Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/igYdSkaHV4hpC2ah3l7HkT5xIIo.roa
File:                     igYdSkaHV4hpC2ah3l7HkT5xIIo.roa (raw, json)
Hash identifier:          ZF9cIlITw+oN6wmgXGZRojFu0Nv11nYc8vnmeyUpxN8=
Subject key identifier:   8A:06:1D:4A:46:87:57:88:69:0B:66:A1:DE:5E:C7:91:3E:71:20:8A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       48D2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/igYdSkaHV4hpC2ah3l7HkT5xIIo.roa
Signing time:             Sun 29 May 2022 00:30:07 +0000
ROA not before:           Sun 29 May 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18642 (0x48d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 29 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=8A061D4A46875788690B66A1DE5EC7913E71208A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cf:f7:8c:ed:94:7f:ec:19:72:30:83:4b:8a:
                    da:42:9a:28:8e:6f:5f:52:d5:75:a0:e7:ea:35:77:
                    60:69:ec:84:08:9a:cc:a2:3e:22:80:49:d1:cc:89:
                    18:6d:13:f4:c2:f9:35:fd:6c:3a:ae:98:ed:87:a9:
                    12:12:24:ca:91:c3:dc:49:e4:99:58:c2:10:03:e7:
                    06:88:b6:78:c2:fe:16:44:93:71:a1:e8:40:7a:94:
                    d7:7e:aa:7a:14:67:2a:e6:b7:2b:ea:b1:c4:c4:92:
                    f1:c0:95:10:17:41:2c:a2:2a:64:a3:46:0d:f6:f9:
                    c2:97:54:3b:2d:da:f4:58:42:52:bb:bf:c8:08:67:
                    27:29:58:84:66:24:41:ea:13:ef:a5:d8:e6:4b:79:
                    a1:15:57:1b:94:73:2a:7a:db:20:b0:98:47:93:e3:
                    b2:af:5b:82:fc:35:b0:15:aa:77:23:7f:0a:98:1f:
                    40:67:7c:be:8e:bb:b7:a6:1a:b6:ae:7e:49:2a:b8:
                    b2:fe:04:b9:6a:88:9b:03:21:a0:4a:10:26:20:82:
                    03:51:35:95:c2:3b:fa:17:29:e9:db:b1:c9:1c:90:
                    97:19:35:99:fc:4c:03:b3:13:d6:bf:1c:47:96:88:
                    23:e1:c3:03:74:ed:f6:c5:c6:49:33:52:84:46:0c:
                    d3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:06:1D:4A:46:87:57:88:69:0B:66:A1:DE:5E:C7:91:3E:71:20:8A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/igYdSkaHV4hpC2ah3l7HkT5xIIo.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:56:4f:2b:35:be:41:bf:dd:38:27:ba:54:6e:60:ba:9c:9d:
         5a:ce:90:60:8b:88:38:5e:ad:e3:b5:2a:85:a3:9f:64:ba:b9:
         1e:f1:d1:f5:9d:0b:ae:d4:ae:58:4f:2a:e5:0a:c8:10:e9:c7:
         04:bf:8e:2a:fe:dc:c6:14:b1:70:82:04:52:a0:f6:95:78:74:
         8a:5e:4c:fd:a4:d6:85:aa:83:42:a1:53:42:f7:fc:1c:96:1a:
         22:19:d1:ff:9f:dc:89:31:c1:a4:c9:77:1f:e1:84:f9:e5:88:
         ad:d2:94:d8:f3:3e:06:d7:07:f4:ab:e5:cc:1b:9d:b0:de:67:
         15:27:3e:88:f6:f4:b1:5b:9c:cd:ab:5d:a3:4a:c2:99:4a:53:
         49:a0:e2:08:52:5f:e1:3c:f7:d5:2f:ac:4b:44:10:81:bd:fe:
         77:48:03:fb:32:e7:d4:0d:44:11:62:10:8f:f1:57:6d:97:07:
         17:23:36:ab:31:d9:7f:14:00:88:30:56:af:f7:dd:8f:32:53:
         ff:58:e2:01:fa:3c:07:83:fb:42:93:16:41:df:a5:b1:ee:6d:
         35:1d:71:79:41:8e:24:5c:f0:5b:f0:0b:b0:bd:c3:20:c1:b5:
         a0:b6:81:af:73:15:82:65:d1:dc:e1:c5:96:24:3c:9d:d1:01:
         34:bf:3a:05
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1Mjkw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDhBMDYxRDRBNDY4NzU3
ODg2OTBCNjZBMURFNUVDNzkxM0U3MTIwOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhz/eM7ZR/7BlyMINLitpCmiiOb19S1XWg5+o1d2Bp7IQImsyi
PiKASdHMiRhtE/TC+TX9bDqumO2HqRISJMqRw9xJ5JlYwhAD5waItnjC/hZEk3Gh
6EB6lNd+qnoUZyrmtyvqscTEkvHAlRAXQSyiKmSjRg32+cKXVDst2vRYQlK7v8gI
ZycpWIRmJEHqE++l2OZLeaEVVxuUcyp62yCwmEeT47KvW4L8NbAVqncjfwqYH0Bn
fL6Ou7emGraufkkquLL+BLlqiJsDIaBKECYgggNRNZXCO/oXKenbsckckJcZNZn8
TAOzE9a/HEeWiCPhwwN07fbFxkkzUoRGDNOTAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUigYdSkaHV4hpC2ah3l7HkT5xIIowHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9pZ1lkU2thSFY0aHBDMmFoM2w3SGtUNXhJSW8ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AKZWTys1vkG/3TgnulRuYLqcnVrOkGCLiDhereO1KoWjn2S6uR7x0fWdC67UrlhP
KuUKyBDpxwS/jir+3MYUsXCCBFKg9pV4dIpeTP2k1oWqg0KhU0L3/ByWGiIZ0f+f
3IkxwaTJdx/hhPnliK3SlNjzPgbXB/Sr5cwbnbDeZxUnPoj29LFbnM2rXaNKwplK
U0mg4ghSX+E899UvrEtEEIG9/ndIA/sy59QNRBFiEI/xV22XBxcjNqsx2X8UAIgw
Vq/33Y8yU/9Y4gH6PAeD+0KTFkHfpbHubTUdcXlBjiRc8FvwC7C9wyDBtaC2ga9z
FYJl0dzhxZYkPJ3RATS/OgU=
-----END CERTIFICATE-----