Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ZIULW_HxLoKtik09U-veOwIhfWc.roa
File:                     ZIULW_HxLoKtik09U-veOwIhfWc.roa (raw, json)
Hash identifier:          L7nZecAoGt8V8DUj2A+eZzEMqAkZVfyEwsoGfBA2UFc=
Subject key identifier:   64:85:0B:5B:F1:F1:2E:82:AD:8A:4D:3D:53:EB:DE:3B:02:21:7D:67
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4656
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZIULW_HxLoKtik09U-veOwIhfWc.roa
Signing time:             Thu 14 Apr 2022 00:30:09 +0000
ROA not before:           Thu 14 Apr 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18006 (0x4656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 14 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=64850B5BF1F12E82AD8A4D3D53EBDE3B02217D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:59:88:77:56:98:17:a6:79:ea:7e:8f:a9:b9:
                    d3:1b:f9:d9:4e:32:57:66:78:5f:78:59:31:3d:3e:
                    b9:26:db:08:f1:df:79:ba:24:08:ab:ca:51:df:24:
                    dd:d2:61:c4:7d:de:5d:80:9c:74:24:58:c0:39:00:
                    56:5a:0d:01:58:6c:c6:06:b3:83:46:16:ab:f6:a2:
                    6e:fa:11:bf:c5:a5:f6:71:52:c3:2e:9d:d6:58:26:
                    51:53:b2:5e:20:fa:fa:11:a6:90:d5:f6:b9:2f:31:
                    54:d8:43:d2:1d:b3:97:1f:e9:bd:96:0e:84:91:df:
                    aa:fd:fa:d5:65:b0:35:f6:61:55:46:49:7a:b5:70:
                    69:50:ca:df:07:f6:7a:69:4e:a3:84:ed:d1:e8:23:
                    88:1d:5c:92:68:62:c5:28:90:55:bd:b1:16:49:bd:
                    2a:80:a4:76:8f:3a:90:56:c4:ed:d9:5e:09:f6:b1:
                    43:ed:e9:82:0c:e9:7d:a8:5d:70:77:58:d6:1f:7f:
                    ad:de:cb:3c:b4:2c:ff:87:b7:c4:9d:b7:43:a5:10:
                    2b:cf:fc:a0:3b:ab:d7:c7:1c:f8:2a:e8:cf:a2:ac:
                    f7:09:92:a7:d9:a0:29:25:33:4d:b8:02:28:b9:56:
                    21:eb:54:04:49:ee:3e:b7:e2:c3:e8:2d:c2:87:63:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:85:0B:5B:F1:F1:2E:82:AD:8A:4D:3D:53:EB:DE:3B:02:21:7D:67
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZIULW_HxLoKtik09U-veOwIhfWc.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:79:f2:9a:02:3c:71:1c:81:d7:2b:75:64:29:56:6d:54:3b:
         f4:45:75:86:97:f0:3b:20:04:54:17:76:e1:53:1f:26:ff:88:
         fd:d1:53:e1:56:0b:ce:9a:96:7d:3c:fe:59:f4:04:fd:aa:c2:
         64:c3:2f:b5:1a:fe:82:d9:12:b7:74:af:ea:ba:01:4d:af:82:
         7e:f0:6d:bc:dc:5f:a0:19:d3:10:10:6c:84:b9:4d:2d:00:41:
         b1:38:7d:2d:77:1b:b3:97:86:8a:ad:bf:47:71:d7:4f:6e:f3:
         91:3c:08:3f:db:42:b6:16:7a:09:42:8f:b5:cb:5e:cc:53:4e:
         58:b1:82:6d:1e:9f:7a:eb:08:89:89:ee:f7:98:51:40:a2:52:
         e6:e2:e0:ba:6d:70:28:da:27:2a:f0:be:b9:22:97:e7:ef:c3:
         60:ae:f2:b5:fc:05:41:ad:a7:8c:39:db:ce:3b:af:4e:70:db:
         b7:70:8e:40:da:02:42:9c:dd:d2:b3:93:bd:b4:50:53:b3:16:
         36:4d:b3:85:79:46:78:9b:33:f6:a0:b1:cb:79:ca:96:c2:1a:
         cd:32:b6:22:0e:a9:c2:fe:aa:cc:81:41:1f:28:f8:a5:2e:08:
         2a:b5:4d:ba:68:01:9e:9a:83:58:90:5f:d9:fe:bc:23:81:5c:
         e8:3d:b0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----