Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/69rJKPZdTzGJRdDj7YfJ6dx80Fo.roa
File:                     69rJKPZdTzGJRdDj7YfJ6dx80Fo.roa (raw, json)
Hash identifier:          oZI/Wop0IgCV3hcNdnQzyM9HlH8lO6vtcMstIav43m4=
Subject key identifier:   EB:DA:C9:28:F6:5D:4F:31:89:45:D0:E3:ED:87:C9:E9:DC:7C:D0:5A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       447C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/69rJKPZdTzGJRdDj7YfJ6dx80Fo.roa
Signing time:             Fri 11 Mar 2022 00:36:55 +0000
ROA not before:           Fri 11 Mar 2022 00:36:55 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17532 (0x447c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 11 00:36:55 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=EBDAC928F65D4F318945D0E3ED87C9E9DC7CD05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:21:1a:22:2c:19:d4:7c:21:f7:b5:74:7d:
                    c5:fd:5e:7d:5c:39:38:d6:fa:97:b6:21:ee:ed:ab:
                    a5:17:f0:b1:40:85:d6:e3:0c:bb:f1:b4:9f:63:59:
                    24:37:48:0d:5a:74:4e:69:51:7b:3d:3b:68:0a:4e:
                    e4:b2:02:e0:53:61:90:e8:99:66:dc:f4:c1:e1:99:
                    b0:e7:80:ed:a6:79:7a:2f:9d:29:8d:36:e8:d4:98:
                    df:54:24:da:de:94:19:90:63:4b:ed:40:51:8f:11:
                    66:d9:e3:69:10:fa:fe:af:2e:55:e7:60:2c:2a:fc:
                    67:01:4c:31:0f:f9:33:b4:df:fb:5f:94:78:c1:76:
                    93:7e:e5:9d:cd:a1:cc:60:18:e8:67:c4:0a:a1:14:
                    8d:30:2b:22:e7:a9:f9:19:73:d4:7b:95:0d:8d:84:
                    58:bf:a3:d3:d6:8b:72:66:d5:74:1e:4d:61:f1:6a:
                    01:64:24:72:9a:2e:1a:19:62:37:96:a2:67:c7:e5:
                    3a:da:db:35:db:72:3a:2b:2b:fc:a7:ea:e7:fb:30:
                    58:47:58:d9:68:f1:ad:bd:60:e8:f2:cd:d4:c5:73:
                    71:bd:3e:d5:75:c8:de:cd:5f:84:d7:ad:d5:98:71:
                    0f:d4:51:74:21:29:d7:2a:fd:14:51:46:34:81:76:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DA:C9:28:F6:5D:4F:31:89:45:D0:E3:ED:87:C9:E9:DC:7C:D0:5A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/69rJKPZdTzGJRdDj7YfJ6dx80Fo.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:b2:84:6a:b9:5d:05:43:8b:ce:58:ca:1f:c2:98:24:46:4e:
         41:ea:b7:8b:44:06:c1:ed:b6:f8:c1:e7:46:27:d6:26:16:bc:
         a3:88:36:72:fa:db:08:5e:f7:0b:65:ff:02:41:90:0f:16:3e:
         e7:8f:b6:1c:e3:3a:59:de:f1:91:d1:5d:64:ce:90:9e:ef:bc:
         de:7b:81:0b:5f:3d:bc:dc:79:72:48:27:c8:bf:5e:3b:87:fa:
         c4:27:e4:7c:6a:af:0b:dd:1c:6d:56:f4:f1:dc:84:a3:3f:04:
         61:98:8b:b3:40:77:00:c4:df:fd:89:a2:25:75:89:fe:8c:a8:
         28:a1:0e:4b:7d:03:2a:e6:75:b3:ae:6e:9f:85:53:04:bb:9b:
         f9:81:58:bd:31:d8:cb:23:d0:1d:c3:c6:05:08:55:f5:93:18:
         b4:c8:5d:eb:a9:2c:1d:a4:98:48:f3:c1:0a:5f:51:31:50:42:
         48:97:90:6c:dc:67:3a:9f:be:46:b9:67:7e:0f:da:47:90:5f:
         be:62:e1:9d:a3:91:54:1f:24:68:80:78:1e:a0:63:68:e9:12:
         c8:39:45:bd:db:a0:2a:ee:47:66:97:00:7c:0d:fe:fb:f9:3d:
         09:c4:23:31:61:36:92:92:ad:da:cf:e7:99:2f:3e:13:50:8a:
         97:d2:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----