Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/qoNuoS4O8EtUAfShueeWcW4DWqg.roa
File:                     qoNuoS4O8EtUAfShueeWcW4DWqg.roa (raw, json)
Hash identifier:          aB/THB3bwnHczlAbFKyjPmRW8A0NQJBXOhkNx7bcf5o=
Subject key identifier:   AA:83:6E:A1:2E:0E:F0:4B:54:01:F4:A1:B9:E7:96:71:6E:03:5A:A8
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43C7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qoNuoS4O8EtUAfShueeWcW4DWqg.roa
Signing time:             Sat 26 Feb 2022 00:30:07 +0000
ROA not before:           Sat 26 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17351 (0x43c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 26 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=AA836EA12E0EF04B5401F4A1B9E796716E035AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:9c:32:d3:d4:fe:a8:d5:c1:51:83:7b:f3:
                    40:e6:de:ba:27:e0:7c:e0:f5:3f:2b:8d:a2:11:be:
                    c0:42:58:c4:f4:73:6d:06:7d:e7:8a:3c:b5:22:fe:
                    43:2b:2c:d6:94:68:39:2f:8f:6e:a5:8b:81:0a:d9:
                    3f:f5:6a:e7:01:75:8f:dc:86:fa:28:6c:e7:a1:40:
                    12:66:18:e1:92:2b:d1:d7:a6:c0:54:00:b2:1a:59:
                    85:cd:d4:08:85:83:0e:f9:c8:4a:d8:d3:74:a2:31:
                    00:34:5b:75:41:72:4e:f3:52:95:0d:71:71:84:38:
                    9d:40:31:66:27:16:c9:37:fa:6e:e0:7b:b1:58:dc:
                    90:07:cd:07:da:4c:7a:08:bb:64:43:ba:e3:b5:6e:
                    2a:c6:2b:68:51:1b:46:b8:19:b7:fb:64:9e:a9:8a:
                    f9:11:78:2f:c4:81:3d:b4:f4:29:a9:fa:85:8d:f2:
                    a6:50:31:8d:4f:d9:8d:2e:5c:87:43:b4:f9:25:da:
                    d6:fb:f2:85:fa:af:ae:7d:16:ad:d1:43:96:a2:38:
                    f7:33:d1:fc:c0:93:6b:47:54:b4:70:05:2e:6b:21:
                    45:54:75:e5:a3:c8:3a:8e:0f:51:ed:4b:43:4e:03:
                    b7:de:87:f7:bb:69:b4:4b:d0:64:97:0f:d4:35:07:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:83:6E:A1:2E:0E:F0:4B:54:01:F4:A1:B9:E7:96:71:6E:03:5A:A8
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qoNuoS4O8EtUAfShueeWcW4DWqg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e2:e4:ca:74:93:d5:92:71:ac:97:ea:44:b7:8f:c4:58:62:
         d1:b8:8e:13:78:c2:bf:84:84:86:93:cf:f8:58:19:5b:a1:e3:
         ed:a6:fe:93:c7:35:98:b8:56:39:0d:a7:7b:3f:05:9a:56:c4:
         98:d1:f6:3f:8f:f3:46:30:12:b2:77:f8:3e:7e:9d:45:53:7f:
         68:0c:77:b7:d1:4e:f2:6a:e2:1d:76:9b:cc:5e:36:9a:5b:f6:
         91:e0:11:a3:b8:6e:67:f2:88:fd:9b:ef:a0:e5:a6:57:9c:87:
         65:e4:34:ef:c9:6e:e0:b2:87:9c:08:b7:fb:04:a1:a8:f5:87:
         81:9b:49:58:06:e2:d2:cd:11:5d:92:df:da:23:fd:a2:da:68:
         9f:25:6d:c3:22:1b:17:83:f1:3e:68:f6:80:6c:2a:5c:04:9b:
         a1:2c:0e:4d:b7:27:d2:20:7d:fa:22:26:0e:8e:41:69:86:8f:
         cb:26:4b:0f:25:a6:32:27:84:fa:55:12:11:32:ab:58:64:4d:
         c1:d2:df:f9:6b:76:8f:05:55:f5:85:ac:43:59:fd:db:19:62:
         8d:1f:d2:da:ac:4a:33:da:10:bd:e8:c5:f1:73:ce:f6:14:ca:
         4e:8e:21:ab:d7:85:34:ac:63:23:d5:80:07:ef:51:9e:ce:b1:
         fc:21:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----