Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/zMT97Qk8GAtzy7cyP41h-zajRqA.roa
File:                     zMT97Qk8GAtzy7cyP41h-zajRqA.roa (raw, json)
Hash identifier:          2Pag+c/JyTl0in3enQ7SJQT3g7oFjFXGKB7T+tmx7Fk=
Subject key identifier:   CC:C4:FD:ED:09:3C:18:0B:73:CB:B7:32:3F:8D:61:FB:36:A3:46:A0
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4314
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zMT97Qk8GAtzy7cyP41h-zajRqA.roa
Signing time:             Sun 13 Feb 2022 00:30:06 +0000
ROA not before:           Sun 13 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17172 (0x4314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 13 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=CCC4FDED093C180B73CBB7323F8D61FB36A346A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:b3:a3:7b:19:81:ff:cd:88:81:af:26:bf:
                    b0:68:f6:2e:18:2a:df:dd:a8:aa:8a:3d:bf:eb:27:
                    e7:61:4d:25:08:b6:12:b2:9b:9d:3a:f1:ea:a6:84:
                    a8:30:7a:45:28:84:82:10:7a:a8:7a:c8:19:00:76:
                    e0:fd:8d:15:03:0d:de:18:b0:a4:3d:de:17:a5:73:
                    59:68:2d:d7:61:a4:f2:6c:c0:f0:44:ab:5d:9a:ff:
                    01:ec:ea:87:01:7f:7f:fb:76:5c:96:8a:fe:30:c1:
                    f0:d8:70:ff:12:57:16:65:c0:86:ab:eb:e2:7f:4c:
                    c6:73:7a:62:36:f0:5b:7f:10:35:dd:2e:7b:81:94:
                    36:a0:ec:b2:c5:3a:f9:62:f3:8a:76:8f:a0:25:0b:
                    4b:50:fb:b4:b6:56:c7:61:1a:83:59:13:ec:5c:7a:
                    c9:c0:47:a3:5c:bb:e9:a7:77:1e:42:d0:bc:bf:e5:
                    e6:c4:ca:eb:71:37:8d:48:ed:69:e6:79:46:b8:29:
                    aa:50:30:89:11:8d:b0:4b:d7:72:e3:d4:c8:99:63:
                    89:c5:45:f5:74:72:cb:45:e8:9f:03:ca:95:4d:77:
                    ab:80:65:1d:ec:df:60:31:5f:53:a4:43:b0:97:5d:
                    db:2b:b3:8e:0b:e5:6c:59:89:e3:83:97:a9:95:17:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C4:FD:ED:09:3C:18:0B:73:CB:B7:32:3F:8D:61:FB:36:A3:46:A0
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zMT97Qk8GAtzy7cyP41h-zajRqA.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:bf:a1:73:f9:40:fa:7d:a3:0f:da:e1:92:bd:df:bb:fa:af:
         02:2b:45:66:fd:58:9e:8d:e8:ba:0d:81:d0:2f:5c:4e:66:a1:
         98:b3:17:1f:3a:f2:ad:a0:ba:84:fb:af:0c:aa:b8:2a:88:7d:
         7f:0d:21:c8:3d:60:c7:77:78:32:cf:3b:be:c6:b9:45:ea:51:
         6a:84:2a:ed:da:15:b6:d1:8b:cd:59:79:7e:17:4d:a8:7f:0f:
         a4:52:f8:33:87:ca:4f:ee:a7:51:76:ca:fb:fc:6c:c0:6c:9f:
         75:1d:ee:26:32:4a:f7:3a:35:6b:e2:24:3f:88:8b:a8:0d:13:
         7e:63:5d:9e:5d:fb:84:32:dc:74:33:95:e7:f9:77:ef:27:11:
         f7:e7:12:cc:53:43:73:15:2f:94:2e:de:54:c9:44:1a:2e:39:
         56:0e:a0:75:dc:75:c7:7e:d3:8d:1e:6f:1d:89:90:b5:1b:f7:
         ac:ea:38:ef:c5:55:18:0d:a4:31:ca:d2:2a:2f:eb:aa:7a:90:
         68:cb:65:8e:71:06:e7:fd:d6:8b:b5:65:56:93:61:73:32:c8:
         85:d1:90:58:25:4d:da:bd:7a:fb:f4:74:d6:35:c7:cf:d9:9a:
         2a:7d:62:5b:12:55:a6:ce:e8:fc:0c:5a:47:40:a8:05:d1:68:
         22:8e:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----