Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/yx6CDu_zbB2vlEIVTO8jHBFLzmg.roa
File:                     yx6CDu_zbB2vlEIVTO8jHBFLzmg.roa (raw, json)
Hash identifier:          HbH82zo8+qD46WnWd2lyFA53jisZASECstVdqXvWuC0=
Subject key identifier:   CB:1E:82:0E:EF:F3:6C:1D:AF:94:42:15:4C:EF:23:1C:11:4B:CE:68
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       46F3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yx6CDu_zbB2vlEIVTO8jHBFLzmg.roa
Signing time:             Mon 25 Apr 2022 00:30:07 +0000
ROA not before:           Mon 25 Apr 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18163 (0x46f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 25 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=CB1E820EEFF36C1DAF9442154CEF231C114BCE68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:d7:17:3a:0e:3e:ad:24:fa:51:0b:5f:b8:
                    1a:f6:8a:fa:a0:55:d4:48:18:55:7a:ef:73:8a:39:
                    7d:8d:ef:24:2f:77:59:16:e8:e4:38:a5:2e:c0:b2:
                    9b:0a:18:ba:5b:3e:4c:29:64:ae:c1:08:6c:1d:f4:
                    6c:eb:9c:e3:bd:87:c6:ae:64:a8:2b:21:3e:78:22:
                    6b:de:c9:24:23:97:a4:96:ca:78:33:45:0a:48:52:
                    29:03:45:49:50:0b:26:12:d9:28:19:db:03:7b:ef:
                    73:68:4c:e3:aa:e1:7b:6b:ae:7f:2f:24:55:6d:df:
                    68:55:69:13:3a:e7:84:54:95:e9:76:33:d5:7c:ce:
                    1b:bf:a0:85:90:f3:44:72:c5:44:8f:83:76:c8:60:
                    0f:56:0e:06:45:44:3d:6a:f8:50:19:a0:1a:58:de:
                    e8:69:43:9a:99:e1:fd:11:a1:3d:91:b6:3c:d5:f9:
                    b7:32:fb:0e:3f:00:04:ba:f5:b8:99:63:d0:52:57:
                    83:97:ea:a1:b3:82:39:b1:83:47:bc:02:07:57:be:
                    2e:b0:24:51:c9:2d:9b:46:cc:3d:66:db:6d:f9:7a:
                    67:ef:05:ad:3b:ee:c2:0c:ef:4f:cc:3d:4d:19:cd:
                    01:c8:7d:2d:67:81:f3:ce:3f:8e:d1:c0:1a:78:04:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1E:82:0E:EF:F3:6C:1D:AF:94:42:15:4C:EF:23:1C:11:4B:CE:68
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yx6CDu_zbB2vlEIVTO8jHBFLzmg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:d3:29:4b:dd:e6:78:c6:dc:52:41:a1:7a:85:73:40:4b:
         3c:40:f2:68:a7:99:0d:7e:4a:00:f8:a3:2a:1f:9c:af:cc:81:
         13:9d:97:c3:f0:a5:21:e6:e3:31:06:a7:d4:09:95:60:2f:86:
         50:55:e1:84:70:41:ed:ce:dd:a7:c6:4f:83:17:9e:cd:a4:f4:
         74:30:17:0e:d2:fc:43:b8:db:7c:be:fa:3d:8a:fe:0c:c6:f3:
         95:4f:bd:b0:40:45:94:42:6c:f4:23:72:ee:8d:74:14:26:0b:
         83:db:02:c9:b6:68:45:46:95:e6:6a:b9:7a:f2:9d:59:cc:ef:
         a7:53:09:34:a9:c0:33:7a:80:c7:13:8c:91:a4:ba:24:c0:7d:
         34:3b:cb:bb:0c:cd:b9:06:ca:c6:66:11:fb:c1:34:d0:7f:92:
         fd:8f:ab:c4:ca:ef:0e:70:ec:c5:2b:d3:7f:9f:d7:2e:1e:d3:
         2b:ef:fa:c4:c7:a2:0f:61:25:c5:48:3d:4d:05:15:95:f1:4a:
         df:f5:35:47:42:36:bb:88:2f:da:d6:64:f6:a2:ec:4e:6d:51:
         9d:fa:0a:0b:c4:f5:4c:fc:9d:35:ed:10:d2:41:79:10:36:7d:
         58:f7:83:2a:a8:be:99:58:2b:f3:47:6f:4d:56:fb:b1:67:fd:
         25:95:57:07
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MjUw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKENCMUU4MjBFRUZGMzZD
MURBRjk0NDIxNTRDRUYyMzFDMTE0QkNFNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdh9cXOg4+rST6UQtfuBr2ivqgVdRIGFV673OKOX2N7yQvd1kW
6OQ4pS7AspsKGLpbPkwpZK7BCGwd9GzrnOO9h8auZKgrIT54ImveySQjl6SWyngz
RQpIUikDRUlQCyYS2SgZ2wN773NoTOOq4Xtrrn8vJFVt32hVaRM654RUlel2M9V8
zhu/oIWQ80RyxUSPg3bIYA9WDgZFRD1q+FAZoBpY3uhpQ5qZ4f0RoT2RtjzV+bcy
+w4/AAS69biZY9BSV4OX6qGzgjmxg0e8AgdXvi6wJFHJLZtGzD1m2235emfvBa07
7sIM70/MPU0ZzQHIfS1ngfPOP47RwBp4BB69AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUyx6CDu/zbB2vlEIVTO8jHBFLzmgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS95eDZDRHVfemJCMnZsRUlWVE84akhCRkx6bWcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AF0G0ylL3eZ4xtxSQaF6hXNASzxA8minmQ1+SgD4oyofnK/MgROdl8PwpSHm4zEG
p9QJlWAvhlBV4YRwQe3O3afGT4MXns2k9HQwFw7S/EO423y++j2K/gzG85VPvbBA
RZRCbPQjcu6NdBQmC4PbAsm2aEVGleZquXrynVnM76dTCTSpwDN6gMcTjJGkuiTA
fTQ7y7sMzbkGysZmEfvBNNB/kv2Pq8TK7w5w7MUr03+f1y4e0yvv+sTHog9hJcVI
PU0FFZXxSt/1NUdCNruIL9rWZPai7E5tUZ36CgvE9Uz8nTXtENJBeRA2fVj3gyqo
vplYK/NHb01W+7Fn/SWVVwc=
-----END CERTIFICATE-----