Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/X5G9DqQ5-_j5TMeiJpuZ7KV28Do.roa
File:                     X5G9DqQ5-_j5TMeiJpuZ7KV28Do.roa (raw, json)
Hash identifier:          GRLDcjV3XjM3+9p9MCzJtM+5QHv7H5JOHRVS7GjHHB4=
Subject key identifier:   5F:91:BD:0E:A4:39:FB:F8:F9:4C:C7:A2:26:9B:99:EC:A5:76:F0:3A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       33E4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/X5G9DqQ5-_j5TMeiJpuZ7KV28Do.roa
Signing time:             Wed 14 Apr 2021 10:34:46 +0000
ROA not before:           Wed 14 Apr 2021 10:34:46 +0000
ROA not after:            Fri 01 Apr 2022 01:01:03 +0000
asID:                     47065
IP address blocks:        147.28.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13284 (0x33e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 14 10:34:46 2021 GMT
            Not After : Apr  1 01:01:03 2022 GMT
        Subject: CN=5F91BD0EA439FBF8F94CC7A2269B99ECA576F03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:a4:3f:8c:27:35:8f:25:57:fe:f4:7c:ab:
                    49:05:c1:ca:2d:3b:ba:96:df:b9:0f:ad:7c:b8:b4:
                    45:c7:da:d9:a9:cb:d9:12:f7:81:63:22:f6:bc:97:
                    b1:b3:ab:c4:61:e8:49:92:4f:02:8f:90:44:84:bc:
                    5e:31:b7:52:c2:95:f9:39:03:c3:a5:e7:8a:cd:43:
                    64:3b:23:1b:4a:a8:c4:83:ec:6d:ee:28:f0:eb:79:
                    29:e6:4f:d9:86:e6:7b:88:53:14:5b:98:90:7c:b4:
                    2c:1a:44:09:1a:0e:8b:dd:81:fa:51:b0:15:aa:f3:
                    21:b3:a1:65:f7:4d:00:9f:dd:9f:8c:48:d6:35:ae:
                    a9:5a:e9:dd:31:37:47:c1:50:df:eb:88:c2:14:f7:
                    60:84:ed:8f:b1:84:7d:e8:60:af:f3:94:86:63:af:
                    97:49:c7:8f:f0:af:75:25:f6:5a:36:73:bb:61:c2:
                    aa:c5:5d:f6:73:9d:7e:d5:ae:40:43:c5:c1:1d:1a:
                    30:2b:29:db:df:42:4d:0f:81:90:a4:d3:eb:62:60:
                    31:f6:25:f1:66:13:97:d8:93:66:df:e7:bf:7e:03:
                    ad:e9:8b:44:4e:dc:d9:69:1c:eb:c7:fc:9f:b9:b6:
                    1e:fd:f0:eb:5a:8e:f2:44:88:d8:f8:54:f3:dd:1f:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:91:BD:0E:A4:39:FB:F8:F9:4C:C7:A2:26:9B:99:EC:A5:76:F0:3A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/X5G9DqQ5-_j5TMeiJpuZ7KV28Do.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:38:ad:aa:45:d2:b3:6d:c6:f8:cc:ce:25:4e:ad:94:52:72:
         ef:8c:e7:52:b9:dc:94:ad:57:d5:90:ec:45:50:32:06:95:9a:
         f6:2c:b7:95:01:7c:1f:e0:c7:63:0e:47:02:07:7f:b8:ad:56:
         79:a1:1a:83:31:fd:49:c1:68:4f:dd:01:4f:46:1e:c8:f2:9d:
         81:d3:70:a0:bf:5d:b1:09:17:70:f7:42:bf:6a:a3:c8:bd:f8:
         e8:a8:7a:e2:9b:d5:dd:8d:ce:87:fc:06:01:7f:ba:8b:66:78:
         72:89:e6:5b:e7:9e:f7:7e:fc:fa:bd:81:9c:37:58:52:10:9e:
         10:67:51:e0:87:11:11:40:1b:79:36:e8:b5:f8:24:6d:8c:84:
         60:19:9d:8a:23:62:d8:4f:50:5e:9e:ee:1f:fc:c2:56:a0:34:
         6b:42:ea:e0:49:a3:24:32:1e:d3:61:11:7c:56:57:81:c4:b4:
         ed:ff:50:60:5d:17:09:a0:38:70:fc:01:82:1c:17:c4:7f:e0:
         aa:dd:5f:47:4a:cb:bc:82:a4:31:85:87:98:3a:a5:df:da:5f:
         62:aa:c7:6a:47:f8:cc:af:66:96:d9:7e:12:f0:cc:a4:2c:7a:
         60:14:ad:f1:1f:96:77:05:c1:1c:bf:3f:f5:79:1e:98:32:3f:
         53:b0:4e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----