Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7yCERAMqg4GKxUjPGX2PDmaUWzM.roa
File:                     7yCERAMqg4GKxUjPGX2PDmaUWzM.roa (raw, json)
Hash identifier:          fipUt0BWoakrHTZ6AreIWb6FtumrKPBshLy4fcX1x3c=
Subject key identifier:   EF:20:84:44:03:2A:83:81:8A:C5:48:CF:19:7D:8F:0E:66:94:5B:33
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       448E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7yCERAMqg4GKxUjPGX2PDmaUWzM.roa
Signing time:             Sat 12 Mar 2022 00:30:09 +0000
ROA not before:           Sat 12 Mar 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17550 (0x448e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 12 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=EF208444032A83818AC548CF197D8F0E66945B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:1f:49:59:32:f2:34:ae:d2:30:a7:0e:8f:
                    96:87:5a:b6:e7:68:f1:0e:db:fc:e3:f9:30:7d:53:
                    d8:15:6c:93:96:62:02:19:c8:ff:b6:14:4e:38:0a:
                    1d:e3:eb:0f:4b:3c:4e:27:34:6a:62:82:be:d0:53:
                    6f:78:a3:04:57:c0:88:47:9f:59:8c:2c:5c:f8:4f:
                    87:aa:b1:5b:1d:23:cf:a6:34:d1:b0:1c:d7:68:6f:
                    1f:e6:a1:22:d7:54:5d:a3:ca:e1:a3:17:a8:05:fe:
                    98:56:56:08:11:c2:e8:e8:49:fb:a0:89:ba:c0:4e:
                    79:4e:03:a9:d7:4b:48:35:1e:f5:54:ef:30:cc:02:
                    9f:4f:7b:6f:4a:21:2e:d8:0b:4f:a3:1c:d9:38:d1:
                    0f:3b:87:6e:1c:69:0f:b7:d8:48:7a:d8:6e:ec:30:
                    2d:e2:69:53:dd:31:3a:dc:64:52:f3:3b:3b:27:f8:
                    2a:7e:56:d7:da:31:36:78:2d:98:38:07:36:5a:7c:
                    4c:b5:bd:39:2c:44:c2:05:e3:1a:bc:ac:c5:5c:f5:
                    41:85:a9:f8:6b:b8:3a:42:cc:70:4a:6f:72:0c:16:
                    a8:81:7f:9f:f1:fd:e3:b0:41:73:b9:00:f3:1d:b3:
                    1f:06:4c:aa:74:e8:d0:7e:51:33:eb:e6:ac:8d:37:
                    23:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:20:84:44:03:2A:83:81:8A:C5:48:CF:19:7D:8F:0E:66:94:5B:33
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7yCERAMqg4GKxUjPGX2PDmaUWzM.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:22:d8:07:2b:14:a4:3e:93:a0:0d:81:b8:77:10:05:f1:01:
         7c:ae:82:a2:5a:ed:e6:2f:6f:ca:d1:85:3d:e8:10:b1:47:5c:
         76:58:ab:1e:f4:c2:bc:02:95:b3:50:78:bc:24:f3:04:2c:6c:
         e4:1d:5b:d6:77:ee:d2:8d:e2:98:56:44:18:e9:b6:07:f7:21:
         3a:b3:8a:fe:ef:a3:ca:49:eb:12:03:dc:59:d8:f3:a6:f8:2a:
         9a:6b:67:09:97:be:16:cd:75:c2:56:bd:05:81:af:75:df:51:
         40:e0:32:17:f8:6c:78:03:33:73:e2:19:03:67:c6:93:6d:fa:
         1b:98:87:e2:c5:f2:3b:ed:dd:bb:9e:b7:3b:0b:0f:6c:b1:a0:
         c2:4f:2f:f7:30:91:5a:3a:45:10:65:c2:ad:de:d0:12:1d:da:
         4d:dc:f3:2e:15:90:f2:49:de:a3:14:03:28:4f:f7:9e:f5:bd:
         1a:86:7c:1d:db:24:e4:6a:52:5d:9a:e5:7d:c0:18:25:6c:7d:
         27:8f:f8:c2:8a:05:35:fe:96:bd:fb:3d:7b:97:c2:82:4c:1a:
         3f:81:36:d2:7c:21:cb:45:6f:18:04:c5:ed:df:d3:f5:18:8a:
         09:2b:cf:2b:cb:47:92:d9:d3:22:f9:60:36:13:03:b4:0d:e6:
         89:96:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----