Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/9qzbHWdrNodqHKPVbCE8w1fzF80.roa
File:                     9qzbHWdrNodqHKPVbCE8w1fzF80.roa (raw, json)
Hash identifier:          VQxpFt8yw0r7j5q50tggdsRUDsLFm5/tApEF5wwCL/c=
Subject key identifier:   F6:AC:DB:1D:67:6B:36:87:6A:1C:A3:D5:6C:21:3C:C3:57:F3:17:CD
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42C0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9qzbHWdrNodqHKPVbCE8w1fzF80.roa
Signing time:             Mon 07 Feb 2022 00:30:06 +0000
ROA not before:           Mon 07 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17088 (0x42c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  7 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=F6ACDB1D676B36876A1CA3D56C213CC357F317CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:e5:5d:57:12:9d:ae:b8:ce:0d:a8:9b:6d:
                    bf:09:9a:17:bc:82:36:0c:b6:81:0f:f1:6f:f0:cc:
                    22:d0:c1:54:46:d4:cb:74:d0:50:0c:31:92:a7:98:
                    a6:3f:78:57:74:67:08:c9:ae:07:d5:a9:a5:f2:17:
                    eb:53:9b:32:5b:67:a1:83:b0:bf:04:0b:3e:5c:55:
                    e3:1d:9e:36:aa:39:d4:ff:0e:46:3f:ae:ee:7d:bb:
                    e8:4a:88:27:cf:38:6f:8e:80:e2:0b:0b:43:2a:f4:
                    14:2c:16:43:9f:08:04:d7:bb:41:9a:ce:df:7c:f2:
                    05:13:91:01:b0:f3:cf:3a:43:22:df:aa:ec:a0:73:
                    ca:6f:bf:09:e3:e8:4f:7a:59:f2:ac:f7:85:8d:94:
                    38:a9:e7:2e:e9:fd:63:87:77:d4:22:89:bd:bb:05:
                    93:5f:0a:db:ba:d3:ee:a7:f6:43:83:32:2a:59:51:
                    05:57:f3:83:9b:24:61:81:91:ad:c5:81:28:2b:c5:
                    a3:06:27:68:28:52:1c:91:39:f5:07:08:b5:d0:f0:
                    4c:27:5a:25:20:91:cd:57:2c:0b:80:62:1e:2f:0c:
                    f1:d2:5e:55:ac:cf:bf:a8:db:04:03:c3:23:b7:37:
                    16:19:98:a3:0c:cc:80:73:20:71:a2:e5:dc:fb:34:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AC:DB:1D:67:6B:36:87:6A:1C:A3:D5:6C:21:3C:C3:57:F3:17:CD
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/9qzbHWdrNodqHKPVbCE8w1fzF80.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:44:b3:f3:ab:16:39:45:92:62:9b:66:67:7d:c0:b7:a8:57:
         48:e8:36:09:2e:64:e0:f8:d5:0a:16:86:5f:d8:38:0c:de:57:
         30:b5:57:5d:b5:bd:25:a2:e4:6b:24:91:d1:4a:56:cb:af:f7:
         06:52:93:23:39:c3:31:44:ba:4d:75:b9:5c:d9:d6:99:8c:93:
         38:ef:01:d8:3c:87:ae:69:f6:51:c5:27:e5:18:0c:19:0c:d4:
         b1:36:30:81:6a:0d:36:79:f1:29:33:26:63:37:2f:fa:72:a9:
         8d:2f:10:4b:27:9f:25:6d:f1:81:7d:77:6b:33:c3:5d:53:e7:
         3d:e3:73:58:a8:93:5e:f0:d8:85:76:c4:cc:26:74:53:91:30:
         68:8b:c8:79:35:d6:4b:29:cd:80:00:ac:e2:68:b3:74:60:6d:
         e2:a3:e6:b9:df:08:a1:8c:7d:36:f1:7e:6a:6f:42:a4:9d:05:
         ad:73:ef:2c:27:65:a5:b0:a1:23:5a:4b:03:bf:94:ae:98:50:
         a3:17:76:ac:7e:72:19:64:5f:2b:84:0e:8e:29:4c:2a:68:6e:
         ed:b1:1c:f7:f8:d2:c5:30:2d:53:de:13:6c:cb:03:c5:55:59:
         f9:a3:2c:4e:43:52:cf:62:0e:82:f5:a7:ca:a7:88:4d:26:34:
         bc:63:73:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----