Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/G4YEHNgOauRD4ZTZXoTWuMsmHlk.roa
File:                     G4YEHNgOauRD4ZTZXoTWuMsmHlk.roa (raw, json)
Hash identifier:          viPkGk42MEqT55Zlk7P/85MjLzM1W8uAqWMpd6NSxbs=
Subject key identifier:   1B:86:04:1C:D8:0E:6A:E4:43:E1:94:D9:5E:84:D6:B8:CB:26:1E:59
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42FC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/G4YEHNgOauRD4ZTZXoTWuMsmHlk.roa
Signing time:             Fri 11 Feb 2022 00:30:07 +0000
ROA not before:           Fri 11 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17148 (0x42fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 11 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=1B86041CD80E6AE443E194D95E84D6B8CB261E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:7a:7b:3c:8e:16:0e:05:27:01:df:59:c3:
                    d9:e1:dc:7d:ad:25:6c:d0:d5:72:a2:61:de:03:d8:
                    d9:69:67:98:18:37:29:5d:fc:cf:8d:b8:e1:4c:8e:
                    c1:2c:3b:08:f1:7d:50:9e:19:87:92:e6:a7:6b:ad:
                    8f:a5:ac:fe:48:ff:e4:03:ac:c6:b2:9b:e7:96:08:
                    3a:00:67:3b:7e:e3:c0:b2:cf:70:80:0c:e1:69:3a:
                    ee:7c:5c:2e:5b:81:ed:2d:83:88:bb:4d:46:71:8f:
                    30:5e:79:ec:d5:3a:39:42:bc:0d:60:0f:1b:4a:73:
                    72:b9:21:9b:26:42:d8:a0:09:43:2b:30:05:17:92:
                    f2:38:53:58:e6:95:d8:14:95:69:0a:66:86:cf:28:
                    57:d1:aa:c3:a8:53:6b:63:5a:c9:00:cf:fd:6f:36:
                    2f:e2:eb:6a:af:6b:ea:11:37:35:53:51:70:02:20:
                    5c:04:65:8d:58:20:04:43:a3:d1:9d:e0:9e:83:44:
                    d9:5d:f9:e3:b1:7d:c2:4c:f1:d6:52:31:5e:8c:94:
                    2a:a1:22:71:a3:83:04:c6:54:36:ab:42:5d:ed:95:
                    9f:99:1e:63:9c:3d:04:4a:28:9b:f1:b9:cd:0b:e7:
                    f9:b7:bc:ea:62:2d:61:46:ab:5a:d9:a2:1f:50:9f:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:86:04:1C:D8:0E:6A:E4:43:E1:94:D9:5E:84:D6:B8:CB:26:1E:59
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/G4YEHNgOauRD4ZTZXoTWuMsmHlk.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:ac:cd:31:48:0d:01:cc:d2:c6:d6:60:49:94:a9:e4:87:
         e8:a5:ca:90:cb:f9:5b:10:fe:7f:5a:5b:99:0c:02:cb:5a:d2:
         43:5b:92:ea:4a:8a:0c:86:3a:53:b2:d6:a6:a5:23:3d:c7:6e:
         8b:17:a0:89:51:bd:99:61:06:02:b1:0f:bd:a5:f4:39:f4:b8:
         2e:fd:f3:97:fa:ab:68:5a:78:49:07:8e:fa:ba:f7:35:e1:c6:
         84:a8:2b:2a:28:06:a9:b0:66:e6:07:b5:15:b5:68:a1:6d:58:
         e6:54:cf:70:d3:a9:05:da:22:3a:49:f2:68:9b:5f:56:0c:a4:
         32:15:cd:ee:a5:54:f2:fb:b2:00:ad:13:80:3d:f7:11:1b:bf:
         73:be:be:6b:e5:b3:72:cb:6c:a7:70:14:ac:d7:49:4d:23:96:
         55:9b:62:f4:27:73:5c:90:81:66:90:67:a0:14:5b:a4:d0:37:
         de:97:d4:d7:e3:8e:00:5a:1b:e6:8a:d1:e9:19:27:cd:c6:37:
         d0:d4:51:a9:a9:ec:54:48:aa:b8:3c:aa:c3:1b:b4:d6:39:41:
         2c:34:c2:62:58:c6:77:83:22:88:81:14:5e:97:c2:e5:f8:a2:
         1e:27:98:36:dc:55:da:1e:19:07:77:fe:7c:29:25:69:88:8f:
         19:3e:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----