Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/xYnX2ssqyIC0V8YhUkf-5PgMR5k.roa
File:                     xYnX2ssqyIC0V8YhUkf-5PgMR5k.roa (raw, json)
Hash identifier:          vP13ew1KmN7sNz3JqSlK5VMBT/A5IFoOjzvvqfNHRaw=
Subject key identifier:   C5:89:D7:DA:CB:2A:C8:80:B4:57:C6:21:52:47:FE:E4:F8:0C:47:99
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       455F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xYnX2ssqyIC0V8YhUkf-5PgMR5k.roa
Signing time:             Sun 27 Mar 2022 00:30:09 +0000
ROA not before:           Sun 27 Mar 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17759 (0x455f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 27 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=C589D7DACB2AC880B457C6215247FEE4F80C4799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:79:4d:54:e5:8f:13:cc:5f:d6:0a:e9:74:
                    90:1b:33:29:eb:b6:60:28:25:95:ea:f2:86:f5:ef:
                    85:1f:1d:7b:82:06:80:d0:c2:5c:f7:f6:1a:df:4d:
                    3b:61:d3:4c:80:0b:b6:a2:d9:1e:2a:69:70:10:7e:
                    da:4e:26:40:07:d4:d8:a3:43:86:2e:13:83:23:a6:
                    21:fc:20:50:96:1c:8c:e5:ec:99:be:12:53:2d:17:
                    bd:d9:6a:23:7e:de:a1:c9:7a:86:af:1d:52:b9:22:
                    b0:b7:fc:9e:58:f7:5d:bb:aa:dc:f8:28:9c:e0:f7:
                    8c:62:ee:f9:e8:1d:4c:4a:7f:30:e7:6c:0d:6a:6e:
                    76:95:57:ef:a4:f4:79:26:8c:f6:52:4b:31:4f:ae:
                    5f:d4:3b:72:a2:d7:a4:4b:47:c5:29:11:a3:93:90:
                    59:58:9d:18:a4:d0:13:cd:5d:27:1f:95:e8:7e:de:
                    e3:e3:4d:1e:08:de:66:64:ae:92:66:cf:2c:04:2d:
                    f6:f2:6d:f1:62:bd:2e:a2:52:b9:55:96:f2:a3:01:
                    86:7c:4e:27:c4:21:70:86:f5:db:e1:60:bc:76:4e:
                    c7:64:52:5b:97:42:f5:4e:6d:ea:a0:ed:ff:a6:5a:
                    d2:30:8d:5e:d2:f5:d6:9c:14:6b:c6:42:01:19:fd:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:89:D7:DA:CB:2A:C8:80:B4:57:C6:21:52:47:FE:E4:F8:0C:47:99
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/xYnX2ssqyIC0V8YhUkf-5PgMR5k.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:59:a6:57:75:e3:12:fe:76:69:5b:aa:e2:ec:d1:1c:ca:
         56:15:ad:26:3b:a6:ce:24:90:71:44:b7:6c:e1:98:d4:04:39:
         a8:7c:55:6d:ad:17:46:95:60:23:13:9e:cb:c9:c3:fb:ef:f5:
         62:78:df:85:d1:01:b3:07:7d:65:d5:c8:4f:e5:da:3b:29:08:
         be:96:28:cd:4a:6a:14:5c:db:c5:8b:e9:23:5d:b5:74:8b:33:
         9f:c0:9e:59:51:b9:55:da:6c:cb:df:3d:fd:6f:b2:0d:45:17:
         a7:f0:13:f5:c2:6c:04:10:0e:88:03:62:3d:3d:2b:db:d1:05:
         79:6f:d0:b8:72:5d:d4:e1:fc:db:0c:34:c4:4c:b6:a0:75:5f:
         ec:49:82:e8:f1:3e:c9:f3:38:2d:83:ff:05:03:ab:2c:2b:12:
         ae:03:1f:7e:67:a2:2b:70:8a:c0:00:2a:48:82:d3:3e:77:5a:
         0a:75:f6:b6:b7:17:e2:1c:39:92:77:2b:53:b8:f6:77:3d:7d:
         26:ee:a8:7b:06:3c:eb:6d:f2:16:83:bf:8b:8d:b0:a0:60:86:
         84:2c:de:b7:38:f3:a0:e3:b6:19:9a:3d:97:63:10:26:f9:d5:
         05:ee:c4:ef:be:14:d9:bf:27:d7:52:58:44:12:9c:2d:8e:b5:
         fd:32:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----