ad:
                    b6:71:ae:27:72:34:8a:37:96:d1:bb:65:a7:0f:a8:
                    59:37:56:60:80:28:94:d6:78:59:df:a7:ae:cb:9c:
                    34:6c:ab:36:6a:80:73:cb:76:b2:5a:37:e8:b3:59:
                    5e:4a:2c:6a:20:75:27:37:97:f5:5a:25:8f:2a:6e:
                    91:dc:00:39:68:33:a4:58:75:31:7c:fe:2c:30:94:
                    b4:f6:13:eb:a6:5c:f8:8e:c7:69:1e:3b:ef:72:4e:
                    12:08:d8:70:e4:d4:69:a4:5a:5a:75:2e:60:38:08:
                    91:2a:23:fa:e8:76:e0:1a:07:fe:aa:2b:8b:6c:a0:
                    b1:38:ca:71:c6:42:15:c8:1d:0a:7b:eb:61:d7:99:
                    44:23:3b:bb:e2:74:f9:71:d7:76:b2:a5:d2:ec:d6:
                    96:c7:36:fd:cb:c4:09:6c:ed:74:ee:8e:b0:f9:25:
                    c7:00:36:4e:aa:01:72:b0:62:40:b8:eb:f9:bb:47:
                    c1:4d:2d:67:fb:51:8d:b1:86:6b:7a:88:2b:ff:66:
                    cb:31:51:b4:2b:dd:11:dd:ea:3e:1d:74:91:b9:fb:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C4:50:F5:F9:ED:77:1F:AE:25:55:42:B7:9E:F9:8C:E7:B7:35:36
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rsRQ9fntdx-uJVVCt575jOe3NTY.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:66:e2:8f:6b:18:32:24:c2:af:2b:15:b6:30:1e:09:6d:16:
         51:ce:5c:e9:06:d5:36:c5:53:ec:da:c1:34:cd:a5:8d:91:21:
         4c:16:96:e5:76:ab:b7:57:cb:c4:4f:44:8a:8e:50:09:f1:3c:
         c6:1a:3d:09:d2:3b:c8:cf:ab:79:e0:77:c1:21:92:f6:f2:aa:
         bf:58:6d:70:34:38:95:8b:6f:9e:a1:76:0f:9a:53:d0:01:82:
         c2:91:8e:07:e2:ba:6c:4c:cd:61:18:fa:77:98:4a:0b:6d:ad:
         f8:8a:d0:4d:8e:b1:a6:23:92:f6:62:d3:70:73:95:0a:f1:d6:
         43:c7:47:61:f9:57:b8:57:d6:1e:ac:a3:9a:ee:01:c6:76:bd:
         7f:ed:fb:63:c2:77:22:2f:14:19:c2:54:7c:0a:60:bb:26:f3:
         b7:bd:c3:fc:87:75:41:3b:85:65:ee:08:8a:4d:fa:2d:d6:ed:
         d5:af:a3:ff:31:19:44:2c:a7:a2:e6:31:66:81:6b:c3:32:43:
         57:96:c1:b1:54:40:e5:6d:7b:24:78:3b:7b:60:82:48:bd:f5:
         61:63:3e:10:e4:63:02:11:40:ab:51:5b:25:70:0b:3b:11:9e:
         38:ee:b4:28:d7:ec:0e:2f:7b:44:10:ed:41:5b:aa:ef:44:8e:
         9d:22:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----