Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uZvRrw0lzyw0bdZ0wsjAgGPPfAY.roa
File:                     uZvRrw0lzyw0bdZ0wsjAgGPPfAY.roa (raw, json)
Hash identifier:          YDtH9+Y+tL/Q+pMP03VhWX9TKJnaOeQ+n4cd55cZyNg=
Subject key identifier:   B9:9B:D1:AF:0D:25:CF:2C:34:6D:D6:74:C2:C8:C0:80:63:CF:7C:06
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4608
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uZvRrw0lzyw0bdZ0wsjAgGPPfAY.roa
Signing time:             Fri 08 Apr 2022 00:30:10 +0000
ROA not before:           Fri 08 Apr 2022 00:30:10 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17928 (0x4608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  8 00:30:10 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=B99BD1AF0D25CF2C346DD674C2C8C08063CF7C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:f3:40:e4:c1:69:27:48:f4:37:f6:c1:f0:
                    5d:cf:63:f9:b8:d9:10:c1:43:99:4c:d8:e2:bc:45:
                    eb:7d:de:c8:4f:c1:03:b7:98:24:6d:ab:44:1c:0f:
                    31:de:a6:d1:2b:47:32:f4:1c:b6:e7:8a:f0:21:94:
                    f3:5f:92:fd:a9:e4:93:e7:8e:2c:51:39:cd:96:89:
                    02:45:2b:28:0c:9d:13:e4:33:67:65:f0:e8:89:da:
                    75:43:bf:f1:83:f3:3b:34:4d:a1:2e:48:c5:c4:84:
                    06:f5:ff:3e:d8:f1:c3:ea:37:1c:10:55:d0:f7:8e:
                    8a:fe:25:72:47:96:2b:67:0b:27:0c:f4:b8:c6:5c:
                    f2:68:e1:b6:a4:f5:fe:44:11:42:b7:0d:58:0e:d5:
                    99:9b:32:9f:d9:04:34:2c:7f:35:80:3d:16:04:03:
                    19:57:92:c8:12:0f:30:54:4e:f2:66:c7:e2:a6:d1:
                    26:c9:98:cd:5d:78:dc:80:1d:35:9a:c3:e8:a7:56:
                    a9:0e:60:78:f9:6c:b8:e0:1a:84:0b:1f:29:b8:c7:
                    0e:4b:53:8c:c6:21:75:b0:38:6f:82:6a:1d:e2:79:
                    68:dd:2c:46:33:46:84:a5:0d:9b:76:73:a0:29:c4:
                    6c:a4:9c:5f:fb:62:83:09:05:ab:bb:d6:dc:85:3d:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9B:D1:AF:0D:25:CF:2C:34:6D:D6:74:C2:C8:C0:80:63:CF:7C:06
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uZvRrw0lzyw0bdZ0wsjAgGPPfAY.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:0a:6b:7f:72:34:14:84:44:c3:cb:05:ec:fa:52:fc:c7:e3:
         9a:cb:f4:ab:78:45:5c:e6:67:9d:55:cd:b3:11:8e:97:9d:c6:
         ff:d8:fa:b5:18:6a:51:45:da:79:2b:28:a8:2b:78:53:fb:86:
         ac:17:7b:8a:a6:34:ae:6a:4f:43:b0:dd:e8:3c:f8:07:bc:b0:
         48:8c:fb:b4:d1:6a:1c:33:a0:74:13:44:f1:56:25:95:e3:91:
         6e:ba:4e:a3:77:57:b4:d9:54:62:04:92:5f:80:9b:1e:d7:11:
         c9:98:ca:91:42:ae:e7:f7:24:38:88:ad:83:9b:51:39:fa:ac:
         4c:bc:07:4d:38:6c:5a:74:24:17:48:8e:04:70:dc:bf:3b:60:
         ad:91:e2:5e:68:14:10:e2:89:60:0c:78:4e:85:6d:45:0a:f2:
         47:2a:15:22:17:89:39:aa:b4:03:76:62:81:42:51:89:5a:b4:
         79:7a:cf:a7:f4:b4:c4:9b:28:ca:0b:87:93:58:52:bb:74:62:
         50:0f:4e:a2:76:25:3b:8b:0e:d7:08:39:46:62:2e:cd:fa:a3:
         d0:e6:90:df:e6:25:a2:a5:75:6c:5b:66:e8:b7:44:d0:34:a7:
         df:5c:4d:e9:65:fb:6b:8d:fe:42:b8:65:21:d3:a0:d8:c5:3c:
         c2:be:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----