Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4ZsWb0z7gZLq3HHphNOFEwnWL0U.roa
File:                     4ZsWb0z7gZLq3HHphNOFEwnWL0U.roa (raw, json)
Hash identifier:          tUQWNsSQugRjkyNplbQ4qTVglR91AFr2zNE1tZvt/Do=
Subject key identifier:   E1:9B:16:6F:4C:FB:81:92:EA:DC:71:E9:84:D3:85:13:09:D6:2F:45
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42B6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4ZsWb0z7gZLq3HHphNOFEwnWL0U.roa
Signing time:             Sun 06 Feb 2022 00:30:06 +0000
ROA not before:           Sun 06 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17078 (0x42b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  6 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=E19B166F4CFB8192EADC71E984D3851309D62F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:a5:fa:be:4a:f6:d5:79:7b:9c:4d:6e:79:
                    cf:b3:61:85:78:c5:1c:67:f7:9a:40:2d:03:92:3a:
                    55:5a:7f:fd:d7:c1:c0:8e:d6:71:74:76:17:44:4d:
                    f5:8c:86:fb:0a:72:8b:92:01:d2:3c:c9:11:4d:51:
                    a0:bf:ea:f2:5b:68:ec:d4:32:bc:ec:89:53:1e:cf:
                    6f:a7:bd:62:86:dc:ff:50:6e:a5:96:75:a8:ab:48:
                    58:ac:ac:fd:2d:0d:c4:ad:f6:7f:6b:98:09:9c:83:
                    ca:87:be:4f:8b:00:33:4d:b9:a1:3e:d4:16:55:e9:
                    fc:9f:9c:2e:eb:c5:63:7b:b7:38:58:e9:bc:ba:7c:
                    c2:3f:8d:e8:41:ef:df:57:6c:73:8a:17:70:f6:41:
                    56:ee:d3:87:67:80:0a:98:d8:c0:ea:e9:d8:84:f9:
                    ac:a0:f1:8f:5a:a0:1a:46:b3:a4:9b:8c:7c:cc:0c:
                    05:7d:29:a8:a4:a2:3d:7f:d6:8d:84:06:73:b4:ad:
                    02:67:35:51:60:b0:0f:4b:6e:87:9a:15:6d:e0:25:
                    05:9a:9f:a7:ef:d7:17:f5:89:8a:44:e5:dc:92:78:
                    4a:d0:a4:a2:b2:1f:5b:65:b3:f0:09:2d:8c:1e:95:
                    6b:ec:a3:af:5b:78:97:b6:d1:24:d2:d4:aa:4c:19:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9B:16:6F:4C:FB:81:92:EA:DC:71:E9:84:D3:85:13:09:D6:2F:45
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4ZsWb0z7gZLq3HHphNOFEwnWL0U.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:55:4b:12:18:60:68:21:e8:8f:bf:64:4a:3e:fe:0b:65:94:
         e0:e6:f6:12:df:e5:bf:93:d8:34:e2:11:ae:d7:21:b5:a6:74:
         d9:73:3a:da:f7:08:3f:80:ce:c7:6b:6e:7d:1c:fe:e5:a4:55:
         2b:9e:0f:71:10:ce:8b:38:01:6e:cc:95:55:e3:00:5a:d4:12:
         32:a2:03:43:49:df:4e:2a:08:b7:b6:7c:f8:1c:79:d6:2a:30:
         50:0a:e3:6f:dc:53:25:33:a9:c8:e2:1f:e9:71:4a:d7:03:95:
         96:d4:fd:4f:3a:11:bf:cc:1f:6e:e1:d4:29:cd:8c:9c:ae:eb:
         e6:3d:52:72:da:db:d2:72:cc:7b:61:86:1a:fa:c0:83:41:cb:
         3d:46:6e:e6:e6:6e:ee:04:9e:cd:81:27:a1:15:e2:df:92:43:
         39:52:b2:1d:9e:e9:61:2f:b3:80:87:36:2d:e8:43:d8:1d:1a:
         d1:a9:6a:4b:1b:0e:78:99:88:ec:24:0c:7c:33:75:24:4a:94:
         24:d2:a3:b4:b0:5c:1e:a5:d5:f6:06:ad:61:8d:98:89:31:4b:
         0a:8f:4f:36:18:67:15:67:a6:cf:30:91:08:9d:df:cd:63:87:
         41:9f:48:10:06:65:f7:43:0f:f9:37:97:3e:1d:75:a8:a9:a9:
         84:f3:86:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----