Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ruW8TMArf5KNQ30J6tvTdnEWMKE.roa
File:                     ruW8TMArf5KNQ30J6tvTdnEWMKE.roa (raw, json)
Hash identifier:          89Uol2GjNP+OnpTRu+gK28iTmuyV9LOQi2GpRKYhsuA=
Subject key identifier:   AE:E5:BC:4C:C0:2B:7F:92:8D:43:7D:09:EA:DB:D3:76:71:16:30:A1
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4935
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ruW8TMArf5KNQ30J6tvTdnEWMKE.roa
Signing time:             Fri 03 Jun 2022 00:30:11 +0000
ROA not before:           Fri 03 Jun 2022 00:30:11 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18741 (0x4935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  3 00:30:11 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=AEE5BC4CC02B7F928D437D09EADBD376711630A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:57:fb:a9:ed:ea:70:f3:74:47:71:ce:7f:5d:
                    b2:84:0b:6c:d9:6c:60:39:92:26:e6:14:0e:c6:75:
                    ec:57:fd:d7:26:56:e1:ba:cc:15:2a:71:97:be:9d:
                    b6:b1:45:5d:04:4e:45:43:9f:f1:dc:8a:59:4b:b5:
                    20:f8:71:bb:b0:8f:e4:f5:b5:fb:d7:27:8a:d7:6f:
                    a8:15:bf:80:d5:0c:3c:37:a0:11:3c:7c:c1:d4:4c:
                    a6:32:eb:c2:8d:39:28:d4:32:ac:64:dc:5c:41:4a:
                    dc:40:2e:ab:cc:c3:ff:f8:97:b4:dd:42:d4:e7:ce:
                    89:75:c9:f2:7e:5c:1d:09:a7:d8:d2:70:46:92:d1:
                    b9:17:75:02:47:f2:26:df:60:85:6d:ba:dc:00:1f:
                    2b:0f:22:9f:cf:84:ad:d3:91:ad:1c:a0:d1:2a:ca:
                    a3:5c:fa:b5:81:32:06:82:fd:61:ee:c1:15:1f:91:
                    48:8b:7e:87:0b:21:69:71:fc:d6:7f:49:e5:25:67:
                    86:b0:a1:35:bd:92:60:62:38:a3:70:6a:9e:8a:d8:
                    83:50:b2:a7:4c:8c:bc:5f:b4:2c:e3:d5:67:b8:6a:
                    0a:36:5a:cd:a8:af:29:54:83:fb:04:2d:c1:ee:4e:
                    6a:2e:20:26:ae:ae:07:f7:2c:6e:b9:97:20:00:4a:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E5:BC:4C:C0:2B:7F:92:8D:43:7D:09:EA:DB:D3:76:71:16:30:A1
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ruW8TMArf5KNQ30J6tvTdnEWMKE.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b9:61:a8:db:bb:92:64:66:e6:e3:97:09:79:15:5c:0a:02:
         0b:15:f5:c9:1f:91:01:58:47:c0:1d:6e:cf:a5:65:27:7e:e6:
         ac:d5:c2:31:9d:35:76:ba:71:89:3c:6a:2d:f5:6f:82:a7:5e:
         22:6b:c4:84:19:39:88:3a:f0:a3:2d:96:bd:0d:4e:3c:99:56:
         6b:89:39:aa:dd:22:8b:af:17:28:08:44:d4:04:8e:2d:09:3c:
         2c:14:59:45:16:ae:0d:aa:67:33:51:04:87:3a:a9:bb:d8:13:
         9f:69:d4:59:9c:29:e3:56:9e:71:2d:c3:55:89:c5:77:76:30:
         0a:8d:b9:fc:df:fe:7d:d6:9d:d4:e7:cf:6a:2b:b7:94:f0:17:
         47:34:6b:76:fa:cd:68:55:0c:75:fd:98:14:75:6d:27:29:66:
         dc:34:e1:c4:a2:95:84:ba:85:65:83:9a:6c:9c:a3:2c:f9:b8:
         3d:0d:5f:4d:37:7e:a3:b4:16:e3:2e:80:10:7e:5c:10:90:d6:
         ff:a6:93:4b:02:60:96:5d:7d:c9:bf:d8:e5:07:5a:a0:94:f4:
         d6:92:ab:b2:b7:bf:d1:ca:b6:30:00:c6:ae:d5:0c:d6:d9:97:
         d9:76:dd:fd:8d:35:bd:d5:4f:1f:02:2e:b2:7b:c4:ad:24:b6:
         4f:4d:27:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----