Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/TkgGDmdiT0dXJApNPXgm6KqriCw.roa
File:                     TkgGDmdiT0dXJApNPXgm6KqriCw.roa (raw, json)
Hash identifier:          AcS8WkZDj/KFYe6Xm7kIELsn6285/s2e6IziTCrnU4c=
Subject key identifier:   4E:48:06:0E:67:62:4F:47:57:24:0A:4D:3D:78:26:E8:AA:AB:88:2C
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43C9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TkgGDmdiT0dXJApNPXgm6KqriCw.roa
Signing time:             Sat 26 Feb 2022 00:30:08 +0000
ROA not before:           Sat 26 Feb 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17353 (0x43c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 26 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=4E48060E67624F4757240A4D3D7826E8AAAB882C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:00:7b:23:24:1d:eb:57:97:29:d3:6d:eb:
                    ac:45:df:1e:38:45:06:82:d8:40:39:da:fb:8a:ed:
                    c2:0b:1b:e9:2d:c9:9f:16:b1:78:43:44:ce:e4:5c:
                    17:8c:50:30:76:a6:75:1f:ec:ff:e5:74:7b:f8:d7:
                    5e:c3:44:71:e6:16:f2:68:da:d4:7a:25:1f:17:7b:
                    ac:06:b0:19:61:05:96:99:b3:46:99:1a:ed:d7:85:
                    c5:86:62:40:3e:aa:f1:a7:e9:7c:13:b2:e6:f5:c1:
                    c0:64:25:40:c8:c3:e3:4d:21:e7:01:ff:4e:b7:49:
                    a3:cc:7f:9c:81:a6:bb:54:71:c3:ae:4b:19:97:df:
                    ee:c7:dd:18:86:1f:00:e9:90:fa:dc:e1:10:ad:ca:
                    47:29:26:9b:f5:c4:0b:59:7a:e9:d6:2f:0d:26:f4:
                    c6:1e:e3:0e:cc:c1:c2:78:1b:a2:52:dd:3f:43:75:
                    cc:0d:ee:b4:8b:9f:47:a0:b2:ac:1e:66:11:6a:bc:
                    6c:6b:3c:77:45:6b:60:4b:a2:3b:05:c7:4d:94:f7:
                    7f:fb:1e:55:18:8c:6d:e4:fd:2a:f1:1d:d7:b2:d9:
                    45:c5:ee:22:e5:38:9e:8c:2d:5a:c8:c3:d0:d0:45:
                    94:cb:67:83:d9:79:50:03:20:f4:9b:4a:df:fa:03:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:48:06:0E:67:62:4F:47:57:24:0A:4D:3D:78:26:E8:AA:AB:88:2C
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TkgGDmdiT0dXJApNPXgm6KqriCw.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:84:ce:b2:ad:a4:78:66:db:27:0b:f9:95:b2:33:1a:f3:dc:
         ee:76:14:e2:d5:57:91:c3:80:d0:19:d7:f5:09:a3:0d:bc:4a:
         85:56:18:b7:df:30:e6:78:7e:00:8e:91:17:77:49:97:2f:c1:
         8a:bb:d6:70:ab:db:92:5f:c5:12:6f:dc:d0:e2:4f:29:fa:ec:
         58:2d:7e:08:58:fb:bb:66:f3:05:71:2b:25:90:b2:f3:c7:b5:
         32:f8:b7:f9:1a:a9:3b:11:9f:79:9e:7f:37:55:bf:79:42:19:
         72:ef:37:1b:54:77:b0:ec:81:65:9c:86:9b:a6:2d:50:c5:18:
         16:d4:22:d8:1e:c3:cc:66:08:74:0d:88:e0:a6:58:49:b5:a8:
         c3:10:fb:03:f8:ad:81:1f:34:65:6d:54:5d:6d:10:6b:fd:ac:
         35:34:41:9f:92:9d:d6:a2:83:cd:7e:74:08:44:b8:64:a7:a0:
         39:c7:62:93:09:44:f7:96:15:f5:8e:79:cb:69:60:27:b5:d9:
         54:ae:2e:67:0a:ba:da:12:d9:73:21:55:1f:b9:49:02:bf:d5:
         12:84:27:39:9b:9b:bb:16:b5:1e:2e:df:01:e5:64:00:4f:00:
         ef:fb:55:74:93:44:4e:3b:02:9d:76:9a:d8:8c:3d:b4:4b:4e:
         06:f2:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----