Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-bqoMYfej-NHDPw1Vtr6zM50jxA.roa
File:                     -bqoMYfej-NHDPw1Vtr6zM50jxA.roa (raw, json)
Hash identifier:          HuLf4G9NZR+jBF8YOS5RWWJC6HipUF+7CjNRHB+O92Q=
Subject key identifier:   F9:BA:A8:31:87:DE:8F:E3:47:0C:FC:35:56:DA:FA:CC:CE:74:8F:10
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       435B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-bqoMYfej-NHDPw1Vtr6zM50jxA.roa
Signing time:             Fri 18 Feb 2022 00:30:07 +0000
ROA not before:           Fri 18 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17243 (0x435b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 18 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=F9BAA83187DE8FE3470CFC3556DAFACCCE748F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:2f:ba:0b:39:d4:fa:3a:b2:d4:3b:f1:8f:
                    ef:dd:80:ca:5f:43:bc:54:a8:7c:fe:1b:21:c9:ad:
                    37:12:be:b2:e8:7a:e9:d2:fb:89:b7:6a:3b:f3:95:
                    65:a1:67:a0:82:67:58:b5:10:7d:35:4e:26:e0:e2:
                    3c:93:3b:68:b1:e1:eb:d0:d4:6e:fa:eb:94:82:af:
                    3e:f6:64:a1:d3:90:3e:a3:a3:79:ac:26:a5:dd:8d:
                    ab:a1:2e:5f:f0:f5:4d:d4:df:7c:ac:e1:70:f3:75:
                    ea:23:32:da:77:08:b7:07:bc:95:fb:9e:eb:67:70:
                    a4:05:0a:21:6f:5e:4e:f7:7b:55:83:83:e3:d3:13:
                    d8:3d:cf:62:48:37:1a:16:01:b7:de:13:3b:96:fc:
                    15:d0:2d:dc:fd:4f:70:79:fd:40:07:cf:51:0b:36:
                    12:7f:30:5a:35:06:9a:31:7f:75:c3:11:02:39:d9:
                    6a:af:61:42:1e:21:66:6f:c5:8f:ee:2a:cb:c9:c4:
                    2e:83:64:62:00:0b:93:6c:b7:2e:fd:dd:14:22:8b:
                    10:00:52:bc:4f:53:4e:98:2a:c8:12:1a:6b:2b:bc:
                    d5:f8:28:6c:fe:95:39:77:4a:20:34:1c:4d:06:28:
                    a3:d4:8b:e7:cd:a1:0a:2f:61:cd:bb:50:eb:bd:90:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BA:A8:31:87:DE:8F:E3:47:0C:FC:35:56:DA:FA:CC:CE:74:8F:10
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-bqoMYfej-NHDPw1Vtr6zM50jxA.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:55:ff:90:5b:c6:67:9e:b3:ff:43:37:4c:fc:64:33:94:60:
         60:39:01:2c:87:1d:ed:3a:e3:35:71:56:57:fb:38:43:29:8f:
         d2:b1:15:da:8d:b6:e5:1d:2b:c9:04:77:07:9b:77:1c:28:2a:
         37:dc:c4:f3:8b:ee:80:fe:31:35:3d:f6:b9:11:92:08:c2:da:
         07:6b:58:5f:06:3e:ff:82:31:b2:e2:d0:53:43:7e:cd:bb:89:
         52:fa:d1:a7:cf:e2:b5:6b:1b:82:3a:90:f8:66:6d:7e:5e:f2:
         2d:5e:d9:2e:96:6a:b2:e4:d5:6e:3f:b4:da:4c:98:5f:c4:8c:
         2b:80:38:4a:5b:60:bb:14:24:24:ad:0e:de:1c:b2:79:29:a8:
         37:4f:be:18:bd:96:56:fc:67:0f:8b:9a:af:33:40:24:d6:3b:
         02:42:b8:a1:64:ce:1d:5d:ff:5d:37:bb:96:e3:e8:4d:64:3a:
         53:64:53:a8:2f:d1:51:c2:cf:6b:80:63:73:ad:89:08:c9:9d:
         65:16:27:28:64:a7:c3:e0:a1:bb:ff:59:f3:4a:9c:ee:84:3e:
         3a:d6:f1:40:31:d8:79:f1:93:75:92:c9:e7:84:db:2a:4d:3d:
         23:79:ca:ed:df:d2:be:ce:93:6e:8d:39:7f:46:3b:23:53:02:
         ee:a6:0c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----