Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/aBmhsnxhAyYDenFyerpSp8k9Zno.roa
File:                     aBmhsnxhAyYDenFyerpSp8k9Zno.roa (raw, json)
Hash identifier:          JFIivNWE0ZPdu9moKEgt7/ATUosAFjaCb20CpBNv5tw=
Subject key identifier:   68:19:A1:B2:7C:61:03:26:03:7A:71:72:7A:BA:52:A7:C9:3D:66:7A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4759
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aBmhsnxhAyYDenFyerpSp8k9Zno.roa
Signing time:             Mon 02 May 2022 00:30:12 +0000
ROA not before:           Mon 02 May 2022 00:30:12 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18265 (0x4759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May  2 00:30:12 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=6819A1B27C610326037A71727ABA52A7C93D667A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:60:75:25:1a:2d:3a:5e:ee:4a:0a:1f:18:
                    9e:90:10:d0:38:ed:41:cb:08:9e:2a:38:07:21:dd:
                    3a:d5:75:56:a9:44:b1:36:ec:72:ba:42:79:06:00:
                    74:e8:4e:92:07:c3:75:35:cb:dc:89:e5:83:75:95:
                    e6:02:79:94:94:e4:a1:ad:0f:8f:d9:57:61:3f:92:
                    f6:da:57:80:23:ed:2f:b3:77:17:9b:39:40:bc:93:
                    18:ab:92:a8:18:b7:d9:50:fd:6f:dd:a9:ac:1c:91:
                    a0:92:f3:74:4f:e4:e2:8c:46:e4:85:d3:5d:b8:b2:
                    26:ea:03:5a:7d:e8:91:20:07:a4:25:86:27:9d:9b:
                    a7:08:79:0a:fb:d6:16:56:71:be:ed:cb:29:c0:7d:
                    2c:9a:2a:a6:cf:11:30:6e:f3:b3:12:f5:06:d1:52:
                    96:37:e1:e9:d2:e6:a0:71:6d:db:d9:25:b4:c3:26:
                    a4:6e:f8:da:29:8a:25:8a:60:7b:99:26:39:0f:c9:
                    44:6a:b4:b1:7a:7b:18:6d:23:1c:66:22:15:9c:af:
                    05:19:96:84:a9:22:7d:e2:02:3c:05:3b:eb:86:ee:
                    11:72:93:6c:19:dd:8a:d7:d9:89:09:0a:6b:fc:43:
                    75:6b:90:fa:cf:cf:35:1f:a2:56:1a:56:b9:72:b0:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:19:A1:B2:7C:61:03:26:03:7A:71:72:7A:BA:52:A7:C9:3D:66:7A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/aBmhsnxhAyYDenFyerpSp8k9Zno.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:75:9d:ba:d6:45:59:46:2e:cf:e7:54:93:d3:5b:24:e1:25:
         b8:1d:39:ae:b3:3b:d5:68:22:24:95:dd:38:3b:3b:a0:5c:ae:
         c5:75:bc:97:d7:40:8f:f3:83:e4:ab:c6:be:c2:6a:fc:6d:8e:
         22:d0:6f:52:2b:31:b0:af:e0:bc:d7:69:55:1d:28:14:df:33:
         42:4b:ac:fa:ad:03:08:85:a0:ac:32:68:6f:54:cc:d7:6e:60:
         65:99:25:f9:d7:ed:5c:dc:1f:6b:1d:84:82:53:66:63:d9:b1:
         d2:6a:5d:63:17:a8:b6:82:b9:a1:dc:70:dd:41:cf:2b:0c:2e:
         5a:76:1a:c7:dd:b6:e5:82:55:41:f2:b2:56:cb:e3:e4:85:10:
         36:fb:42:68:2b:45:e5:18:e0:77:41:2c:6a:ba:6a:9d:12:7c:
         8f:6b:99:19:b4:80:37:9d:d6:41:29:ca:b8:ca:01:16:ec:91:
         b3:cd:b3:cd:39:91:9e:5e:44:12:1a:cd:33:7d:1d:73:2a:5e:
         3e:a4:e2:18:d6:b8:f3:a0:fc:fa:10:5c:69:d2:8e:64:c0:49:
         25:76:64:0b:c9:51:64:a8:12:d6:ed:6d:28:0c:80:63:57:95:
         1b:c9:71:2f:49:23:56:4d:c9:d7:e3:e8:e3:2b:8b:b2:b8:be:
         60:ad:56:1b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR1kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDIw
MDMwMTJaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDY4MTlBMUIyN0M2MTAz
MjYwMzdBNzE3MjdBQkE1MkE3QzkzRDY2N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9NWB1JRotOl7uSgofGJ6QENA47UHLCJ4qOAch3TrVdVapRLE2
7HK6QnkGAHToTpIHw3U1y9yJ5YN1leYCeZSU5KGtD4/ZV2E/kvbaV4Aj7S+zdxeb
OUC8kxirkqgYt9lQ/W/dqawckaCS83RP5OKMRuSF0124sibqA1p96JEgB6Qlhied
m6cIeQr71hZWcb7tyynAfSyaKqbPETBu87MS9QbRUpY34enS5qBxbdvZJbTDJqRu
+NopiiWKYHuZJjkPyURqtLF6exhtIxxmIhWcrwUZloSpIn3iAjwFO+uG7hFyk2wZ
3YrX2YkJCmv8Q3VrkPrPzzUfolYaVrlysNCrAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUaBmhsnxhAyYDenFyerpSp8k9ZnowHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9hQm1oc254aEF5WURlbkZ5ZXJwU3A4azlabm8ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
AIN1nbrWRVlGLs/nVJPTWyThJbgdOa6zO9VoIiSV3Tg7O6BcrsV1vJfXQI/zg+Sr
xr7CavxtjiLQb1IrMbCv4LzXaVUdKBTfM0JLrPqtAwiFoKwyaG9UzNduYGWZJfnX
7VzcH2sdhIJTZmPZsdJqXWMXqLaCuaHccN1BzysMLlp2GsfdtuWCVUHyslbL4+SF
EDb7QmgrReUY4HdBLGq6ap0SfI9rmRm0gDed1kEpyrjKARbskbPNs805kZ5eRBIa
zTN9HXMqXj6k4hjWuPOg/PoQXGnSjmTASSV2ZAvJUWSoEtbtbSgMgGNXlRvJcS9J
I1ZNydfj6OMri7K4vmCtVhs=
-----END CERTIFICATE-----