Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/nvWRFhuj7BuTrt4gkQTgjoeeb78.roa
File:                     nvWRFhuj7BuTrt4gkQTgjoeeb78.roa (raw, json)
Hash identifier:          OrNpA50aZ+aEOU+E0h5pjUUw+7yPPI6YtnH5PSL9DOs=
Subject key identifier:   9E:F5:91:16:1B:A3:EC:1B:93:AE:DE:20:91:04:E0:8E:87:9E:6F:BF
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4673
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nvWRFhuj7BuTrt4gkQTgjoeeb78.roa
Signing time:             Sat 16 Apr 2022 00:30:05 +0000
ROA not before:           Sat 16 Apr 2022 00:30:05 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18035 (0x4673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 16 00:30:05 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=9EF591161BA3EC1B93AEDE209104E08E879E6FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:3a:7a:64:11:bc:15:8f:51:5e:df:1f:70:
                    3a:28:d3:4c:c7:56:a1:3c:86:d8:a4:a3:f0:ed:df:
                    78:b7:e4:25:8d:bd:b0:c3:56:14:eb:9e:4f:63:7d:
                    9d:e7:c7:22:ca:a9:2e:dd:c2:8d:c8:0a:b5:45:46:
                    b6:a0:83:3e:ca:6f:a6:02:f3:41:ed:c2:d4:4c:28:
                    d3:8e:e7:2a:05:7b:15:a3:f8:61:b4:a6:8e:8b:47:
                    ec:c0:18:86:25:75:b0:75:44:e2:c9:6b:9d:7c:4b:
                    75:bf:16:f5:6c:61:eb:55:fb:b8:ca:9e:1c:39:b3:
                    be:27:4d:ee:22:2d:85:42:1f:0a:c3:b0:44:bb:e5:
                    58:dc:83:a3:e5:79:31:82:2e:99:a9:48:c3:0b:b7:
                    4e:20:e8:86:fc:99:cf:d5:07:94:a3:81:54:b5:53:
                    4c:7e:60:66:5b:1a:82:dc:50:dc:2a:b1:ae:88:4d:
                    5d:d3:61:5c:c3:2c:97:52:bd:06:05:74:c2:b0:e7:
                    c8:6a:12:b6:e5:ed:74:c1:35:4d:30:9f:09:03:87:
                    71:d4:93:99:f2:f4:90:c6:ca:5b:cb:c5:f3:5c:d1:
                    ee:7b:01:d5:59:c4:ed:30:37:62:17:34:7d:b5:88:
                    99:65:05:f5:56:fe:61:e6:05:ae:fc:6f:a0:fb:cc:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F5:91:16:1B:A3:EC:1B:93:AE:DE:20:91:04:E0:8E:87:9E:6F:BF
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nvWRFhuj7BuTrt4gkQTgjoeeb78.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:ff:b3:93:9a:d3:c8:00:3f:ac:02:e2:3f:4d:d0:86:91:45:
         c8:ca:74:52:0b:63:54:c7:7b:ad:c0:08:3e:bc:f5:66:30:d8:
         19:2e:d2:3a:e3:bf:4a:68:88:18:8f:93:9c:b9:e2:f4:fb:3d:
         22:3e:98:b5:9d:a6:fb:d3:7f:be:0b:06:13:8f:39:c2:01:5b:
         7e:e1:d2:fa:72:eb:39:4e:e1:e7:f3:83:64:34:71:ca:27:3f:
         4a:a3:5d:cb:1c:5c:3e:8d:aa:f4:0a:57:5a:3a:7c:4e:92:33:
         57:9c:59:31:b1:ba:15:bc:db:27:79:2e:ed:28:9e:58:bf:dc:
         f4:84:e6:4a:9a:16:84:98:88:c1:7f:ae:ff:e3:84:c8:33:30:
         09:f7:34:5f:de:e7:e7:93:5a:ba:2f:52:6c:74:33:15:78:97:
         a9:4d:d1:fa:e0:93:78:52:75:ca:38:7f:99:a4:c6:90:20:4a:
         2d:6f:66:8e:bc:b3:db:ea:a4:a3:1a:1e:30:02:0e:cc:c9:20:
         a1:65:20:10:51:01:a8:55:47:45:bd:0d:23:56:20:4b:54:9e:
         ff:f7:ff:88:78:fa:85:ac:31:10:97:ef:18:f1:23:b5:f8:51:
         15:69:2f:ba:19:75:f1:8a:63:7d:c2:86:0e:b2:dc:83:75:47:
         51:a1:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----