Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/LulOe-_w_wgBz_DxE7xiENB327A.roa
File:                     LulOe-_w_wgBz_DxE7xiENB327A.roa (raw, json)
Hash identifier:          Se+GUGtzCZORTk8OQ8FvOaCMlClFEUiNUeQ9w1ldPIo=
Subject key identifier:   2E:E9:4E:7B:EF:F0:FF:08:01:CF:F0:F1:13:BC:62:10:D0:77:DB:B0
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4747
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LulOe-_w_wgBz_DxE7xiENB327A.roa
Signing time:             Sun 01 May 2022 00:30:07 +0000
ROA not before:           Sun 01 May 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18247 (0x4747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May  1 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=2EE94E7BEFF0FF0801CFF0F113BC6210D077DBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:9c:ba:ce:52:b4:71:ac:38:31:cd:8f:1e:
                    24:b2:6d:df:1d:67:ce:8a:5c:2d:df:fd:e5:7b:37:
                    94:9f:8c:79:05:bb:70:0a:76:8d:ba:65:d3:c1:67:
                    a2:94:e6:6a:dd:44:13:5e:20:d4:14:96:29:c6:84:
                    76:8e:9e:94:78:d3:05:44:d3:72:80:c2:3b:41:a9:
                    c7:0f:aa:d6:f3:d1:e5:51:96:78:36:6d:4a:7c:a9:
                    c1:d0:89:f2:c1:11:80:0b:38:01:86:0f:a2:3c:a5:
                    fc:cf:dc:e7:16:0f:07:2e:29:3a:11:b1:a3:8c:0a:
                    15:82:f7:43:f3:b8:35:51:80:20:41:7c:31:98:45:
                    78:87:c7:8f:4d:36:dd:bf:ea:f2:9b:34:ee:a6:38:
                    6a:7f:ea:ac:ce:99:8d:8f:f8:90:a0:a9:aa:69:8c:
                    d1:81:5c:47:91:ed:81:88:fa:73:83:07:aa:6d:98:
                    54:50:81:60:c7:8f:bd:8b:c1:45:b9:5c:6e:c2:3c:
                    72:d7:d9:0c:d3:d9:d7:4a:9b:a5:1e:b8:ff:3c:58:
                    d0:d1:2c:99:8c:0d:69:c7:7c:1e:e0:1b:f4:80:ec:
                    0f:02:98:9a:a8:8e:71:60:11:e6:3a:27:cc:f0:73:
                    d7:24:4d:16:1b:0d:6c:ce:36:09:6d:dc:11:f6:21:
                    11:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E9:4E:7B:EF:F0:FF:08:01:CF:F0:F1:13:BC:62:10:D0:77:DB:B0
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LulOe-_w_wgBz_DxE7xiENB327A.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:99:a0:81:b2:c1:2d:01:bb:aa:d4:57:0b:79:13:3b:74:6a:
         7d:c5:5f:98:1a:68:f9:32:4d:de:b5:b5:f3:dd:3f:bd:10:7f:
         12:ef:24:f3:ca:1d:c6:62:53:21:b9:66:06:4e:ef:ec:17:8d:
         09:85:34:61:33:f0:17:f6:fb:a1:4d:a7:79:05:22:b9:d4:7d:
         b8:45:98:c1:a7:d7:83:fa:ca:0a:db:09:40:c3:04:47:c8:0c:
         2a:09:8b:e3:a4:c9:54:3d:76:3d:5a:fc:3f:8e:62:a2:1b:89:
         17:da:e1:84:d4:86:58:32:77:b8:cb:da:95:ec:61:52:ba:6d:
         df:2f:6c:39:9b:49:c1:92:cf:8a:13:c9:f7:e4:1c:bb:a0:a9:
         7e:cc:13:30:d4:53:6a:c5:4e:af:1f:8f:89:ac:f6:b4:23:d3:
         ab:56:74:04:3f:3f:1e:c4:8a:c4:c0:9e:16:6e:ae:c6:fe:33:
         41:3d:da:6b:85:cf:12:47:26:e8:c2:df:be:ba:57:0d:9b:f0:
         77:07:d8:03:1b:05:d3:ce:2b:9c:8f:ca:dc:d0:7a:85:ac:17:
         23:90:c7:5f:b7:fb:ca:87:fe:07:7b:72:fa:cd:1a:13:0c:fb:
         da:82:62:ba:20:b8:94:b8:67:8a:a8:78:51:af:42:a9:04:aa:
         ff:88:da:a0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDEw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDJFRTk0RTdCRUZGMEZG
MDgwMUNGRjBGMTEzQkM2MjEwRDA3N0RCQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYuJy6zlK0caw4Mc2PHiSybd8dZ86KXC3f/eV7N5SfjHkFu3AK
do26ZdPBZ6KU5mrdRBNeINQUlinGhHaOnpR40wVE03KAwjtBqccPqtbz0eVRlng2
bUp8qcHQifLBEYALOAGGD6I8pfzP3OcWDwcuKToRsaOMChWC90PzuDVRgCBBfDGY
RXiHx49NNt2/6vKbNO6mOGp/6qzOmY2P+JCgqappjNGBXEeR7YGI+nODB6ptmFRQ
gWDHj72LwUW5XG7CPHLX2QzT2ddKm6UeuP88WNDRLJmMDWnHfB7gG/SA7A8CmJqo
jnFgEeY6J8zwc9ckTRYbDWzONglt3BH2IRH7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQULulOe+/w/wgBz/DxE7xiENB327AwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9MdWxPZS1fd193Z0J6X0R4RTd4aUVOQjMyN0Eucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
ABCZoIGywS0Bu6rUVwt5Ezt0an3FX5gaaPkyTd61tfPdP70QfxLvJPPKHcZiUyG5
ZgZO7+wXjQmFNGEz8Bf2+6FNp3kFIrnUfbhFmMGn14P6ygrbCUDDBEfIDCoJi+Ok
yVQ9dj1a/D+OYqIbiRfa4YTUhlgyd7jL2pXsYVK6bd8vbDmbScGSz4oTyffkHLug
qX7MEzDUU2rFTq8fj4ms9rQj06tWdAQ/Px7EisTAnhZursb+M0E92muFzxJHJujC
3766Vw2b8HcH2AMbBdPOK5yPytzQeoWsFyOQx1+3+8qH/gd7cvrNGhMM+9qCYrog
uJS4Z4qoeFGvQqkEqv+I2qA=
-----END CERTIFICATE-----