Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/e5oXfoT1MmwhRdMYN4hbbULICk0.roa
File:                     e5oXfoT1MmwhRdMYN4hbbULICk0.roa (raw, json)
Hash identifier:          ClXWHAHoethqskN/ofNuhGi6hgldTMur/xMy+LY8wq0=
Subject key identifier:   7B:9A:17:7E:84:F5:32:6C:21:45:D3:18:37:88:5B:6D:42:C8:0A:4D
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       46B8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/e5oXfoT1MmwhRdMYN4hbbULICk0.roa
Signing time:             Thu 21 Apr 2022 00:30:07 +0000
ROA not before:           Thu 21 Apr 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18104 (0x46b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 21 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=7B9A177E84F5326C2145D31837885B6D42C80A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ac:2d:74:57:29:4d:39:22:76:96:3d:23:d4:
                    cd:02:e6:2d:77:d3:6c:ff:ff:88:bc:a4:b7:2d:d9:
                    ca:dc:43:3b:4b:ca:27:9b:6e:ac:3c:4b:9f:7a:25:
                    2a:9b:55:5e:73:f8:be:73:38:cc:4d:b3:5f:df:e7:
                    ac:be:9c:b0:c4:49:64:cf:0d:ea:46:8a:08:52:d2:
                    45:fd:af:0b:10:d7:8f:d9:80:37:16:a9:41:cb:79:
                    c0:b0:3e:fb:d7:06:55:f6:8a:e2:f5:7f:be:67:50:
                    90:b5:c7:1c:c3:29:c3:06:15:0e:7a:73:eb:8c:42:
                    b1:64:3d:0d:3e:43:dc:a6:f4:92:78:a1:63:04:81:
                    3f:b2:b0:10:0e:bd:45:00:88:4e:59:48:c7:3d:fb:
                    b6:2a:75:5a:2b:14:5c:b2:00:af:f3:7c:14:8d:7f:
                    4b:ee:64:56:8f:28:b8:65:73:df:e4:1d:ab:e9:1b:
                    58:69:0b:2f:a9:db:8b:35:89:bf:4e:7d:ee:1a:59:
                    9e:15:10:a8:78:c4:5e:ae:41:13:ff:c9:ae:77:84:
                    7f:32:92:d8:46:a4:4e:4f:37:97:d1:7c:ba:c8:19:
                    8a:4d:ca:00:15:db:33:fa:af:90:ba:3e:dd:98:e8:
                    6b:a3:f7:3c:69:60:57:09:0b:e8:dc:18:db:a4:78:
                    81:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9A:17:7E:84:F5:32:6C:21:45:D3:18:37:88:5B:6D:42:C8:0A:4D
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/e5oXfoT1MmwhRdMYN4hbbULICk0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:d0:4b:25:b3:a6:9c:34:2f:79:7d:51:b8:a7:b1:6c:a6:d2:
         a3:37:59:36:3e:df:d3:2c:f5:89:d7:24:10:c5:f4:4c:e6:f4:
         34:d9:5d:68:bf:c1:3c:9c:6d:39:95:ac:fe:5c:56:c3:58:a7:
         74:89:ac:92:52:b6:81:82:ce:93:69:49:7f:69:ef:83:68:ea:
         58:a9:bc:1c:db:e6:c4:00:d7:63:d6:98:15:d3:11:e0:8c:61:
         2e:ee:9c:fc:29:50:b0:1d:e2:9d:84:08:21:e2:8e:13:8b:a2:
         d9:85:c6:7c:42:04:8c:f8:66:f5:c7:66:44:90:28:ae:cf:77:
         39:a7:87:3e:2e:77:c8:aa:16:a5:2c:29:bd:ae:5a:33:e3:b2:
         17:d0:5e:90:01:de:28:a0:03:61:c6:09:10:2d:ca:2b:21:ff:
         22:bf:92:03:d7:67:9a:b2:71:4c:94:c7:ec:dd:48:79:ba:99:
         0c:f5:dd:8f:b0:0b:a4:31:85:7d:7f:07:56:df:2e:72:d2:3d:
         7b:12:50:75:0c:75:d7:e1:7d:ac:8f:c6:dd:18:85:28:3c:12:
         ec:cf:59:71:9f:9f:20:da:f7:02:9c:fc:be:ac:f6:2a:a6:ff:
         87:c1:0e:e1:e5:2b:65:e7:9a:fe:d0:f9:de:38:4b:32:3f:02:
         5f:33:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----