Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/20XcAo2CL2RaDVxTrwn4uYB-C5I.roa
File:                     20XcAo2CL2RaDVxTrwn4uYB-C5I.roa (raw, json)
Hash identifier:          kHCCmhTx/b/kd1wkVfYDmp17e5oNwvFt2apups1Edhk=
Subject key identifier:   DB:45:DC:02:8D:82:2F:64:5A:0D:5C:53:AF:09:F8:B9:80:7E:0B:92
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43AE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/20XcAo2CL2RaDVxTrwn4uYB-C5I.roa
Signing time:             Thu 24 Feb 2022 00:30:07 +0000
ROA not before:           Thu 24 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17326 (0x43ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 24 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=DB45DC028D822F645A0D5C53AF09F8B9807E0B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:ab:8a:db:cb:5a:d8:87:9d:a2:66:66:65:
                    cd:bb:b1:5a:a3:9d:70:e9:ca:0e:86:d5:a6:c5:2c:
                    3d:f5:b8:73:11:4a:8a:1b:26:d0:66:38:d5:65:8b:
                    ca:b8:56:e1:4d:a7:65:43:08:97:03:0e:17:63:af:
                    02:a6:91:c0:9c:0f:b8:7d:a4:f3:4f:7a:84:ab:1e:
                    e4:52:7b:cd:c1:16:d3:8e:3f:f1:9b:53:15:67:4a:
                    e0:a3:d3:5a:cb:f6:f2:17:42:87:48:b6:a8:15:00:
                    db:ca:02:7a:00:37:ad:36:71:39:d1:d2:dc:91:b7:
                    6a:ad:97:d0:66:08:bf:dc:9e:48:07:1d:58:4b:b9:
                    42:04:8f:c4:02:7a:50:9b:83:72:38:0f:8c:b4:6b:
                    5c:43:8d:50:6f:f2:13:71:db:c6:99:17:d6:35:45:
                    4a:61:3a:0c:7e:e2:9c:54:92:cb:71:98:95:59:0e:
                    ec:6a:8b:7b:10:fe:8b:24:39:c7:42:6a:66:b5:2f:
                    fe:d4:83:ec:2c:7b:9d:62:a3:20:9e:1f:47:ab:7b:
                    57:a1:2d:9d:dd:68:34:28:fe:6a:ee:38:e6:84:27:
                    82:1f:be:e8:50:b6:f2:35:b6:ae:75:d8:09:b5:97:
                    87:f7:a2:24:dd:10:a1:a7:6e:b1:59:20:f9:11:4a:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:45:DC:02:8D:82:2F:64:5A:0D:5C:53:AF:09:F8:B9:80:7E:0B:92
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/20XcAo2CL2RaDVxTrwn4uYB-C5I.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:2c:f1:9a:50:17:64:97:76:55:5e:d4:b0:dc:98:0f:1e:d1:
         1b:3b:c2:1d:e5:9e:ce:32:14:b7:3c:08:5e:e0:d5:99:c3:c2:
         08:ae:76:78:11:90:8a:ed:73:20:a9:aa:36:cd:55:d3:db:7c:
         eb:f2:63:f6:b5:53:fc:23:60:ef:29:d3:5c:3f:30:ec:35:02:
         da:e8:a8:ed:95:2c:a5:82:89:2b:33:d7:a3:37:f9:3e:16:6b:
         0b:51:97:ee:cb:b0:73:94:5f:5e:8f:2e:25:d7:12:f5:52:9f:
         20:86:c2:1c:b9:05:ba:1d:bc:4d:f0:f5:f1:dd:f8:be:ee:06:
         1e:d1:4b:fa:0a:68:c0:10:c4:3f:5b:d9:3e:39:51:83:07:64:
         82:54:37:13:15:90:33:86:85:7a:d5:6b:a4:3b:c8:a3:61:ea:
         99:03:f6:d7:82:34:3e:c4:6f:71:79:ab:2f:48:84:54:26:d6:
         2e:b5:4b:40:73:df:ce:7d:e7:af:e7:bc:e1:1f:49:64:02:06:
         29:02:59:b9:49:eb:4c:71:17:a7:a3:fa:8c:f8:77:44:a0:b3:
         a8:1e:9a:2f:9c:b9:8a:3b:ef:de:52:37:5f:7f:23:fa:38:9a:
         90:c9:82:f7:d7:f7:4a:fe:5d:ab:98:8b:d7:82:d0:5e:19:a9:
         45:65:9e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----