Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/rogc2NqRIlBvg1Ht_HLCC29EHu8.roa
File:                     rogc2NqRIlBvg1Ht_HLCC29EHu8.roa (raw, json)
Hash identifier:          eWXBlKKbOKLH5UMGwcKJSE6OEU8os39UUrVqWQGDiKk=
Subject key identifier:   AE:88:1C:D8:DA:91:22:50:6F:83:51:ED:FC:72:C2:0B:6F:44:1E:EF
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43E9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rogc2NqRIlBvg1Ht_HLCC29EHu8.roa
Signing time:             Mon 28 Feb 2022 00:30:12 +0000
ROA not before:           Mon 28 Feb 2022 00:30:12 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17385 (0x43e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 28 00:30:12 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=AE881CD8DA9122506F8351EDFC72C20B6F441EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:94:24:d3:73:d2:a2:eb:d0:d7:6d:1c:92:
                    40:35:69:4d:9f:4b:56:46:7c:2f:1f:49:a5:01:36:
                    f2:94:95:4f:1a:5f:46:82:9f:cc:e0:a8:86:c0:66:
                    bb:5d:17:c3:1a:c1:c7:b5:dd:e3:39:8a:ba:79:af:
                    2f:d5:0d:3b:94:24:52:3e:ff:12:83:1d:c8:d2:b0:
                    f6:d0:72:0e:07:4e:48:17:fc:fa:9d:ec:c8:06:ef:
                    c5:d9:0d:5d:5d:18:b7:49:f6:e5:0e:61:02:0c:9e:
                    49:2f:fc:e2:91:6e:49:14:69:01:c7:02:97:c8:5a:
                    f0:d2:22:22:d1:89:ee:ac:52:bc:54:31:4b:d3:d5:
                    b6:3b:7f:16:88:a9:84:6f:6c:d9:2a:29:02:42:aa:
                    f9:df:e1:b1:50:2f:a3:08:3b:22:77:93:6f:4c:50:
                    e9:7c:93:21:8c:f2:9b:c0:b1:cd:f5:2d:15:25:6f:
                    39:2a:3f:fb:48:52:3c:49:ac:de:e6:6f:04:02:7a:
                    fc:3c:50:00:28:dd:81:4a:78:74:3c:4c:09:be:8d:
                    78:2f:18:ee:86:3e:08:41:95:63:f1:ca:f9:74:18:
                    cb:84:b8:8b:d3:d9:d0:bf:61:8e:21:b6:9c:fe:84:
                    ac:79:93:a1:b5:18:f4:f7:29:c9:8c:3e:2c:b4:ec:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:88:1C:D8:DA:91:22:50:6F:83:51:ED:FC:72:C2:0B:6F:44:1E:EF
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/rogc2NqRIlBvg1Ht_HLCC29EHu8.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:ec:60:32:d6:d4:dc:6b:9c:de:93:ec:d7:ea:04:ca:1f:4a:
         47:2d:29:86:88:8d:d0:3a:01:b4:c5:47:22:40:1a:84:67:64:
         3f:f9:25:00:ec:52:43:70:ee:e1:62:30:68:07:68:e0:30:26:
         a9:ba:4e:f5:fb:36:67:83:28:a4:0d:7a:59:d7:dd:96:44:2d:
         1c:1c:56:be:e3:3a:92:b5:40:03:8d:56:47:db:d0:42:37:1a:
         62:29:e4:9c:ab:79:3f:e7:e3:0d:a4:f2:68:f2:6f:b9:45:e6:
         cc:67:99:81:c5:e1:8e:d7:bc:ee:8c:d7:d5:0e:0b:2d:22:31:
         bc:51:e1:7b:e7:3c:d0:3b:56:51:14:84:82:8e:dc:68:a4:91:
         44:ec:99:17:1d:c8:a8:aa:a8:91:ed:fb:c3:16:d1:23:0c:b5:
         bc:ce:ef:97:48:ae:dc:66:16:0b:e2:79:a9:62:01:2f:60:2e:
         48:2b:b8:42:ed:08:6b:b2:e3:f2:12:15:b4:5f:f3:c2:ca:9e:
         2d:cd:d5:6e:45:50:b5:79:58:30:2f:5c:8a:8a:52:cd:7e:4b:
         61:ae:1b:4d:86:24:7c:76:dd:62:5b:f9:7d:6d:37:18:d9:67:
         af:16:07:b3:29:8a:5d:c0:e6:ba:c8:dc:11:0f:2a:34:68:a8:
         7f:4c:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----