Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/C6FuC9KFcLjmJjZd754czJZiWMQ.roa
File:                     C6FuC9KFcLjmJjZd754czJZiWMQ.roa (raw, json)
Hash identifier:          0fTvNMv+dFzMQI2F6v3y+gOZix1hnKIX6SiGVjv8ur4=
Subject key identifier:   0B:A1:6E:0B:D2:85:70:B8:E6:26:36:5D:EF:9E:1C:CC:96:62:58:C4
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42B2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/C6FuC9KFcLjmJjZd754czJZiWMQ.roa
Signing time:             Sun 06 Feb 2022 00:30:05 +0000
ROA not before:           Sun 06 Feb 2022 00:30:05 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17074 (0x42b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  6 00:30:05 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=0BA16E0BD28570B8E626365DEF9E1CCC966258C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:02:8e:f4:34:a8:2c:21:2b:c2:2b:c6:01:
                    f0:3f:60:23:81:cf:de:73:ea:00:4b:88:d0:14:7d:
                    3f:9e:79:57:31:f6:4e:57:cf:7f:c1:51:57:f7:d0:
                    2b:dd:47:33:0f:c9:33:aa:34:10:64:c7:c2:cd:72:
                    36:29:e4:55:dc:d0:69:ea:94:91:dc:fe:6d:72:9a:
                    09:70:0c:ac:15:a5:57:dc:57:cb:88:2f:36:1b:f2:
                    7a:88:c3:c0:54:e0:97:fd:80:55:38:c3:ec:60:68:
                    49:c4:28:03:fb:f8:36:14:1f:3a:0e:d3:be:2f:6b:
                    a7:4e:13:bb:89:b5:33:55:8a:43:a6:be:2d:9d:c8:
                    0a:c0:90:8d:90:e0:ec:56:de:40:1a:9b:63:bd:72:
                    fa:79:5e:6c:7a:d9:14:8b:f9:9b:a7:6a:9d:ec:7f:
                    7e:29:52:16:69:21:d7:5a:1a:41:40:e7:f8:e8:8f:
                    8d:f1:65:75:a1:c9:d5:5c:6f:69:ea:82:e5:06:32:
                    9b:d6:2d:f2:5a:78:56:79:7b:1c:bf:15:a6:1c:e1:
                    12:c7:d0:63:65:e6:85:80:5d:be:bb:2a:d7:45:5b:
                    f5:c2:99:e4:42:2c:33:33:9d:9c:f3:fb:8a:74:4d:
                    b9:8a:0a:53:2c:62:37:09:02:4a:40:4a:47:ea:d7:
                    fd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A1:6E:0B:D2:85:70:B8:E6:26:36:5D:EF:9E:1C:CC:96:62:58:C4
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/C6FuC9KFcLjmJjZd754czJZiWMQ.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:25:37:5c:a7:bf:9a:27:47:19:1a:fd:e4:2f:ce:f8:5f:ec:
         dd:ff:be:e5:bf:d9:7a:f6:70:9e:a9:96:0e:be:81:12:9d:50:
         2c:32:99:01:4d:3b:7c:52:5b:c5:3d:ac:0e:86:16:38:6f:59:
         e5:69:f7:eb:5c:52:47:a2:cd:cd:ab:f6:44:27:7e:23:bb:33:
         b2:41:ac:06:d1:4e:6b:49:66:ee:9c:a9:4b:dc:f4:fa:c0:db:
         ca:63:98:98:e9:38:26:86:cf:fe:c1:4f:66:6e:6a:3b:a0:32:
         85:13:2f:fc:69:dd:03:5e:f4:38:6b:87:1f:f8:6d:9c:7e:da:
         a9:37:52:46:8b:63:98:3b:a0:f4:3c:88:0d:3e:f4:4a:95:28:
         57:71:61:52:ae:3d:c5:a5:5d:5b:03:e4:b1:4c:cb:f4:79:60:
         2a:49:04:ce:2f:62:55:69:e8:cd:7a:34:5e:f4:b7:bd:e9:0c:
         d9:5f:84:c0:02:d0:0a:9a:00:15:2e:30:2c:70:7f:e9:84:d4:
         41:29:41:86:ae:4f:5c:7c:79:1d:8a:c3:d5:08:79:b5:b4:33:
         ec:d1:e7:c2:10:42:a2:56:87:6d:5d:c9:8a:fa:df:b8:38:85:
         fe:ab:cd:92:b5:b9:91:f6:e7:df:20:a9:e4:7d:fc:95:82:7a:
         5e:91:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----