Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/lcVzp1BYKmlm8ft3p2EBa39ZniU.roa
File:                     lcVzp1BYKmlm8ft3p2EBa39ZniU.roa (raw, json)
Hash identifier:          /WxaER4/EHGrAeOzEPLUMGz1OJEgdsjuk5q1PiFw7eU=
Subject key identifier:   95:C5:73:A7:50:58:2A:69:66:F1:FB:77:A7:61:01:6B:7F:59:9E:25
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4800
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lcVzp1BYKmlm8ft3p2EBa39ZniU.roa
Signing time:             Sat 14 May 2022 00:30:07 +0000
ROA not before:           Sat 14 May 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18432 (0x4800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 14 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=95C573A750582A6966F1FB77A761016B7F599E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:3e:8a:06:da:63:78:9f:97:47:4c:2e:79:
                    f6:aa:49:96:e2:37:ba:84:e9:10:5c:41:ee:18:a9:
                    d6:61:f6:b9:e2:48:de:4e:ce:bd:41:a0:a8:c6:3d:
                    f4:f5:34:81:76:35:8e:e7:8c:e7:fe:69:34:1d:28:
                    4c:b2:da:cf:c0:ac:9c:a9:89:17:2d:a4:8f:9e:e8:
                    4b:fa:91:97:92:dc:40:48:0d:0f:fc:13:68:b5:f6:
                    2e:6c:a9:31:b2:fa:4a:4e:5d:2d:41:4b:b0:51:7f:
                    e4:12:87:e4:4a:74:f8:3b:7c:d3:88:13:f3:0d:40:
                    86:a0:06:90:f1:b0:0f:88:94:21:66:d8:45:df:5d:
                    4d:57:21:3c:08:1d:21:59:14:54:ca:05:9e:c3:49:
                    59:12:b8:41:d8:c8:20:7d:54:f7:e1:71:fd:39:7b:
                    8e:21:01:fe:de:6e:4c:39:ad:bd:1e:32:76:42:fd:
                    bc:73:f6:9f:9b:87:46:69:05:7f:76:9a:59:5f:5c:
                    5f:21:81:6a:fc:df:b1:e9:b6:20:7b:26:d5:60:0b:
                    25:04:5e:2b:dc:10:33:a0:8a:47:0e:25:58:84:47:
                    c2:9b:eb:58:40:92:f6:d1:d5:94:10:3a:4d:2f:ae:
                    93:14:47:b0:8f:5f:5e:f4:67:af:f9:eb:e5:f3:ac:
                    2b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C5:73:A7:50:58:2A:69:66:F1:FB:77:A7:61:01:6B:7F:59:9E:25
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lcVzp1BYKmlm8ft3p2EBa39ZniU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:c4:be:54:a2:93:41:fe:db:b2:ba:6a:de:b8:3f:a6:e7:
         07:e9:78:fc:39:7a:a5:33:a6:3c:8e:8f:70:63:9c:54:04:ee:
         54:5d:4f:12:42:e7:fc:e5:01:b1:bb:8e:12:50:6a:93:8a:d9:
         a9:54:29:13:10:77:7b:03:3e:07:41:52:7e:5b:d3:ca:54:82:
         75:4e:42:90:b8:6a:72:a2:92:af:d2:2f:6f:49:c3:b0:7a:ff:
         6a:17:df:f6:ec:b2:d7:4f:27:d7:89:23:20:cc:fe:a7:4e:91:
         8c:8d:31:32:91:5f:f2:04:c8:68:31:2e:22:61:6b:6b:e1:34:
         3e:30:d3:8a:7e:a4:a0:0f:77:7a:90:46:e8:ec:05:c5:70:f7:
         41:fe:60:a7:e5:5a:42:e5:58:b2:69:0d:43:90:55:74:7a:65:
         0c:41:6a:60:03:de:24:60:76:c0:35:8b:1b:b5:b4:79:2d:e2:
         b1:4f:81:11:6f:3e:f7:18:da:4b:46:23:cf:f0:73:ed:76:d6:
         49:2f:d4:f4:e9:0e:af:a3:16:1f:26:11:98:c9:6c:50:57:bc:
         03:0f:e0:11:c0:b0:47:63:b4:be:e1:20:13:55:56:e3:3c:d8:
         90:40:c4:91:0b:53:40:9c:75:44:39:a2:3a:9d:90:62:2e:18:
         73:40:01:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----