Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/NRvNcqz6b6eJY7hBy5kMXLiPUlU.roa
File:                     NRvNcqz6b6eJY7hBy5kMXLiPUlU.roa (raw, json)
Hash identifier:          lGgQe/NWhnTyQSrDAgcs1YUC35BjUqf0zMSMuWj+tVk=
Subject key identifier:   35:1B:CD:72:AC:FA:6F:A7:89:63:B8:41:CB:99:0C:5C:B8:8F:52:55
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       446C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NRvNcqz6b6eJY7hBy5kMXLiPUlU.roa
Signing time:             Thu 10 Mar 2022 00:36:49 +0000
ROA not before:           Thu 10 Mar 2022 00:36:49 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17516 (0x446c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 10 00:36:49 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=351BCD72ACFA6FA78963B841CB990C5CB88F5255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d6:6d:23:dd:34:44:f8:d7:7c:14:d0:91:e6:
                    f8:6c:77:1d:ef:22:91:9d:e9:61:2d:3f:25:f8:08:
                    1f:1b:2e:3a:64:5d:f0:d4:50:89:8d:f6:a9:f0:43:
                    45:79:84:af:c9:af:a3:5b:1e:62:73:40:87:c3:93:
                    71:70:8c:11:de:21:5c:38:f8:68:cf:43:44:74:03:
                    93:a9:cf:1f:9e:ce:24:04:0e:30:fa:24:2a:66:73:
                    34:58:d1:e0:f6:ce:a7:63:1b:d6:cd:53:14:d0:6d:
                    fe:ae:25:54:5f:a9:78:e9:4f:dc:36:66:3b:34:7e:
                    33:d2:c3:6f:1f:81:54:9f:cc:d5:ea:7d:a5:7f:1d:
                    b6:f1:06:d7:15:ab:86:f0:0d:8a:04:fd:84:5e:ba:
                    26:ed:9c:ee:4e:48:0f:9d:3e:fb:9c:0e:37:e1:f1:
                    02:95:db:5f:c8:b9:e9:2e:58:b2:0b:70:9f:4a:26:
                    d3:9f:ff:30:1f:93:3c:45:a6:e5:1d:17:3c:65:91:
                    24:66:3c:e0:21:3d:a9:c9:b4:f8:2e:03:99:63:ab:
                    0b:ec:e1:90:db:ed:60:2e:50:b9:05:da:49:4e:2a:
                    57:c0:28:5d:65:19:0b:9b:a8:8b:d0:09:2c:ca:10:
                    f0:29:87:b7:86:aa:5e:67:a5:68:80:a7:f0:51:13:
                    db:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1B:CD:72:AC:FA:6F:A7:89:63:B8:41:CB:99:0C:5C:B8:8F:52:55
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/NRvNcqz6b6eJY7hBy5kMXLiPUlU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:7b:3b:8d:c0:60:6e:62:b8:5b:62:84:53:7c:16:35:b6:1b:
         dc:91:86:da:68:9d:a9:f5:72:c3:8f:b3:8d:67:5f:06:ad:23:
         7e:6a:eb:1e:85:d0:0e:91:0f:d5:11:f6:2d:70:dc:3f:19:2b:
         ab:98:5d:62:2b:73:30:66:33:40:8d:67:df:af:00:f3:bc:41:
         f0:2a:97:a5:40:1c:89:35:86:c9:d1:71:34:d1:ca:e5:8e:c1:
         d6:f2:44:1c:d3:d1:55:1f:94:31:35:4c:4e:ff:3c:56:2a:6c:
         b7:26:f0:d4:50:b2:f4:ea:2f:f7:d5:54:f6:e8:93:9f:07:38:
         a9:8f:53:da:99:d5:2e:15:ec:14:60:8e:c0:d0:99:bb:56:bf:
         d5:ed:84:4d:6d:a1:40:8b:02:ae:f5:34:7b:81:fb:95:8b:33:
         5a:47:52:35:87:5b:27:5a:df:6f:fd:32:a4:ba:45:db:f5:50:
         27:64:ba:51:e0:83:25:f6:2a:46:b3:eb:7a:e0:ec:30:78:ce:
         49:06:c1:5e:40:32:c6:ce:0b:4f:1a:a8:7e:ff:a6:d9:ff:1e:
         f4:42:37:f5:ec:16:81:d4:c8:4f:17:9d:ef:50:a5:24:1f:51:
         af:75:39:ed:35:e3:22:c2:0f:b7:4b:9c:c7:2b:10:c0:8d:a6:
         e3:98:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----