Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/hA3-4vaGbxisSs7yCkYxjOVHA0E.roa
File:                     hA3-4vaGbxisSs7yCkYxjOVHA0E.roa (raw, json)
Hash identifier:          yvgKcpE1k+/oULdg+WLzap5aUgQ10cHtB2CKR3oPBDI=
Subject key identifier:   84:0D:FE:E2:F6:86:6F:18:AC:4A:CE:F2:0A:46:31:8C:E5:47:03:41
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42DD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hA3-4vaGbxisSs7yCkYxjOVHA0E.roa
Signing time:             Wed 09 Feb 2022 00:30:05 +0000
ROA not before:           Wed 09 Feb 2022 00:30:05 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17117 (0x42dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  9 00:30:05 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=840DFEE2F6866F18AC4ACEF20A46318CE5470341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f8:69:e6:96:e4:d1:76:cd:36:05:fc:68:0a:
                    10:88:79:50:7a:f4:63:97:d8:05:b0:12:95:73:61:
                    14:29:75:e2:b8:cc:ef:43:89:97:e0:47:c4:52:4e:
                    e0:48:64:f8:96:d8:62:23:6e:14:81:a3:1f:02:ff:
                    9e:a8:1b:a5:09:e4:21:30:a4:45:46:b9:d6:16:c1:
                    24:68:4f:de:df:d6:42:0e:41:78:bf:bd:8c:49:1f:
                    15:32:ed:66:3f:d3:88:cf:6b:fa:fa:74:95:ff:8e:
                    0e:50:98:9a:ec:d1:3a:5e:09:1c:75:ef:65:57:08:
                    87:8f:bc:83:8e:78:47:4c:51:8f:8c:2f:49:37:16:
                    d4:08:e5:d5:0f:72:67:13:00:9b:5f:a1:75:2b:ba:
                    13:a5:c6:92:eb:49:b0:bd:24:58:3a:8b:76:45:54:
                    9b:1b:8f:49:4e:2f:7b:9c:14:75:46:6c:fe:4a:52:
                    93:ee:19:af:3d:b6:81:8e:08:3e:b3:f2:4a:8d:09:
                    1d:e3:44:59:eb:43:60:d7:0b:3a:1a:48:f2:8f:13:
                    7e:64:b5:59:da:43:f3:b1:6c:70:d4:5e:93:90:8e:
                    1b:70:26:3b:ca:0f:98:b0:ac:22:6a:29:9a:26:08:
                    9d:6d:0b:d9:f1:e0:6e:62:b0:8f:73:b2:53:e1:27:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0D:FE:E2:F6:86:6F:18:AC:4A:CE:F2:0A:46:31:8C:E5:47:03:41
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hA3-4vaGbxisSs7yCkYxjOVHA0E.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:29:d2:15:b7:b1:db:78:54:18:49:45:4a:2f:33:18:7b:0d:
         8d:33:45:21:ef:e5:ab:bb:01:63:f1:7d:af:61:b9:ab:3e:71:
         32:72:d1:b3:de:d6:b1:3f:b4:ea:80:ac:e6:18:40:23:ed:a3:
         ba:37:95:5a:33:b9:ea:01:2a:1c:b2:08:e0:18:07:cb:97:72:
         da:48:5f:bc:17:2b:87:41:9c:8c:66:1b:d7:8e:8d:10:e1:10:
         19:74:ac:c1:c7:8d:f1:f7:ee:7f:b3:ba:25:9e:38:d4:29:06:
         74:18:a2:b7:81:6e:1c:ce:ec:af:5b:be:fe:6d:32:6c:b9:6f:
         23:c5:3d:3f:50:f2:72:5c:95:20:8b:73:ce:87:75:a6:be:3c:
         8f:9a:71:8c:0a:72:71:29:a1:9f:c2:22:ce:a8:98:7d:cd:64:
         ae:4d:6f:eb:fb:79:6e:f7:5e:8f:b4:16:96:ab:fd:51:e5:6c:
         aa:73:18:f3:ad:f0:65:c8:50:31:37:a9:b0:94:81:11:d1:b7:
         fa:41:ef:da:ae:54:e7:dd:e3:7f:4b:40:19:5d:2a:33:fd:49:
         3a:d5:1c:b5:20:69:18:24:34:a3:0d:fc:62:88:b1:8d:77:3e:
         d8:60:ea:f8:7c:40:e0:ef:fb:2c:47:0f:46:0f:db:47:ca:ec:
         04:d9:60:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----