Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Dfd9OzYAhctv5OnQoy6EDTPAOfc.roa
File:                     Dfd9OzYAhctv5OnQoy6EDTPAOfc.roa (raw, json)
Hash identifier:          BovgxltweuYZ2HyBJuAEJk4cNkL0JmZsdDT/lYprvV8=
Subject key identifier:   0D:F7:7D:3B:36:00:85:CB:6F:E4:E9:D0:A3:2E:84:0D:33:C0:39:F7
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4587
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Dfd9OzYAhctv5OnQoy6EDTPAOfc.roa
Signing time:             Wed 30 Mar 2022 00:30:09 +0000
ROA not before:           Wed 30 Mar 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17799 (0x4587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 30 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=0DF77D3B360085CB6FE4E9D0A32E840D33C039F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0a:57:6a:eb:d7:88:03:e6:b8:7f:df:0d:9a:
                    89:0d:13:59:71:29:f0:1d:47:55:cc:0f:0f:10:29:
                    bb:7f:e4:71:65:3c:56:e2:76:d5:be:72:58:d8:1a:
                    7e:b9:46:28:00:1a:0c:a5:dc:57:18:2b:e3:e7:fd:
                    38:19:7f:b1:49:86:32:9a:75:b1:48:b2:b2:48:61:
                    61:cd:c7:be:b5:8c:5b:3a:a3:18:84:3a:fa:de:0a:
                    b7:b8:8d:32:57:30:d8:8a:d0:3d:ed:2f:ba:17:58:
                    21:44:d5:24:d4:41:0e:4c:1e:2e:03:e6:b8:eb:95:
                    ed:30:83:17:3d:f5:0b:3a:89:b0:6e:30:36:21:62:
                    7d:2d:fb:36:5b:ca:fb:8b:1b:86:8c:54:72:51:e7:
                    ff:e7:d0:fc:77:4b:a6:d6:b6:91:8f:a5:02:94:2d:
                    02:92:d9:e3:eb:96:4b:71:87:95:ae:56:b2:98:41:
                    ed:20:4c:81:88:17:4e:ff:1a:26:6f:ac:62:52:c7:
                    7b:fd:8c:35:d9:47:7e:3c:b9:1a:ac:68:71:16:f3:
                    8c:80:24:91:f3:b1:ad:d1:c0:cf:24:3e:29:d2:54:
                    83:63:d4:17:b6:e3:ec:59:fa:d0:42:9d:50:43:51:
                    61:7c:6c:09:f2:8d:3e:77:3b:63:23:19:22:1c:b7:
                    35:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F7:7D:3B:36:00:85:CB:6F:E4:E9:D0:A3:2E:84:0D:33:C0:39:F7
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Dfd9OzYAhctv5OnQoy6EDTPAOfc.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:e8:67:ea:1d:81:e0:39:61:dc:df:c3:85:ac:a4:b3:9b:8f:
         af:6f:38:44:30:d4:b7:0d:95:9d:3d:11:9a:3f:e9:fc:bb:04:
         d8:1c:c9:0d:6f:aa:2d:77:93:7f:31:5b:72:d8:92:ab:a2:bc:
         93:42:16:b7:eb:b5:72:2c:ef:28:5e:9a:35:48:4a:7d:63:56:
         25:fe:16:c4:b3:a9:14:f1:d4:bf:9d:a4:d7:30:c8:53:5c:84:
         42:30:1e:61:0d:46:10:b1:5c:7f:db:ec:02:3d:d3:ff:2f:41:
         a4:a4:5b:ab:7d:19:c6:69:89:8e:ec:ed:75:7a:12:80:ee:9b:
         f3:32:6d:58:9c:ba:9b:7c:ca:ad:4f:d5:45:0d:86:d6:58:a2:
         0c:9b:44:39:70:0d:07:b8:8a:84:9c:d0:15:fe:2f:38:0c:8f:
         34:81:57:75:17:40:32:0d:2d:2b:23:ec:1d:bb:e0:bd:61:3f:
         b8:b9:bb:6c:7b:ff:2e:84:44:93:bc:4e:83:9e:5c:2d:81:ed:
         f9:0d:90:5b:12:8e:59:b0:bc:90:4c:d1:6f:73:f4:e5:b3:bd:
         c2:96:95:52:49:95:04:f9:78:33:62:3c:5f:ba:63:f5:ee:77:
         7e:00:b4:c6:fe:45:cc:a7:77:28:58:7e:b8:a3:56:10:a0:b1:
         59:49:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----