Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wF1Atr6CRCMRUf1zFHTR8rVaX5o.roa
File:                     wF1Atr6CRCMRUf1zFHTR8rVaX5o.roa (raw, json)
Hash identifier:          n1SgZJmXL/BjQpQsID9FFCeA5L7c5Q3pdMgR9eAFEXU=
Subject key identifier:   C0:5D:40:B6:BE:82:44:23:11:51:FD:73:14:74:D1:F2:B5:5A:5F:9A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       45CD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wF1Atr6CRCMRUf1zFHTR8rVaX5o.roa
Signing time:             Mon 04 Apr 2022 00:30:07 +0000
ROA not before:           Mon 04 Apr 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17869 (0x45cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  4 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=C05D40B6BE8244231151FD731474D1F2B55A5F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:fb:03:aa:9f:a2:70:14:f8:29:84:c7:a5:
                    f4:40:d2:98:fc:99:89:51:3f:61:ce:c7:e3:96:aa:
                    84:29:49:13:22:ce:bf:84:72:1d:f3:a9:ce:e2:b4:
                    e2:29:03:7c:19:aa:ed:25:de:0d:94:a6:0e:bc:a1:
                    8d:9a:19:b2:ac:c8:df:4e:4f:6d:09:f4:18:97:9c:
                    c8:26:2c:bd:1f:75:7e:d7:ec:18:d4:cc:b1:f7:57:
                    9f:35:e4:25:28:bb:4e:fb:db:28:37:a8:45:b5:49:
                    ae:0c:7f:96:cd:2a:ef:db:f8:b7:5f:d0:ea:4a:b8:
                    91:36:6d:cd:78:b2:b0:33:29:8a:2c:61:76:8b:26:
                    1a:c4:4d:40:18:59:eb:be:b1:e6:12:3b:4a:11:75:
                    ec:c2:6a:ba:4a:52:78:83:8a:82:f7:28:03:a3:d2:
                    8a:94:60:20:d7:80:15:8f:8b:4b:19:74:35:c0:db:
                    b3:31:01:9d:dd:60:7b:6b:a1:9b:9f:eb:a8:de:20:
                    b5:0f:c2:6f:ba:0a:1a:0a:c6:e4:a3:1e:d3:42:b9:
                    40:c0:ee:4e:0e:25:12:70:ec:3f:77:46:87:39:72:
                    5d:52:55:d5:17:22:c3:0e:30:d8:79:70:bb:a5:5a:
                    df:22:43:e9:75:4b:ab:58:6f:ad:cf:a3:3a:69:dc:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5D:40:B6:BE:82:44:23:11:51:FD:73:14:74:D1:F2:B5:5A:5F:9A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wF1Atr6CRCMRUf1zFHTR8rVaX5o.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:63:3d:1b:ab:16:d3:8f:78:7d:b9:b5:b0:ff:81:4e:36:
         8f:dd:1e:6e:0a:ca:3c:1a:4c:8b:5a:e6:de:52:8d:0e:1c:c8:
         4b:5b:0b:e6:78:15:aa:67:11:81:10:68:0d:c2:a2:1d:22:0b:
         fc:4b:83:69:d8:f8:f0:c2:5e:67:08:57:b5:fc:cb:a8:84:91:
         a1:3f:10:3e:7c:58:3d:3f:f7:2f:46:2a:60:ff:45:eb:ac:bd:
         f0:07:a9:c8:0a:5c:8d:35:2f:cd:1e:5f:f2:4a:d1:56:4b:27:
         72:94:68:91:4e:36:d7:e3:53:6f:be:53:ad:8d:77:bf:7e:2c:
         5a:1d:2e:e4:49:bd:82:54:34:49:82:56:37:3d:22:d0:52:89:
         81:fd:48:a2:67:dc:a3:57:50:8a:30:d6:63:ef:8a:40:18:6e:
         96:2d:f6:80:94:36:34:88:28:56:19:65:0c:23:d2:5c:e9:92:
         21:7e:53:1f:ae:6c:4a:54:80:e9:d9:7c:68:be:01:42:ef:4a:
         7f:2d:a3:3d:09:c7:9a:04:50:e2:9a:86:a9:9e:a4:85:02:ea:
         59:f4:2a:6c:62:ba:ab:26:14:21:91:8d:8b:ef:c7:25:09:c6:
         20:99:89:c3:ad:ef:12:41:8b:d5:45:fa:a8:89:57:f1:ac:63:
         5e:71:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----