Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/vP3BTrJWZThbO1CjephCQ6nf4GU.roa
File:                     vP3BTrJWZThbO1CjephCQ6nf4GU.roa (raw, json)
Hash identifier:          6ucRE9XUSCczJEddmVmlD/nvp0tVmn3Bm6UdUg5wFlE=
Subject key identifier:   BC:FD:C1:4E:B2:56:65:38:5B:3B:50:A3:7A:98:42:43:A9:DF:E0:65
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       44A7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vP3BTrJWZThbO1CjephCQ6nf4GU.roa
Signing time:             Mon 14 Mar 2022 00:30:09 +0000
ROA not before:           Mon 14 Mar 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17575 (0x44a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 14 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=BCFDC14EB25665385B3B50A37A984243A9DFE065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:8d:06:90:53:9e:b9:21:11:94:6f:9b:fe:
                    8d:a8:ef:2f:7e:4b:68:e7:ca:69:a7:7c:42:80:1e:
                    70:50:95:ec:d0:ca:29:3a:74:e0:ec:0c:62:58:6c:
                    fa:70:0e:80:5e:50:47:93:47:ab:19:2c:0f:b0:f7:
                    10:8b:26:2f:b0:ed:b2:44:f1:c0:1b:fe:bf:44:e1:
                    12:6e:08:80:5b:b3:af:89:64:11:8c:5f:3d:f1:3d:
                    43:d9:12:1a:33:4d:a6:cc:92:e4:f0:3f:be:8e:d0:
                    9d:1b:81:8b:06:5b:4d:fb:3c:6b:7c:fb:e7:da:dd:
                    5a:e4:70:aa:df:74:95:c6:a0:6b:d5:62:37:4b:0e:
                    bc:bc:94:e4:2c:bb:0f:3c:1a:02:f7:cb:5b:be:db:
                    93:9b:8a:c1:fc:b4:e2:fc:8b:17:5f:f8:1e:af:6b:
                    81:e2:4b:7a:26:8e:1c:ec:1f:ce:c7:8b:c9:84:28:
                    b4:84:15:f3:1b:bd:51:07:d1:3b:1e:e0:0e:d3:28:
                    17:13:24:18:2d:44:f8:56:e7:c8:e4:8b:66:fd:f5:
                    1f:8a:3f:0a:60:97:8c:4b:8f:0f:ca:a2:cc:e0:8e:
                    6d:5c:73:60:f6:f4:02:23:e7:3b:a8:91:ee:91:f2:
                    96:16:29:2b:18:25:c7:d2:1b:38:d6:22:f6:ec:d6:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FD:C1:4E:B2:56:65:38:5B:3B:50:A3:7A:98:42:43:A9:DF:E0:65
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vP3BTrJWZThbO1CjephCQ6nf4GU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:9a:be:2b:f7:6c:22:2a:2a:60:fc:fb:d2:9c:45:30:53:
         e7:7c:36:19:f3:4d:da:b9:a2:af:f3:4d:e9:ea:3f:95:25:15:
         5f:ce:c8:8c:ad:32:88:6e:7b:b4:97:08:ca:75:57:77:c7:4c:
         e3:dc:59:9d:c9:96:2d:2f:eb:8e:30:e8:16:25:e5:3b:49:81:
         88:39:0d:e4:3f:b7:34:2b:83:85:a2:e2:7e:36:8b:d8:fe:68:
         07:c2:d4:a8:51:25:25:f2:4f:ae:99:54:ae:ae:e1:97:e0:95:
         fd:28:7f:32:f4:ae:f7:d0:65:c3:ce:cc:06:b6:05:ba:bc:69:
         90:d0:11:ef:05:1b:ac:52:f0:a3:5b:30:96:15:20:16:8e:cb:
         d6:df:3c:c7:c7:6e:f2:09:58:f0:d7:2c:21:fb:ae:87:e9:a6:
         0c:47:eb:34:6a:9a:10:57:b6:1f:e8:ff:9b:dc:61:3b:d9:28:
         a1:0c:83:85:43:9a:c4:c4:8a:ec:69:75:f9:81:35:d7:91:0a:
         f8:c9:25:6c:84:1a:ff:ed:7e:e8:74:2f:3c:d3:11:d4:1e:89:
         fe:81:3d:74:24:9d:4d:b1:39:48:58:db:42:88:91:a6:6a:af:
         d7:c7:5e:9f:e8:4f:cb:a0:8b:2b:3c:63:92:cf:a6:c7:09:38:
         94:ae:5f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----