Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/yPrbEVXhPNeXShkS-NnvDOhp6_8.roa
File:                     yPrbEVXhPNeXShkS-NnvDOhp6_8.roa (raw, json)
Hash identifier:          jK7eDxGoas4ulEa12KQl/za+Rg38yrJIXJt0mEPqaQE=
Subject key identifier:   C8:FA:DB:11:55:E1:3C:D7:97:4A:19:12:F8:D9:EF:0C:E8:69:EB:FF
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       33E7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yPrbEVXhPNeXShkS-NnvDOhp6_8.roa
Signing time:             Wed 14 Apr 2021 10:34:47 +0000
ROA not before:           Wed 14 Apr 2021 10:34:47 +0000
ROA not after:            Fri 01 Apr 2022 01:01:03 +0000
asID:                     47065
IP address blocks:        45.132.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13287 (0x33e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 14 10:34:47 2021 GMT
            Not After : Apr  1 01:01:03 2022 GMT
        Subject: CN=C8FADB1155E13CD7974A1912F8D9EF0CE869EBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:82:54:59:d2:5a:41:7f:17:ad:59:cb:96:d3:
                    2b:c3:8e:0b:1e:ea:7c:54:30:d4:24:a7:72:78:b2:
                    14:6f:dc:8c:72:3d:b3:e2:f3:22:40:24:f3:9c:c4:
                    5f:ba:7d:c7:1a:08:c1:22:b5:bf:ab:75:49:cd:c3:
                    13:c3:be:47:b8:dc:1d:cd:8f:41:74:e5:43:0c:35:
                    80:0a:b8:6f:ab:79:a9:7e:41:a0:d5:dc:f1:6b:58:
                    fb:b4:3f:22:4f:28:08:d3:83:45:f7:7f:9d:12:c4:
                    60:9b:36:c6:81:f6:f7:58:05:69:e3:41:39:06:a6:
                    ee:68:b1:3f:7c:8f:b9:c6:b7:3b:9e:42:ff:42:a0:
                    b5:28:6f:14:08:a8:c1:61:66:49:3d:17:4d:18:0b:
                    18:2b:33:58:5d:0f:18:dd:46:17:73:fc:5a:75:54:
                    df:8c:12:e6:ff:85:2d:98:c7:e4:67:c5:47:3c:bd:
                    b4:c3:03:f1:43:a7:a5:3e:30:90:d0:94:51:5a:96:
                    4c:bd:0c:ab:0d:69:b0:f6:08:e2:5e:d3:d9:fc:f2:
                    81:e5:62:1b:d8:1a:2d:e1:0c:c2:b7:f7:72:64:36:
                    5b:92:bc:00:0b:38:60:6a:98:22:ca:4b:c1:72:b4:
                    ed:3a:ab:9e:92:93:7c:a3:38:e0:b2:7d:e8:29:40:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FA:DB:11:55:E1:3C:D7:97:4A:19:12:F8:D9:EF:0C:E8:69:EB:FF
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yPrbEVXhPNeXShkS-NnvDOhp6_8.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:32:a8:75:22:cc:df:50:75:ee:39:97:4a:07:95:43:fb:e4:
         8e:2e:e5:62:26:f4:92:11:7b:49:b9:80:dd:a8:04:e9:77:0c:
         66:1d:f3:78:ca:17:23:3b:f8:64:7c:eb:cc:23:f6:9b:28:12:
         be:59:a4:85:ed:87:ab:67:4b:3f:91:84:6f:58:aa:0d:44:a4:
         1e:ac:88:2a:a2:5d:7d:67:92:c2:93:6b:de:f2:63:35:02:6d:
         b5:94:9a:64:a6:63:c9:09:65:c5:40:78:50:c9:35:a3:1c:80:
         6e:ef:02:71:01:71:b6:04:02:b4:fe:8a:ea:6f:9a:59:f4:71:
         9f:8a:c2:ee:22:f7:33:72:a7:34:59:8a:7e:1a:da:da:4b:82:
         86:c4:46:2e:b9:e8:7e:d2:37:eb:9e:97:04:92:74:04:a0:d6:
         b6:95:61:13:c6:fb:44:86:d5:ba:26:c5:91:8b:5f:6c:e1:17:
         ee:a0:83:63:c8:c5:49:95:70:8c:ce:95:c8:ad:fc:67:54:84:
         7a:df:85:09:c7:50:29:a1:b1:4d:8f:b8:5b:44:9a:97:68:bc:
         96:b2:f2:4e:84:28:50:92:00:42:5f:bd:f1:c6:ab:e7:2e:84:
         f9:21:2a:8e:39:47:2a:80:d1:9e:fc:72:8f:6a:e6:47:c5:77:
         7a:8e:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----