Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/YEbstE-EQJlmfFRAthBOrSkpWxQ.roa
File:                     YEbstE-EQJlmfFRAthBOrSkpWxQ.roa (raw, json)
Hash identifier:          8hsxGVSWlXmpyRIoptUjYd2rJ97xJXd8US3om9Oowho=
Subject key identifier:   60:46:EC:B4:4F:84:40:99:66:7C:54:40:B6:10:4E:AD:29:29:5B:14
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4522
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YEbstE-EQJlmfFRAthBOrSkpWxQ.roa
Signing time:             Wed 23 Mar 2022 00:30:06 +0000
ROA not before:           Wed 23 Mar 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17698 (0x4522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 23 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=6046ECB44F844099667C5440B6104EAD29295B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:73:81:50:72:3e:83:d5:78:36:79:67:e7:a3:
                    81:ec:db:14:b8:78:3a:52:48:1f:44:ed:e7:35:e4:
                    2e:a1:50:3c:ba:6c:20:41:fc:39:26:82:1a:a3:d6:
                    26:22:85:17:6e:da:91:78:63:89:8b:af:06:5d:3b:
                    e9:e5:89:1d:9f:51:d5:f3:58:73:87:6e:1a:7d:e4:
                    9d:c9:d6:db:54:a4:89:83:70:74:a0:82:5b:98:ae:
                    04:eb:9c:d2:ae:aa:75:f0:13:1c:ab:09:6b:9a:10:
                    80:cd:4c:0b:c3:a3:1c:1f:d9:15:c4:9a:28:f1:f0:
                    7a:54:5d:3d:1c:80:d0:22:66:8e:0d:4e:2b:4a:20:
                    43:c4:4a:79:62:60:c2:30:48:ac:2a:1a:73:3c:50:
                    a5:83:02:25:50:5d:28:cd:88:f0:d6:a0:b2:69:c9:
                    ce:ec:f3:62:b0:d9:21:7b:5c:b2:69:e2:58:28:b1:
                    d9:bd:c8:89:95:24:ab:21:5e:8c:bb:0c:cb:bb:ef:
                    90:aa:94:21:e0:13:a7:22:eb:21:50:6a:7c:85:05:
                    7c:22:c8:d8:62:c4:7f:4f:48:bf:e2:1c:cd:a2:a9:
                    6e:26:6d:2d:d5:34:64:94:c9:83:37:b9:b1:5a:4f:
                    82:0b:2f:83:cd:f0:37:e0:e3:30:f1:db:5c:0b:e3:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:46:EC:B4:4F:84:40:99:66:7C:54:40:B6:10:4E:AD:29:29:5B:14
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/YEbstE-EQJlmfFRAthBOrSkpWxQ.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:1b:07:17:d8:a5:54:54:e4:51:cb:bc:74:61:ef:cb:ec:bb:
         18:ac:a3:e4:f3:74:dc:52:f4:52:a6:ac:f8:29:c3:8e:96:b5:
         7b:1b:5b:39:45:9c:49:8d:df:3b:54:a1:41:04:48:5b:76:c4:
         d6:91:22:1c:b7:ba:a3:a1:62:94:0a:09:0f:48:32:4d:22:0a:
         ea:48:2d:03:91:4e:21:79:48:1b:a5:e1:f9:40:fc:49:a2:05:
         9d:86:14:2d:2d:60:7c:9b:8f:83:09:d3:88:53:b3:5e:a7:f7:
         56:ec:7a:b3:84:a8:45:37:4f:b3:d0:d6:93:af:a3:57:29:53:
         ae:a2:19:ab:92:98:74:5a:ae:89:f9:f9:28:4f:a3:e1:64:e9:
         3e:4a:e0:01:b3:ee:10:c0:af:57:f5:b0:a9:c7:62:d8:77:58:
         3c:95:43:05:4d:34:00:d7:fe:bd:53:c0:c0:7e:f2:81:64:f2:
         10:90:32:85:af:3a:e3:8e:81:d6:c1:35:61:6a:6b:db:90:67:
         8b:de:3c:49:84:49:df:57:30:74:d5:ad:ac:03:c1:d8:df:74:
         fe:7c:14:ac:af:81:42:33:35:0e:b6:a4:8f:c9:3d:eb:98:ff:
         a3:87:c7:17:bf:73:9d:65:13:cc:0c:0e:27:cb:ba:7f:8d:ea:
         8d:f2:c0:46
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRSIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMjMw
MDMwMDZaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDYwNDZFQ0I0NEY4NDQw
OTk2NjdDNTQ0MEI2MTA0RUFEMjkyOTVCMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIc4FQcj6D1Xg2eWfno4Hs2xS4eDpSSB9E7ec15C6hUDy6bCBB
/Dkmghqj1iYihRdu2pF4Y4mLrwZdO+nliR2fUdXzWHOHbhp95J3J1ttUpImDcHSg
gluYrgTrnNKuqnXwExyrCWuaEIDNTAvDoxwf2RXEmijx8HpUXT0cgNAiZo4NTitK
IEPESnliYMIwSKwqGnM8UKWDAiVQXSjNiPDWoLJpyc7s82Kw2SF7XLJp4lgosdm9
yImVJKshXoy7DMu775CqlCHgE6ci6yFQanyFBXwiyNhixH9PSL/iHM2iqW4mbS3V
NGSUyYM3ubFaT4ILL4PN8Dfg4zDx21wL42FvAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUYEbstE+EQJlmfFRAthBOrSkpWxQwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9ZRWJzdEUtRVFKbG1mRlJBdGhCT3JTa3BXeFEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AIYbBxfYpVRU5FHLvHRh78vsuxiso+TzdNxS9FKmrPgpw46WtXsbWzlFnEmN3ztU
oUEESFt2xNaRIhy3uqOhYpQKCQ9IMk0iCupILQORTiF5SBul4flA/EmiBZ2GFC0t
YHybj4MJ04hTs16n91bserOEqEU3T7PQ1pOvo1cpU66iGauSmHRaron5+ShPo+Fk
6T5K4AGz7hDAr1f1sKnHYth3WDyVQwVNNADX/r1TwMB+8oFk8hCQMoWvOuOOgdbB
NWFqa9uQZ4vePEmESd9XMHTVrawDwdjfdP58FKyvgUIzNQ62pI/JPeuY/6OHxxe/
c51lE8wMDifLun+N6o3ywEY=
-----END CERTIFICATE-----