Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fHJUf9pQtBbhPBZcW1IlRzAz-yw.roa
File:                     fHJUf9pQtBbhPBZcW1IlRzAz-yw.roa (raw, json)
Hash identifier:          CjK50+WyFOKfXP+5OOPsGRRsP6CdtWaC9Ut+nE1kIo0=
Subject key identifier:   7C:72:54:7F:DA:50:B4:16:E1:3C:16:5C:5B:52:25:47:30:33:FB:2C
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       48DC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fHJUf9pQtBbhPBZcW1IlRzAz-yw.roa
Signing time:             Mon 30 May 2022 00:30:06 +0000
ROA not before:           Mon 30 May 2022 00:30:06 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18652 (0x48dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 30 00:30:06 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=7C72547FDA50B416E13C165C5B5225473033FB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:f7:e5:f8:6e:c0:ef:0d:c2:46:a7:4b:2f:
                    ff:2f:15:f8:7f:94:c1:40:23:bc:a6:9c:b3:e4:5c:
                    17:12:d9:dc:5c:7b:6e:35:a1:b8:87:b9:63:ab:05:
                    6f:b9:72:72:97:61:e1:0a:5e:72:6e:8e:c2:b8:8e:
                    13:f0:45:82:84:04:db:35:0f:13:16:a7:35:86:97:
                    ea:c5:de:05:d6:4b:a2:a1:23:8b:07:3e:ba:b4:68:
                    18:6d:fe:7b:41:79:f6:fc:5a:0b:e7:8f:f7:bf:a0:
                    57:c4:20:3f:58:56:7c:bf:a8:1e:4f:93:ef:fe:9b:
                    d8:b9:fb:21:ce:9b:1a:b9:75:26:80:75:c2:48:da:
                    52:2d:3a:27:73:84:d3:01:40:18:f6:a2:13:ca:64:
                    ce:11:bb:94:64:2d:15:49:58:e6:23:38:47:48:75:
                    b3:25:7f:4f:b7:37:b8:a4:38:03:88:ef:89:14:a0:
                    ec:8d:47:61:d5:dc:ae:8e:ee:3f:e8:06:f0:40:50:
                    44:0e:e5:74:d2:a5:69:7f:9b:26:d4:ae:79:98:1e:
                    c0:f7:26:25:2f:88:8b:df:c8:de:f0:69:67:27:68:
                    35:d3:de:ba:5d:f7:ef:82:d5:93:9e:b8:3b:86:09:
                    ed:01:35:ab:50:bb:79:e1:4f:69:0b:dc:09:23:84:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:72:54:7F:DA:50:B4:16:E1:3C:16:5C:5B:52:25:47:30:33:FB:2C
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fHJUf9pQtBbhPBZcW1IlRzAz-yw.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7d:1d:78:69:a4:09:fa:7a:85:7c:0f:d9:36:c3:3c:d7:bd:
         8b:8b:95:c7:f5:a4:3e:e6:48:6d:99:0a:31:7a:d9:31:ec:cb:
         4b:f4:c0:ef:e2:41:a5:d9:db:46:42:d6:7e:f0:b4:fa:94:85:
         6a:55:72:46:51:9d:36:b1:9b:f0:8c:71:89:18:13:e1:6e:33:
         f4:ef:5c:51:33:16:8e:f7:03:ee:58:9b:f5:07:4a:e4:fd:cb:
         fb:95:36:0d:8f:98:fa:81:25:8f:3f:4a:a0:80:66:09:ac:c8:
         18:b5:50:6e:e1:0c:99:0c:08:9d:bd:c5:fb:fc:b2:b2:32:75:
         a8:eb:65:2c:b0:33:b8:85:66:5a:54:52:03:ef:5b:5f:01:d4:
         3d:c8:69:88:7b:3d:8f:3f:f1:a1:c3:98:ae:a4:d3:8f:fc:e1:
         14:28:11:ee:f7:86:23:8e:e0:40:22:b1:b0:23:e6:5a:de:d9:
         20:ed:68:f5:4a:ac:42:a3:db:a6:c1:d4:08:05:ce:7b:29:ec:
         fc:d8:47:6f:b5:a2:c3:43:ee:79:d4:ce:9f:47:cb:bf:a4:3c:
         28:bc:0e:3b:bf:1e:41:47:81:b4:c2:8a:bf:fb:38:a3:56:fb:
         b7:73:9a:8f:13:d8:0e:a3:d6:e1:1d:26:12:8e:6f:41:ed:98:
         96:a7:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----