Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/kBhk-V57kY9Bxz75DmPvker4CAg.roa
File:                     kBhk-V57kY9Bxz75DmPvker4CAg.roa (raw, json)
Hash identifier:          xJlcf65s4yn7+Z/3n8M4astYvNQifEULYE9YsOqaHn8=
Subject key identifier:   90:18:64:F9:5E:7B:91:8F:41:C7:3E:F9:0E:63:EF:91:EA:F8:08:08
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4757
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kBhk-V57kY9Bxz75DmPvker4CAg.roa
Signing time:             Mon 02 May 2022 00:30:09 +0000
ROA not before:           Mon 02 May 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18263 (0x4757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May  2 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=901864F95E7B918F41C73EF90E63EF91EAF80808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:1e:f8:f2:09:f8:ab:d8:28:40:d7:32:b5:
                    f5:90:e8:2d:d8:a0:39:cd:22:a3:11:10:33:f9:1b:
                    7b:5c:ff:91:bb:94:1a:16:ac:c3:e3:5a:55:2c:f8:
                    d4:0a:13:54:53:c0:08:b1:ef:8c:b1:f9:ec:66:58:
                    43:2c:d4:6d:19:22:f4:81:81:38:04:8b:2c:c8:4c:
                    cb:68:31:31:d3:30:f9:b9:b9:18:b3:77:52:03:33:
                    fb:7e:d7:c2:77:0f:c9:e2:ce:ee:7e:21:65:c7:04:
                    12:1b:07:f7:6a:e5:21:b0:f7:7e:88:67:cb:1d:46:
                    1b:c1:9d:ee:7b:3e:43:8f:58:6f:53:6e:fd:fe:4d:
                    de:fb:fa:d2:54:91:7b:56:26:30:72:d3:0b:c8:b3:
                    52:3a:c4:df:c8:2f:a8:9d:64:4f:5d:74:c7:4e:3d:
                    0f:e5:7a:ad:91:ea:dd:e1:6c:b4:77:2b:ad:48:19:
                    4b:c5:16:a1:1c:c8:66:a1:10:7c:af:d3:bc:c0:09:
                    c6:95:f0:14:0b:ac:f4:72:b8:73:09:fb:e0:17:9b:
                    3b:52:7a:c9:fa:ab:44:f5:e1:70:9a:9d:99:52:1c:
                    6b:b4:0a:fe:8e:9d:a7:a0:cb:71:3f:01:76:de:db:
                    c7:d5:ce:b1:15:e2:77:8a:22:69:a0:17:79:ce:e7:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:18:64:F9:5E:7B:91:8F:41:C7:3E:F9:0E:63:EF:91:EA:F8:08:08
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/kBhk-V57kY9Bxz75DmPvker4CAg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:ac:2a:f7:34:f7:3d:44:64:e0:68:f7:74:22:7b:da:c9:cf:
         31:45:a3:a2:ac:41:f8:84:f3:ba:a4:c4:f4:95:d5:6f:ac:d2:
         6e:32:5a:3b:f7:ee:42:81:8b:b2:da:38:0a:13:62:42:97:cb:
         53:13:4d:13:e4:cf:39:c9:fd:0d:62:46:2b:41:b9:4b:4d:5c:
         3c:f1:14:03:80:18:91:23:7c:98:3b:01:ab:74:c1:c6:4a:00:
         08:ab:7b:e1:d8:5a:4e:f8:59:24:39:ed:b0:61:f1:1c:30:61:
         da:42:05:46:a9:17:3d:de:69:7d:76:89:38:dc:11:a1:36:2b:
         7e:de:a8:4e:af:2f:1c:c8:6f:f1:03:ac:67:e7:d8:f2:fb:40:
         cc:22:ff:f9:47:63:05:85:bc:b5:92:07:34:29:0d:b6:54:06:
         51:dc:06:e5:15:69:72:af:62:a7:a3:cd:06:d7:35:b3:e2:1b:
         3f:0a:2a:d3:ca:d9:69:f3:68:5c:98:2a:ec:43:fe:a6:61:01:
         28:a5:36:d7:27:19:55:43:36:1f:5d:9e:07:5b:9d:ff:12:32:
         f3:1d:d1:1b:cb:de:af:41:71:f6:12:dd:bd:45:d7:a8:b0:39:
         b4:86:7e:90:db:3c:91:ba:44:7d:3e:b7:d0:fc:ee:57:0a:dc:
         8e:a8:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----