Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/x7yIsZrEl2nJsiJtKxebWOTw0mM.roa
File:                     x7yIsZrEl2nJsiJtKxebWOTw0mM.roa (raw, json)
Hash identifier:          SvGd7h9KHPDYNSePBGLWRg4wczpa8MLBvJczj/1F4y0=
Subject key identifier:   C7:BC:88:B1:9A:C4:97:69:C9:B2:22:6D:2B:17:9B:58:E4:F0:D2:63
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42DE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/x7yIsZrEl2nJsiJtKxebWOTw0mM.roa
Signing time:             Wed 09 Feb 2022 00:30:06 +0000
ROA not before:           Wed 09 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17118 (0x42de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  9 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=C7BC88B19AC49769C9B2226D2B179B58E4F0D263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:05:ad:c4:51:27:21:2d:26:c9:72:14:0e:
                    36:73:b5:3e:43:8f:65:c1:6b:cb:23:e2:99:1b:c8:
                    68:c0:24:47:79:0d:f7:41:1d:0d:24:e9:d0:8b:ec:
                    c9:f4:52:00:9e:2c:ee:96:e6:83:d8:99:c8:45:69:
                    c4:62:b4:d0:be:c7:2b:10:57:9f:1d:f4:9c:49:23:
                    56:52:39:8a:d3:be:db:a4:66:9c:8b:f9:15:57:1b:
                    b6:21:41:88:31:9f:7b:eb:46:2b:22:e7:aa:a8:34:
                    7a:72:1c:88:d1:b6:b3:77:3b:d3:fd:3b:f4:27:c3:
                    68:cd:d7:01:3a:65:92:34:f5:43:bc:22:b5:12:f1:
                    70:b0:8b:d8:81:3d:4c:62:17:8f:a6:f7:0e:9b:d3:
                    6c:75:0b:98:13:b6:d6:6d:09:37:af:ec:23:58:f3:
                    df:86:f7:c6:88:32:15:19:63:ef:a6:89:b6:08:c6:
                    30:91:a6:b9:d7:16:90:3f:88:5e:83:52:b8:a6:16:
                    bf:96:04:71:cf:99:a3:58:95:46:4f:96:c6:00:73:
                    7c:0c:65:3f:b6:3a:9e:41:94:91:bd:d7:dd:39:3f:
                    b2:5a:d1:b0:31:80:80:50:68:8c:b4:c3:21:e1:10:
                    f4:73:69:a7:13:51:00:79:ec:a0:86:b5:53:b6:6e:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BC:88:B1:9A:C4:97:69:C9:B2:22:6D:2B:17:9B:58:E4:F0:D2:63
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/x7yIsZrEl2nJsiJtKxebWOTw0mM.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:a8:3b:c1:4c:bc:06:9b:9a:44:08:45:37:6e:04:7b:90:2d:
         8b:4c:cc:ec:a9:a4:fa:74:e9:4c:b8:81:15:7e:ef:9a:90:25:
         7c:94:44:fb:2f:d8:c7:59:84:14:ca:fa:6a:fb:f7:14:63:5d:
         58:c7:63:77:39:0f:93:f3:55:0d:41:78:95:46:c9:21:40:ce:
         3c:53:48:ba:c7:42:9c:fd:fb:82:b8:e8:9a:52:de:08:de:87:
         79:fe:2a:da:25:ba:0f:ba:0b:78:13:b6:32:b4:6c:10:68:dc:
         21:3f:50:d4:c8:fd:73:18:b6:56:aa:ad:90:94:a0:ee:f0:b1:
         ff:f3:ca:31:f8:56:37:d5:42:3c:a7:89:a9:ec:db:7e:4b:ac:
         69:67:8e:9f:f5:2d:a8:67:a3:90:e7:1d:63:5f:07:0b:f4:df:
         69:15:97:14:9b:4c:8c:70:b6:de:ea:d5:1b:e1:a9:12:ac:2c:
         b4:76:7e:29:6d:95:96:b3:c1:60:c1:1d:d5:db:93:2c:df:31:
         3e:54:7e:17:f3:e1:14:9d:2b:c8:37:47:ff:c7:80:e7:23:6d:
         e7:70:47:bf:a2:67:80:0b:cc:6a:20:33:4f:90:60:f7:e5:87:
         8d:64:d3:38:bb:5e:a0:46:5d:46:a1:eb:98:50:c0:d4:fb:f5:
         79:9c:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----