Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/lwFFZG-w05jjDV4hkCnK7ii9Ujg.roa
File:                     lwFFZG-w05jjDV4hkCnK7ii9Ujg.roa (raw, json)
Hash identifier:          XdSDu8njWUfYWQeYXGeMafGMOkBV4uaGj6+5234zReU=
Subject key identifier:   97:01:45:64:6F:B0:D3:98:E3:0D:5E:21:90:29:CA:EE:28:BD:52:38
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       48F3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lwFFZG-w05jjDV4hkCnK7ii9Ujg.roa
Signing time:             Tue 31 May 2022 00:30:11 +0000
ROA not before:           Tue 31 May 2022 00:30:11 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18675 (0x48f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 31 00:30:11 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=970145646FB0D398E30D5E219029CAEE28BD5238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:88:9b:c2:90:05:c8:4d:e3:cc:13:47:1d:
                    99:b0:07:97:c1:d0:d8:1f:46:9c:b1:2b:d0:38:0d:
                    95:83:56:8f:fd:a8:49:ee:44:6c:7a:a6:a3:f4:75:
                    54:ef:18:c1:e8:0b:67:c1:df:8e:ec:58:78:12:a6:
                    bb:05:a5:d2:02:f2:d7:22:28:f8:84:c4:90:e3:62:
                    19:e3:ae:ce:19:b7:c8:36:7e:10:78:64:22:c6:11:
                    6f:44:80:87:47:55:20:60:10:68:3c:25:37:67:22:
                    43:79:6a:88:bf:78:fc:8f:27:6d:a8:43:e2:32:c2:
                    09:0d:7f:04:5a:32:2b:a3:da:b4:1c:cd:80:fa:fb:
                    31:93:b0:c1:fe:67:d2:fe:19:91:d9:37:89:87:93:
                    b1:58:2b:86:25:cd:aa:f5:a1:20:b9:1f:47:02:d3:
                    fb:2f:19:5d:5b:c7:eb:dc:1f:5e:05:9f:53:75:26:
                    dc:73:4c:cf:44:72:64:5a:c9:09:47:c1:1f:db:00:
                    5a:65:1d:9c:58:45:27:80:39:13:2a:44:df:6d:3c:
                    95:13:df:0e:08:b1:91:8e:01:44:b7:dc:7b:2d:59:
                    52:b5:7a:f0:36:a3:7c:33:ff:1b:d2:73:6c:f8:2d:
                    d7:95:b0:38:e1:d3:12:f1:e0:08:3c:41:49:ec:75:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:01:45:64:6F:B0:D3:98:E3:0D:5E:21:90:29:CA:EE:28:BD:52:38
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/lwFFZG-w05jjDV4hkCnK7ii9Ujg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:d3:fc:f3:5a:ff:fb:5f:f9:af:a5:e6:1d:f5:45:9e:9a:
         ca:a5:5e:4d:7a:25:25:9e:bf:e9:83:35:31:b2:c4:58:e8:f6:
         66:46:3e:eb:bb:78:ce:5c:b6:27:ff:59:cc:0c:ee:9b:0e:0d:
         11:9e:01:1c:d2:6e:da:7a:83:68:74:9a:e9:e4:b1:0e:f4:28:
         f5:b8:83:23:83:f6:b1:c8:f3:6a:eb:b6:e2:4b:72:46:4e:77:
         1c:c2:00:ac:21:45:e1:a2:dc:8b:c5:d5:02:82:f1:a5:86:87:
         f3:b4:07:20:20:50:de:ba:6b:20:99:e6:d2:68:48:e4:63:0c:
         7c:25:df:fd:75:93:32:2e:eb:a0:9a:02:78:8c:62:20:10:ab:
         bd:34:c3:8c:dc:b4:df:fa:c9:85:80:22:e9:83:68:ce:b9:98:
         af:a9:24:e3:dc:94:c8:64:6a:2a:5a:55:4e:34:87:d7:77:c3:
         28:75:f1:82:37:b2:13:45:65:cf:a7:c7:d6:72:ed:7d:0a:bb:
         70:8d:d3:77:c4:90:da:47:82:1e:71:51:25:9b:6c:e4:f1:67:
         4c:e5:f9:23:89:78:3a:bf:4a:8c:d1:d2:48:0b:c2:85:fb:ed:
         42:02:a0:f8:b1:0d:f1:da:71:62:a8:8e:bb:42:38:6d:af:4d:
         29:90:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----