Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uGtjSQwue-pqoyVEt3NDrEKn26U.roa
File:                     uGtjSQwue-pqoyVEt3NDrEKn26U.roa (raw, json)
Hash identifier:          B3Rf4WsjBHV6DtigpyoOL1Adm33L3gOIZRSKUAVwnhE=
Subject key identifier:   B8:6B:63:49:0C:2E:7B:EA:6A:A3:25:44:B7:73:43:AC:42:A7:DB:A5
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       46C6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uGtjSQwue-pqoyVEt3NDrEKn26U.roa
Signing time:             Fri 22 Apr 2022 00:30:06 +0000
ROA not before:           Fri 22 Apr 2022 00:30:06 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18118 (0x46c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 22 00:30:06 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=B86B63490C2E7BEA6AA32544B77343AC42A7DBA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:0e:49:f6:e7:c4:80:3e:48:db:a7:f3:13:
                    76:b2:e4:58:ac:69:e3:f3:c0:ca:1e:d9:74:5a:f0:
                    fb:42:a2:40:61:4a:d0:54:a0:58:30:2a:e5:4f:36:
                    81:4f:3f:75:86:da:1c:f6:06:73:1a:7f:2b:47:4c:
                    93:e8:66:f9:3a:5d:be:22:7f:39:58:2a:86:da:fc:
                    c2:39:f7:0d:47:31:96:c7:74:3e:79:b2:23:7d:79:
                    76:02:29:2e:ee:f7:53:31:26:f6:83:f1:c5:cc:b4:
                    03:c4:1c:26:1e:c3:cd:39:53:31:9e:df:d0:ee:5a:
                    aa:89:af:c0:f5:47:0d:36:83:7e:d8:25:cf:33:e8:
                    7d:c7:46:5c:3c:bc:74:28:9c:87:b0:01:0e:d8:d5:
                    fe:88:bd:b7:84:51:76:4d:6f:d7:07:7c:b6:df:99:
                    67:63:08:1a:e5:af:38:13:5a:8c:3b:dd:43:55:9d:
                    9e:2f:69:b2:7e:9f:01:22:9d:ce:0e:b1:8b:24:62:
                    16:fc:5d:26:bc:8a:58:13:2d:06:89:88:81:f9:57:
                    49:62:d9:84:0f:6b:07:9c:26:c7:74:7e:a2:2c:78:
                    de:1a:1e:8d:5d:95:bd:e9:c5:2e:f7:2a:c0:db:b2:
                    dc:75:d8:61:41:2b:b1:44:0d:92:d9:30:e7:10:0f:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6B:63:49:0C:2E:7B:EA:6A:A3:25:44:B7:73:43:AC:42:A7:DB:A5
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uGtjSQwue-pqoyVEt3NDrEKn26U.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:29:32:c5:3c:f1:12:27:9e:81:9b:9c:97:aa:6c:8b:bf:f8:
         03:3e:ab:97:79:b9:22:b7:f8:6a:05:3c:bc:f9:87:fc:f4:01:
         34:74:60:37:63:f5:95:75:f7:95:12:d9:87:11:f1:5b:6d:f8:
         ee:b2:0d:b1:9f:75:0c:8c:7d:72:40:50:1c:7f:04:3f:e8:74:
         a2:17:ed:cf:ab:ff:60:29:25:8d:79:ea:79:a7:48:31:8c:0b:
         4d:c1:f9:a3:ab:5d:28:70:2d:20:43:04:22:6c:90:17:dc:84:
         2c:17:9f:2a:33:ad:70:d2:e7:f7:0b:2b:a8:27:6d:f0:65:76:
         0b:c1:3a:bb:05:c6:1a:85:42:65:30:69:af:12:99:4c:63:50:
         d1:3a:12:97:b4:d6:0b:b7:7b:a9:d4:0d:50:05:7b:de:ad:77:
         bc:ff:e4:3f:08:e0:fb:63:e4:5d:4b:69:ef:a8:b1:11:e8:80:
         63:28:d3:38:fc:17:27:b9:84:c5:c6:5b:48:e2:84:31:29:52:
         54:32:90:a4:9d:14:17:73:a6:59:65:49:d3:f3:45:f0:2c:ba:
         5d:6b:2b:9e:03:66:70:98:76:c4:c2:9e:50:ff:ca:61:43:9b:
         e3:3a:ec:8c:50:1b:0a:ef:45:ab:d6:ba:9c:99:6c:e5:80:48:
         c2:41:02:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----