Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/0HFO92E7BDNy_sd2rwMx1Ad6f18.roa
File:                     0HFO92E7BDNy_sd2rwMx1Ad6f18.roa (raw, json)
Hash identifier:          CjxHcz8mWeDBMPWQIk1JZiolh6nSeulMSA4WWJ5Gl9U=
Subject key identifier:   D0:71:4E:F7:61:3B:04:33:72:FE:C7:76:AF:03:31:D4:07:7A:7F:5F
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4588
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0HFO92E7BDNy_sd2rwMx1Ad6f18.roa
Signing time:             Wed 30 Mar 2022 00:30:10 +0000
ROA not before:           Wed 30 Mar 2022 00:30:10 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17800 (0x4588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 30 00:30:10 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=D0714EF7613B043372FEC776AF0331D4077A7F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:55:0e:32:d3:04:91:4e:84:12:7e:ad:68:
                    2a:da:8b:12:01:31:c5:65:0c:b3:26:81:0a:a2:83:
                    bc:19:75:7a:cb:b9:14:23:50:16:bc:d7:58:97:54:
                    38:92:26:60:35:6e:3a:72:70:a4:46:08:e7:b6:42:
                    60:3c:cf:bf:62:49:9b:86:53:db:5b:9b:28:fd:66:
                    d2:6c:8d:a8:96:32:15:44:a6:e2:58:ec:82:dd:b8:
                    e8:fe:c4:10:c8:25:a8:41:e1:38:e2:37:97:31:e9:
                    83:5d:06:8c:53:10:2c:66:34:43:bd:8a:69:89:bf:
                    f5:0c:d7:0c:c3:69:f8:66:9e:22:a0:72:4d:03:c6:
                    a9:d9:55:08:51:57:ba:14:0c:45:38:17:7a:52:e9:
                    1c:fa:cb:38:cc:57:c4:37:54:ba:12:b8:f4:8f:45:
                    5a:ba:6f:f0:6a:74:d5:16:06:03:5e:1e:38:3d:22:
                    87:d5:3f:88:51:27:91:ac:dd:bc:5e:1c:66:bf:92:
                    d1:ba:04:cb:db:5a:ed:b6:37:74:0a:37:89:92:0b:
                    69:40:b9:6e:64:07:17:a4:a6:f3:ab:80:fa:b4:9c:
                    e2:4e:bc:7a:2a:95:cf:2f:10:4b:f4:c6:1c:8a:e1:
                    49:9c:ad:5f:0d:77:15:08:f9:e7:7c:ac:bf:1b:8e:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:71:4E:F7:61:3B:04:33:72:FE:C7:76:AF:03:31:D4:07:7A:7F:5F
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0HFO92E7BDNy_sd2rwMx1Ad6f18.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:92:d1:b1:01:a8:7d:22:9a:87:c7:bb:8c:8c:61:ca:a4:51:
         4f:c3:57:6c:ff:1b:2a:2e:68:1a:c5:17:cb:7e:d9:31:a2:df:
         2c:f4:13:78:c8:dc:0e:e0:13:9f:71:9a:b0:c5:26:a6:37:23:
         37:df:42:8c:ba:37:11:cc:72:3f:2d:ed:7f:49:d5:85:e6:a7:
         9c:4a:8e:dd:74:cf:1b:8c:c3:20:bf:99:4e:97:22:71:33:d1:
         29:1c:05:53:72:55:a5:84:91:53:4d:5d:46:08:aa:45:a8:f9:
         ae:f4:fb:18:91:72:1d:94:bc:c2:f8:d9:0d:dc:26:24:fb:53:
         27:a1:03:1f:f0:ba:f3:5d:48:07:65:c4:77:0a:b8:18:ae:e6:
         34:b5:9f:b4:06:1d:a4:75:4c:28:75:60:27:68:44:d5:f3:30:
         cf:f9:25:0f:8e:a0:04:89:8c:16:88:66:69:f9:b1:07:ad:59:
         06:07:f9:db:4d:59:50:00:68:6d:54:d3:c9:f9:06:cd:b4:18:
         dc:4f:cc:1a:83:bb:6c:14:0f:de:11:39:65:3c:d7:8d:17:05:
         86:ee:25:b0:02:d6:6e:9c:9f:70:f9:62:46:50:2b:55:d0:23:
         31:fe:0b:16:68:1c:b0:7b:73:8f:2f:f4:c2:63:5e:15:e2:4b:
         25:bf:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----