Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/qiI4FOeJAfY2TZbKVNoHN6M8LOU.roa
File:                     qiI4FOeJAfY2TZbKVNoHN6M8LOU.roa (raw, json)
Hash identifier:          YdbV0sRwIQyx0P4jHvDxp5EVEde/6oUVYsBu5pleGBk=
Subject key identifier:   AA:22:38:14:E7:89:01:F6:36:4D:96:CA:54:DA:07:37:A3:3C:2C:E5
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       46A2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qiI4FOeJAfY2TZbKVNoHN6M8LOU.roa
Signing time:             Tue 19 Apr 2022 00:30:08 +0000
ROA not before:           Tue 19 Apr 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18082 (0x46a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 19 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=AA223814E78901F6364D96CA54DA0737A33C2CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:d5:7a:8f:56:0e:8d:aa:b2:8a:0c:c2:09:
                    c7:cd:4e:0c:82:cc:cc:be:96:dc:3e:ef:ab:e4:68:
                    b2:69:fc:19:80:5a:9d:1e:1b:d2:96:7a:9e:f4:d9:
                    ae:a6:35:89:14:8d:1e:5a:24:86:71:b6:70:c8:f6:
                    ce:8a:45:fd:19:26:9c:ec:54:da:44:18:3a:c9:f5:
                    81:a9:38:65:23:e9:17:fc:a3:2e:3e:4d:6e:31:93:
                    1e:c6:f9:32:9e:3d:d4:14:c7:5f:8c:d3:b5:c8:bf:
                    47:67:53:05:77:5c:68:50:2a:8e:1b:b2:a5:0b:4d:
                    27:f1:32:d8:c8:58:db:14:4f:33:f9:2f:18:48:ef:
                    f7:94:48:20:a5:a8:74:ae:8d:29:eb:8a:a3:db:ad:
                    5c:03:df:fb:47:2b:f2:78:4d:e9:c8:20:8a:c0:4e:
                    3b:ad:a5:01:b7:52:ea:39:47:e7:80:51:51:4e:01:
                    2c:4c:07:38:1a:cf:84:e6:74:fe:fb:10:4f:c8:08:
                    5e:57:b5:c3:15:e4:6f:c2:3e:70:da:0c:0e:ae:10:
                    7d:c2:72:bc:1d:30:f2:9c:c2:20:2e:b8:bf:f6:27:
                    25:1c:b7:9c:a9:58:a2:22:3b:c5:85:37:d5:42:3f:
                    23:2f:25:4e:32:cd:17:87:59:f1:b1:c6:26:45:22:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:22:38:14:E7:89:01:F6:36:4D:96:CA:54:DA:07:37:A3:3C:2C:E5
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qiI4FOeJAfY2TZbKVNoHN6M8LOU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:ad:4b:76:53:bf:b1:45:3b:67:2c:89:c9:65:44:5b:53:
         19:84:df:5a:d2:3f:cc:a2:fe:19:2b:70:70:ea:55:57:73:63:
         c2:e0:c2:d3:73:5e:06:4a:9f:a5:8d:5a:02:3b:b1:48:7e:09:
         5e:66:90:88:c0:dc:f8:7f:ce:a7:a0:b7:43:39:03:f5:e6:7a:
         94:61:a4:9b:c7:57:5d:79:7f:40:90:dd:64:ef:99:40:79:a7:
         05:ad:13:4d:8d:df:3d:bd:c9:94:e6:4c:2b:b5:bb:11:12:f1:
         42:d7:be:c2:9a:a7:79:3c:9f:3c:a3:6c:f2:35:24:d6:e0:33:
         f6:b4:ab:c7:ff:52:c9:ed:a2:a2:3b:67:14:b1:87:56:97:2f:
         da:e0:54:f2:78:00:ea:55:ed:10:56:95:6a:8a:d6:42:9a:7f:
         ab:b3:12:9c:7a:cb:ea:a2:17:a4:b6:a2:a3:fb:20:d2:5d:1b:
         06:49:8f:08:98:cf:94:1e:93:e4:fd:8a:db:84:c7:4b:67:92:
         f7:6d:2e:74:f8:98:ca:f8:50:ae:ab:13:d5:53:90:62:89:33:
         2b:4b:b9:16:84:b0:bc:18:71:89:0d:1e:e5:b0:69:1e:cd:17:
         98:b4:40:31:c6:46:d8:43:ee:86:5b:16:ff:91:8c:eb:07:39:
         11:16:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----