Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/EenMQIa7J3tsZnP9yOhTAeqMxA0.roa
File:                     EenMQIa7J3tsZnP9yOhTAeqMxA0.roa (raw, json)
Hash identifier:          hMzbKBlNpA7vbsAuTm2XOdOA7f+06UMjjO34XynrsYM=
Subject key identifier:   11:E9:CC:40:86:BB:27:7B:6C:66:73:FD:C8:E8:53:01:EA:8C:C4:0D
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       49CE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EenMQIa7J3tsZnP9yOhTAeqMxA0.roa
Signing time:             Mon 13 Jun 2022 00:30:07 +0000
ROA not before:           Mon 13 Jun 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18894 (0x49ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun 13 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=11E9CC4086BB277B6C6673FDC8E85301EA8CC40D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:bf:07:81:2d:b4:7e:b0:33:be:74:85:e0:
                    7c:cd:52:0a:79:16:c0:84:5e:3b:c1:e4:09:c4:81:
                    89:8c:ca:4f:d5:5f:d3:c1:47:14:c6:a6:91:39:32:
                    39:84:d2:7f:80:bf:7f:f7:0d:38:04:2b:41:69:73:
                    17:f1:db:c9:3e:95:cb:23:76:f4:2e:95:96:e1:d6:
                    8e:20:ec:5c:9d:9f:37:93:c6:a1:b5:fb:2a:aa:58:
                    61:0f:1b:9f:2a:0d:c0:c2:83:2b:50:21:92:fe:ef:
                    9a:d4:e2:dc:62:36:38:c7:87:28:d0:2d:52:e2:74:
                    2a:13:80:db:be:e7:2c:c0:c3:6e:36:54:20:c4:1e:
                    e7:cb:86:49:12:8b:da:a8:86:1c:8f:8f:1d:81:33:
                    26:e8:f9:8c:1e:44:b9:2a:b8:97:52:b4:0e:09:ec:
                    a7:1d:f7:ee:13:cd:30:28:52:49:ad:fe:e7:a6:01:
                    d6:e4:ce:6d:b6:64:f6:03:fb:d4:e0:d2:88:5a:73:
                    e0:a2:1a:a1:b3:7e:42:66:7e:dc:e4:82:b2:a9:38:
                    c5:35:40:f4:ed:45:74:a2:12:f1:0b:a6:74:41:c4:
                    82:03:f1:7c:a6:6e:1c:7e:db:df:d3:8c:55:a8:31:
                    6c:4d:63:3e:48:52:34:de:99:18:56:ae:72:60:c6:
                    a5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E9:CC:40:86:BB:27:7B:6C:66:73:FD:C8:E8:53:01:EA:8C:C4:0D
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/EenMQIa7J3tsZnP9yOhTAeqMxA0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:f1:3a:fb:38:f2:14:7c:69:1c:43:78:68:ec:2b:51:2a:
         47:bb:b4:8f:91:84:95:33:b8:4f:85:c0:20:cf:b8:5e:43:57:
         e9:65:f4:e4:7c:72:b1:7d:87:d8:ce:68:0b:10:96:e6:8b:cb:
         a2:15:10:39:7a:76:26:d5:65:3a:1e:07:66:0f:09:24:a4:43:
         e1:57:aa:95:7b:76:a2:1a:49:4a:82:32:52:cd:14:5e:4d:17:
         b0:35:6e:ed:58:a9:3a:68:48:e1:27:67:59:87:7b:de:07:68:
         b7:3d:ef:bf:0a:4b:51:d5:00:79:1e:0b:8c:79:18:68:ed:b7:
         29:f0:ff:0f:35:c7:4d:7a:1e:3f:ec:5e:1a:cf:dc:ef:a7:e1:
         f6:f3:f0:89:7c:1c:04:51:4b:6d:cc:67:60:cf:60:01:13:18:
         ce:c3:c1:94:bc:35:9e:75:f4:74:c4:50:7f:e5:ab:e7:75:e5:
         e3:3b:1f:c9:43:06:03:c6:11:66:38:c7:2f:23:6f:04:fe:c6:
         5a:0d:0e:57:15:a0:52:a7:14:f6:b3:66:53:f3:b9:8b:33:6f:
         0b:5e:e5:ff:0d:a8:f9:73:d4:2b:1d:9d:f3:b1:55:d4:38:35:
         92:ea:4c:da:37:2b:7a:49:73:ee:78:fa:09:1a:dd:f5:dd:d2:
         50:da:96:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----