Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wdpxgu7dy-KBzW3L87ass2RqWAg.roa
File:                     wdpxgu7dy-KBzW3L87ass2RqWAg.roa (raw, json)
Hash identifier:          NcVH0UXuezeAlUBJOA0fzVcJaKMqxFmiXdQ6BqQDi44=
Subject key identifier:   C1:DA:71:82:EE:DD:CB:E2:81:CD:6D:CB:F3:B6:AC:B3:64:6A:58:08
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43F4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wdpxgu7dy-KBzW3L87ass2RqWAg.roa
Signing time:             Tue 01 Mar 2022 00:30:09 +0000
ROA not before:           Tue 01 Mar 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17396 (0x43f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar  1 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=C1DA7182EEDDCBE281CD6DCBF3B6ACB3646A5808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:49:3a:58:df:18:29:53:bb:e4:b3:b4:59:
                    01:b9:50:f8:13:2a:19:51:af:b4:2b:4f:8e:75:88:
                    c8:c8:d2:d7:bb:1e:8d:d8:e2:90:08:7e:6a:3f:96:
                    e5:07:3b:e7:4e:71:95:63:09:7b:b9:fe:47:d0:d5:
                    b9:23:64:7b:cd:3b:7c:d2:e7:34:8b:7e:17:f0:c7:
                    3b:a0:60:20:94:20:18:95:44:7c:42:f3:5d:42:f6:
                    a2:9c:87:73:74:af:f8:53:5a:54:ff:5e:3c:d5:2a:
                    78:75:bb:f2:76:fd:ce:b7:76:fa:51:e6:e4:51:3b:
                    e8:62:48:55:fe:4a:ca:78:ea:8f:a2:31:a3:ba:5b:
                    50:e6:cd:5e:87:bb:02:0b:03:eb:e8:25:53:17:8e:
                    4a:7d:ca:4b:ce:4e:87:ff:15:6b:91:2e:e6:a7:75:
                    16:73:1c:3c:c2:6f:3b:a0:e1:78:e8:7b:d7:37:f0:
                    03:51:17:f7:57:75:34:9a:60:db:3e:43:08:3e:de:
                    24:0c:c5:38:55:0c:1c:f9:24:a4:10:c9:f0:49:ca:
                    80:20:02:3f:95:be:36:ad:f6:b7:b1:5a:d0:c7:b2:
                    47:7a:6c:72:7a:57:b5:ab:27:70:94:32:70:f4:a4:
                    ce:77:b1:a7:7b:da:4f:88:87:93:9f:d8:64:1f:80:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DA:71:82:EE:DD:CB:E2:81:CD:6D:CB:F3:B6:AC:B3:64:6A:58:08
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wdpxgu7dy-KBzW3L87ass2RqWAg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:a0:f5:d6:8c:ce:9a:d0:c5:da:8f:6c:03:c6:9c:7a:44:75:
         8f:bf:31:87:f1:b0:8f:9b:1d:c5:90:28:98:e7:57:b0:78:13:
         97:de:98:ac:b3:29:ed:42:f6:38:f9:da:23:db:1a:0e:73:b0:
         f1:2f:3a:9c:53:27:9f:4e:c1:e5:af:92:f4:f4:c0:18:cf:e6:
         b8:c3:9e:54:e9:ee:b8:4e:62:09:19:74:04:20:39:bd:ff:41:
         b1:8b:e2:35:d0:4e:a0:d4:c2:e1:ac:cb:fc:18:e5:6b:62:33:
         5d:ad:93:32:ee:0a:e9:ca:ee:60:4d:0d:1b:de:19:b0:08:56:
         6c:60:c1:a2:fc:59:b3:1d:61:fd:d5:95:c3:52:b4:5c:13:f7:
         f3:2a:4e:7a:a2:d9:ef:4d:67:c1:4f:8f:b7:0a:bd:0e:04:2e:
         ee:e4:86:c8:7c:d4:c0:c6:29:48:91:ee:d7:bf:89:06:39:91:
         8c:fb:04:a8:7e:83:50:18:82:14:87:b4:36:23:07:21:a8:a1:
         b6:10:c2:3a:5d:8d:a5:c0:eb:f4:50:66:4b:d7:25:92:4f:3d:
         d1:17:4d:16:95:93:63:c7:cd:f4:41:fa:8f:e9:8d:72:0c:cd:
         68:e8:d7:9b:82:b7:e8:b1:46:98:4a:28:30:c2:3e:5a:4d:69:
         d3:eb:b4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----