Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-lmEpk93Py4ls8Zy3HxhOqU2foo.roa
File:                     -lmEpk93Py4ls8Zy3HxhOqU2foo.roa (raw, json)
Hash identifier:          tYKbDHAnWz26EuiD+iGou5iOVykmetkVC/muZhJrLdc=
Subject key identifier:   FA:59:84:A6:4F:77:3F:2E:25:B3:C6:72:DC:7C:61:3A:A5:36:7E:8A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4519
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-lmEpk93Py4ls8Zy3HxhOqU2foo.roa
Signing time:             Tue 22 Mar 2022 00:30:08 +0000
ROA not before:           Tue 22 Mar 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17689 (0x4519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 22 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=FA5984A64F773F2E25B3C672DC7C613AA5367E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:9d:90:89:57:66:97:e6:ba:c1:ea:97:18:
                    73:48:25:1a:e7:54:ee:7f:98:84:fd:fc:37:2c:51:
                    30:39:0d:2e:70:14:07:d7:d4:a4:f7:c0:e4:91:69:
                    57:99:d6:04:f4:00:63:01:e7:2e:7c:3a:46:42:59:
                    07:e4:38:f6:6d:87:69:56:af:28:44:84:87:d4:11:
                    49:c5:38:55:60:73:52:c3:da:87:a3:e9:5e:be:3c:
                    39:a5:95:2d:85:ab:a2:9e:48:cf:4f:c9:b7:e7:21:
                    98:b6:8b:53:17:ca:53:a8:cf:25:90:1e:f7:56:2d:
                    6b:b5:91:8e:c2:11:a7:3b:57:41:cf:51:94:9e:b8:
                    58:5f:22:c8:f4:70:9d:22:a1:03:2e:f8:5d:79:bb:
                    2c:6d:4f:4f:24:72:0d:f2:e7:5f:9a:3d:75:ad:c4:
                    82:7f:7b:9d:e1:27:fb:98:c7:dc:e9:11:7b:6f:1f:
                    f3:46:e1:63:9c:9d:63:f3:28:bb:63:3c:68:0e:5f:
                    6b:28:16:fe:1f:9e:b0:51:43:91:ab:f0:ce:1f:4c:
                    b4:4e:b9:53:7e:b9:d9:de:dc:fc:da:95:c6:96:d2:
                    44:0c:a1:66:9c:60:33:20:c8:ec:1c:e2:32:cc:a4:
                    ca:d1:3a:23:db:9f:55:50:40:f4:52:3b:c7:ce:27:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:59:84:A6:4F:77:3F:2E:25:B3:C6:72:DC:7C:61:3A:A5:36:7E:8A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-lmEpk93Py4ls8Zy3HxhOqU2foo.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:91:66:5e:c1:3b:19:2b:54:1e:0e:25:99:a1:41:89:ab:c5:
         f3:51:a9:46:e8:b7:59:9c:c9:27:1d:2a:e0:f2:ae:cb:b1:50:
         7f:ee:40:7d:10:54:89:a1:cb:bb:d4:88:02:97:93:48:7d:6e:
         94:ec:bc:cf:cc:4e:4f:86:99:b2:8f:6d:93:d4:ae:2c:de:90:
         cb:fe:41:44:67:2a:09:65:73:0b:e0:9f:e7:b1:aa:22:5a:cc:
         43:12:c5:55:d2:90:7a:d6:90:ea:97:b4:1c:67:1b:a7:45:07:
         f0:4a:d1:16:85:b9:75:18:bb:cc:87:c8:9d:44:7a:3d:be:c8:
         a3:61:d9:fe:95:5f:ac:e6:b1:4f:a4:64:ce:12:51:a5:f3:d2:
         b9:f3:3d:4e:99:55:7f:34:e6:2e:e1:89:49:27:0a:7f:d7:81:
         7b:a8:58:d6:57:46:cd:ad:2a:0c:cc:4b:1b:3e:97:4e:cc:59:
         7c:2f:36:17:6a:b0:b5:3d:69:ce:27:19:7d:6a:5e:bf:c0:ad:
         08:47:f4:27:ab:40:b6:80:29:6a:cd:42:8b:f7:38:8e:9a:45:
         f9:42:17:f2:ad:91:f5:7d:e5:ed:eb:9e:b5:f1:ca:cf:57:cf:
         48:28:fe:20:75:51:7d:0c:b7:cf:7d:18:ab:b0:1c:89:a5:07:
         30:08:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----