Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/nHp5S9oQ3k60qyKdMNMh2A-R7o4.roa
File:                     nHp5S9oQ3k60qyKdMNMh2A-R7o4.roa (raw, json)
Hash identifier:          N/nddwkCr6oq1lY6tFB5YT+Hd2rN9xyVdxxgFvqadEw=
Subject key identifier:   9C:7A:79:4B:DA:10:DE:4E:B4:AB:22:9D:30:D3:21:D8:0F:91:EE:8E
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4683
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nHp5S9oQ3k60qyKdMNMh2A-R7o4.roa
Signing time:             Sun 17 Apr 2022 00:30:08 +0000
ROA not before:           Sun 17 Apr 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18051 (0x4683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 17 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=9C7A794BDA10DE4EB4AB229D30D321D80F91EE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:c5:11:ca:e9:c6:74:c8:69:7a:31:58:be:
                    cd:d3:79:91:5b:a9:96:19:64:78:39:fe:50:72:15:
                    f8:06:eb:83:89:61:85:03:cb:1a:72:da:18:ba:26:
                    ed:96:02:75:3a:e4:09:44:cc:45:7a:51:a3:55:1a:
                    b8:95:1b:f8:37:80:dc:f3:89:8f:92:c6:3f:ee:40:
                    c2:28:4b:4b:be:61:b5:fa:0b:8e:fb:27:ab:94:45:
                    f2:13:fc:cd:81:8b:0b:a6:4c:47:94:0b:00:94:a2:
                    fa:b0:01:b7:3e:5b:2c:64:b2:3e:02:59:9d:26:8f:
                    81:1b:f9:57:45:a5:21:1a:32:b3:40:80:b3:a1:d9:
                    2e:08:15:d3:98:6a:15:37:c1:a7:15:79:a1:14:9a:
                    47:ae:ca:e9:7c:26:53:10:b6:ef:e0:68:33:82:9b:
                    14:76:1d:ce:fa:cf:de:9f:21:4f:b3:0e:a4:b6:c3:
                    8e:42:e1:5e:71:e7:69:e3:b2:8d:1a:69:7e:38:ef:
                    5f:7b:d1:66:ca:b1:4c:8b:95:de:e7:df:01:bc:95:
                    d0:fa:64:91:03:9d:73:cd:04:a0:ff:9b:92:03:4a:
                    91:59:b6:50:99:4f:be:5c:1d:8c:76:50:a3:38:90:
                    a4:32:6b:1b:2e:cb:23:ac:af:56:89:bb:52:57:9c:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7A:79:4B:DA:10:DE:4E:B4:AB:22:9D:30:D3:21:D8:0F:91:EE:8E
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nHp5S9oQ3k60qyKdMNMh2A-R7o4.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:a8:ae:08:06:f3:ef:60:8e:b5:0c:e5:bd:6f:e4:2b:90:
         bd:ac:71:ac:01:92:b4:cb:d3:61:9c:3d:7b:79:33:41:40:e0:
         72:f1:8d:b0:b4:08:bc:c1:24:82:97:14:7e:b4:05:14:3e:74:
         f4:aa:58:18:74:7b:75:a6:97:00:89:de:20:ca:cf:fa:bb:02:
         a9:9e:f9:2c:35:6b:60:90:e6:54:93:59:98:20:69:b7:e8:d4:
         b7:68:7d:20:e8:fa:49:37:88:6e:3f:29:45:b8:ed:3a:76:3a:
         76:0d:36:47:ce:7b:f5:61:b9:42:c6:6c:36:e7:65:05:c9:f8:
         a7:cc:34:6f:ce:ec:66:87:73:29:eb:dc:13:2f:66:f1:a3:37:
         67:69:3c:4d:cf:fc:29:66:56:91:b3:3d:ed:07:39:67:4d:53:
         7d:9b:17:2d:0a:73:13:b1:56:40:ea:82:2e:cc:50:e4:b7:3b:
         13:85:02:ac:48:35:68:fc:f6:4f:7b:49:7a:6d:99:bc:38:b4:
         f3:d8:ab:28:9b:5d:5f:01:9f:60:10:75:e8:f4:b0:da:d4:19:
         4e:86:02:3d:f5:fc:42:0c:d4:1e:11:85:b2:f0:26:df:09:17:
         66:db:b1:ca:12:b5:df:39:f1:a3:2b:12:dc:9d:67:e4:1b:d1:
         c1:04:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----