Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wzlnc_gNpEsM6XqV6RYf89OO2Wo.roa
File:                     wzlnc_gNpEsM6XqV6RYf89OO2Wo.roa (raw, json)
Hash identifier:          LBC1+PqVmonihM1AdhPcKdlomHtVCcdfhfFf2j+f0e8=
Subject key identifier:   C3:39:67:73:F8:0D:A4:4B:0C:E9:7A:95:E9:16:1F:F3:D3:8E:D9:6A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       45F6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wzlnc_gNpEsM6XqV6RYf89OO2Wo.roa
Signing time:             Thu 07 Apr 2022 00:30:08 +0000
ROA not before:           Thu 07 Apr 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17910 (0x45f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  7 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=C3396773F80DA44B0CE97A95E9161FF3D38ED96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:d3:36:3b:9d:98:55:04:6a:d0:3e:30:80:
                    a9:24:66:89:1c:03:09:2f:28:6f:ff:cc:73:78:e3:
                    a5:bc:12:31:07:de:a7:a2:ac:3f:87:3e:e3:cd:17:
                    a0:d8:8f:26:be:12:03:ff:97:6e:2f:e8:62:29:cd:
                    54:86:f5:40:17:b5:31:35:ea:b0:41:04:bb:0e:da:
                    bc:5e:26:73:e7:79:ab:0c:ce:97:0c:95:c6:be:d6:
                    1e:7e:d1:90:a8:49:16:c4:f4:ec:3d:cb:95:2b:a3:
                    b3:d8:46:bf:e8:4c:9a:c8:69:0d:df:21:a2:0d:78:
                    9b:c0:bf:4a:e5:63:d7:33:18:6a:e5:a7:df:a7:0f:
                    41:79:0a:38:a4:cf:a7:6c:5f:ba:17:5d:69:99:22:
                    04:71:5e:7e:19:c3:ff:f1:3e:d1:47:95:1e:27:62:
                    dc:04:13:e1:57:c3:17:86:2f:be:a7:fc:e5:c3:6c:
                    59:d0:c1:0a:e4:f7:98:e7:07:94:97:ec:aa:29:8d:
                    2e:e5:58:77:6e:48:61:cf:b2:76:ac:30:b4:94:ae:
                    08:90:2d:e8:e1:26:5e:fd:7e:16:9d:90:a5:ad:a5:
                    6c:ae:96:04:d9:cf:cb:9b:89:23:e1:ce:15:5c:da:
                    1b:96:91:85:0f:15:8b:f6:54:3c:29:3d:e2:09:bd:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:39:67:73:F8:0D:A4:4B:0C:E9:7A:95:E9:16:1F:F3:D3:8E:D9:6A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wzlnc_gNpEsM6XqV6RYf89OO2Wo.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c2:39:ee:71:bd:0a:d6:0b:a7:d7:28:38:b8:6b:ec:a3:38:
         ba:60:83:e6:78:cb:c4:c9:8d:a5:a4:31:8a:c6:a5:1e:fa:87:
         33:c9:c2:c2:d2:67:9a:21:0b:79:53:9f:00:5d:51:8d:d4:c4:
         7a:a4:b9:3f:ad:08:6a:f0:dc:c1:5f:44:58:70:41:51:cd:04:
         41:fa:cc:4c:9b:27:91:cc:06:4d:7f:92:51:00:ad:a6:47:b6:
         dc:6a:e1:c2:a0:a2:c3:d6:d9:f6:17:8e:1d:90:d5:8c:4e:6a:
         01:cb:85:cb:b9:fa:f0:e2:33:66:16:3d:66:db:78:40:d5:87:
         8e:fb:2c:c4:58:52:f3:fe:8b:94:9a:93:d0:18:40:44:25:f8:
         b3:11:46:ac:29:83:6c:56:2f:28:01:dd:a6:3d:87:f9:7e:ff:
         6d:2e:69:e8:51:90:9e:4a:95:fa:b1:a3:60:1b:b0:c7:16:1e:
         15:e1:f6:43:23:7e:b9:0d:7d:b3:c9:33:01:ce:da:0b:62:8b:
         f7:fa:b7:63:42:3e:13:6c:b9:b3:e8:0c:5a:0f:9e:01:bc:09:
         8c:b7:43:29:5e:4e:4b:86:91:e1:e7:72:78:6f:ad:a7:5e:a3:
         69:0d:5f:18:fa:f4:fb:ed:e3:86:eb:92:b7:13:35:36:60:0f:
         0f:53:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----