Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-oD-qwpsAqqtPENBFvneUF6Yoc0.roa
File:                     -oD-qwpsAqqtPENBFvneUF6Yoc0.roa (raw, json)
Hash identifier:          fSRYFFvF10wqdWW23oUYPKt4O8B8rn47cl/dMTF0lJc=
Subject key identifier:   FA:80:FE:AB:0A:6C:02:AA:AD:3C:43:41:16:F9:DE:50:5E:98:A1:CD
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       437C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-oD-qwpsAqqtPENBFvneUF6Yoc0.roa
Signing time:             Sun 20 Feb 2022 00:30:10 +0000
ROA not before:           Sun 20 Feb 2022 00:30:10 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17276 (0x437c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 20 00:30:10 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=FA80FEAB0A6C02AAAD3C434116F9DE505E98A1CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:f3:a9:ff:07:0a:4f:c8:0e:f8:c9:a0:50:
                    c8:92:f5:6a:90:f5:d6:9d:15:54:53:7a:70:ea:92:
                    fd:b6:99:3d:0b:84:c7:41:cd:9d:42:13:0d:b4:1a:
                    ce:e9:a3:27:7b:5c:7f:56:54:d9:48:7a:19:73:e5:
                    d8:ab:ce:9f:9c:85:5c:d5:74:98:3c:71:24:b6:86:
                    ad:09:31:c8:a6:e7:91:4c:92:03:84:ff:04:a8:22:
                    18:49:91:49:83:34:c1:41:8d:70:87:9c:ec:3e:17:
                    d8:e1:c5:6a:ec:28:e9:e1:9e:8d:0f:de:6a:fe:ab:
                    51:23:71:83:2e:74:5a:14:a7:fe:df:8f:fd:2d:f1:
                    20:ab:ed:e7:9e:12:71:7a:97:6f:0e:cc:0f:70:b1:
                    03:cf:25:aa:e4:1b:9f:cd:6f:32:9d:86:01:be:da:
                    e9:7e:25:71:e1:99:fe:fa:ad:42:6d:c6:6b:c4:61:
                    e8:ca:8d:0c:c6:9d:49:fb:48:2b:38:5c:1b:95:aa:
                    8c:03:82:e1:89:a9:69:b5:3a:67:f1:2d:53:a1:71:
                    95:53:cc:e1:ab:0c:d8:dc:38:10:28:80:23:33:46:
                    e1:68:9e:13:3a:5c:20:3a:23:e9:52:c0:17:f1:96:
                    15:64:a7:e7:bb:f8:10:1c:c1:c8:3a:34:56:6d:5c:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:80:FE:AB:0A:6C:02:AA:AD:3C:43:41:16:F9:DE:50:5E:98:A1:CD
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-oD-qwpsAqqtPENBFvneUF6Yoc0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:57:6d:03:d9:0f:08:7d:4e:82:54:0b:c5:2c:f1:19:3c:
         92:0f:79:76:1f:ee:8a:37:02:f2:f0:ca:54:6a:22:da:84:dd:
         7c:ab:b0:f9:f3:2f:53:e6:bb:f0:0a:4b:43:83:32:3b:87:46:
         66:3a:80:ee:cd:8d:1d:52:11:2e:0b:5f:78:f2:ec:0e:93:20:
         b1:91:39:36:80:e9:14:1f:79:d5:05:b2:c9:90:2b:75:98:ea:
         52:e5:60:bb:5b:6e:1a:ea:5a:20:3d:bc:7d:3e:72:68:32:6f:
         3d:31:24:b0:9b:63:fc:a1:e5:79:31:99:68:97:f0:e8:ae:5d:
         ee:f3:de:00:84:2a:4c:98:2d:fb:db:4e:08:3f:23:9b:cc:0b:
         8c:02:5b:94:dc:8d:25:74:77:1f:95:4a:07:5e:e2:e8:f0:97:
         34:fe:9d:4e:2b:7a:4f:92:3f:af:24:cf:81:68:fa:ff:cb:46:
         8a:c8:22:cf:f3:c0:92:7c:68:0e:7b:a4:a2:c5:92:b0:93:38:
         2b:1e:37:07:f6:51:ec:2b:03:f4:7f:af:87:99:b2:89:f9:5c:
         9e:80:0c:5e:64:cd:98:37:f6:30:d6:16:3e:70:26:e3:9c:b1:
         7b:58:bd:45:89:60:ea:ac:aa:ea:7b:a2:75:65:81:83:38:11:
         a8:d2:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----