Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/yXwUWtek9RuK4C9ZQLwUE67aT7I.roa
File:                     yXwUWtek9RuK4C9ZQLwUE67aT7I.roa (raw, json)
Hash identifier:          cdJcOcgssoRucKLp3QK7zh7y7qIFhyVN/M6MyugthaY=
Subject key identifier:   C9:7C:14:5A:D7:A4:F5:1B:8A:E0:2F:59:40:BC:14:13:AE:DA:4F:B2
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4410
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yXwUWtek9RuK4C9ZQLwUE67aT7I.roa
Signing time:             Thu 03 Mar 2022 00:30:09 +0000
ROA not before:           Thu 03 Mar 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17424 (0x4410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar  3 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=C97C145AD7A4F51B8AE02F5940BC1413AEDA4FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:9c:84:ea:a8:2d:cc:9d:fe:c2:f5:ae:c6:
                    a8:31:9c:9a:bf:bf:d8:8b:7f:28:41:f4:81:40:03:
                    c5:be:0c:99:bb:a2:e3:b6:86:de:b2:0d:4c:dd:17:
                    25:f5:50:db:08:9a:bc:7c:05:ac:51:b6:e3:e2:7e:
                    14:69:a3:1f:bc:4e:e2:77:44:0c:5a:b1:06:54:bd:
                    6b:22:2b:bd:0b:88:fb:7c:a9:06:a1:13:76:47:88:
                    0b:87:b4:60:84:5d:75:55:fe:36:85:c1:c8:77:7a:
                    34:05:5a:93:6d:c7:34:d1:f6:64:10:d6:9d:75:b6:
                    fd:e0:8b:c8:49:78:d8:0a:96:07:87:e9:ef:a1:e6:
                    47:8f:b3:53:50:1e:12:05:35:13:69:5a:52:6e:c6:
                    d4:b4:ab:ed:b8:97:d9:0a:74:01:ba:0d:73:31:c8:
                    cd:ff:f8:1e:6d:bf:01:4d:61:98:10:22:ef:d5:1c:
                    a9:af:0e:e9:52:ca:80:48:3b:e6:9e:0d:67:ef:d0:
                    44:e6:27:cd:1a:59:41:d9:22:17:44:6c:25:0f:5d:
                    75:6d:37:35:df:ce:ce:ec:31:ba:73:25:37:a3:9f:
                    06:bd:d9:47:78:61:c5:c6:fa:dd:66:13:9c:4f:d6:
                    36:bd:bb:45:ab:69:43:c8:cb:5a:5e:00:ba:22:7b:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7C:14:5A:D7:A4:F5:1B:8A:E0:2F:59:40:BC:14:13:AE:DA:4F:B2
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yXwUWtek9RuK4C9ZQLwUE67aT7I.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:96:5d:d1:11:45:36:5a:96:a9:88:36:c3:58:02:69:e6:a0:
         09:70:65:21:38:91:5a:9a:38:40:89:06:c7:28:d1:52:b4:41:
         53:3a:03:dc:91:4e:d1:83:f6:ce:d6:29:22:f7:a7:65:aa:11:
         37:5f:25:c3:72:e6:8d:df:26:a0:15:bd:af:b6:ac:ad:3b:a4:
         b0:a8:4a:46:13:13:03:73:e2:18:f5:2c:1e:2f:77:9a:f4:12:
         66:8d:0b:5b:83:40:71:71:03:b6:09:73:0c:ac:a3:c6:e0:70:
         fc:6a:15:02:d9:93:0c:a0:44:de:88:cb:b6:2c:c6:0f:ab:81:
         56:66:c4:a9:83:0d:e8:62:b0:c9:5d:64:94:aa:ee:71:21:dc:
         27:2f:44:07:74:76:e4:1f:80:c7:cc:d1:78:79:2d:52:43:1d:
         b3:2f:11:49:2e:f9:26:ad:d8:68:21:a3:8b:bf:01:38:1e:9f:
         3a:c7:c6:5e:30:ad:2d:64:20:f4:60:48:b4:89:f2:17:c9:9d:
         de:7b:14:20:cf:ea:28:8f:80:54:1e:93:60:f9:a2:ed:06:ea:
         fc:31:01:ca:e3:b1:81:6b:96:26:ec:58:a7:06:f8:6e:e4:87:
         30:65:12:bf:be:3b:c9:b8:23:d1:1b:a2:05:3b:df:50:a1:03:
         1b:59:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----