Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/0GecMLJ_orCbdVLZ2xCF-wBDw6I.roa
File:                     0GecMLJ_orCbdVLZ2xCF-wBDw6I.roa (raw, json)
Hash identifier:          duPQ16CqH5d+T1s9aEGahD/9QKnuWBjb6RFGZfL3pWI=
Subject key identifier:   D0:67:9C:30:B2:7F:A2:B0:9B:75:52:D9:DB:10:85:FB:00:43:C3:A2
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4253
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0GecMLJ_orCbdVLZ2xCF-wBDw6I.roa
Signing time:             Sun 30 Jan 2022 00:30:07 +0000
ROA not before:           Sun 30 Jan 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16979 (0x4253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jan 30 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=D0679C30B27FA2B09B7552D9DB1085FB0043C3A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:5b:87:9b:23:0c:05:79:3f:18:d9:81:c9:
                    d6:c8:8e:27:e0:66:7e:b2:ad:ff:ca:ab:02:ea:47:
                    08:33:30:d9:62:50:da:35:fb:f2:a4:b0:21:4e:7f:
                    a1:a6:a0:99:b1:33:46:f9:98:6e:36:a0:24:0f:59:
                    65:81:c7:4e:de:1f:00:25:e4:22:41:68:9f:fe:79:
                    7c:3f:0f:4e:e9:ba:51:cd:d7:fe:e8:9b:f1:61:84:
                    f5:a8:42:b2:a9:6a:a9:c0:0d:32:da:6e:d5:59:c0:
                    11:c3:f9:9b:30:ea:a7:7c:13:02:17:56:40:72:0f:
                    02:3e:0a:ad:92:42:de:26:ae:70:15:ea:fb:8f:61:
                    d4:d4:4c:54:4d:5a:cc:04:ff:cb:40:a6:07:53:2b:
                    84:b3:03:50:98:3e:9d:6f:95:a1:0a:f6:7c:d0:69:
                    5e:72:08:29:15:8a:64:2d:63:da:51:a2:76:a6:13:
                    48:aa:c9:50:96:0d:93:96:38:01:86:a8:47:56:55:
                    63:7e:c6:7c:95:eb:af:7c:ce:63:0c:49:7d:52:ef:
                    07:55:51:6a:87:5d:e8:ad:a8:30:21:56:0a:e9:e9:
                    5e:99:bb:6f:69:bf:81:81:29:d6:b3:d8:e6:21:24:
                    45:37:04:bb:01:4e:60:08:5d:23:ed:8d:08:9e:1f:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:67:9C:30:B2:7F:A2:B0:9B:75:52:D9:DB:10:85:FB:00:43:C3:A2
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0GecMLJ_orCbdVLZ2xCF-wBDw6I.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:c8:6a:d9:c1:c9:11:68:1e:fd:09:8e:70:94:50:e4:31:1a:
         57:1a:2c:c2:fc:04:19:84:7c:1c:b9:8a:6a:0b:d5:b8:de:ed:
         b4:c0:39:50:0d:99:e3:07:f0:21:4c:84:6f:95:3b:d1:27:10:
         a5:c4:ff:22:55:a4:3b:43:89:7b:76:ce:11:d3:17:90:25:69:
         c7:6d:57:6e:34:3a:5a:de:92:46:36:4b:10:d0:81:9f:cc:93:
         82:34:3e:dd:02:1c:7e:15:a9:67:21:15:b9:f1:6d:57:5a:93:
         b7:6a:78:d9:39:20:5f:2c:84:5f:a3:aa:85:32:8a:29:0a:ee:
         51:74:05:49:22:45:16:4b:86:a7:e1:86:fb:55:35:ea:32:8a:
         a0:83:f0:b8:b4:82:a6:3a:f5:ad:a9:f0:a8:77:d1:c9:fb:51:
         93:5c:96:e6:f0:4e:61:d2:a9:9f:1a:64:1a:2a:6d:a8:c5:d3:
         96:c4:fe:b4:2c:8c:45:d5:f9:d1:a1:b8:da:47:15:3b:ea:fc:
         a7:2f:3c:72:22:29:11:e4:7a:76:ce:0b:88:a5:13:6f:22:60:
         e8:bb:8d:9d:81:39:69:ea:7a:85:5d:75:c4:1b:c7:28:48:57:
         94:b2:25:cd:e2:ad:2b:47:0c:bc:6c:e1:72:4d:a6:54:50:c4:
         6b:13:89:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----