Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/0PC_S5_QMArIKOOI3m5Lw5HDpcw.roa
File:                     0PC_S5_QMArIKOOI3m5Lw5HDpcw.roa (raw, json)
Hash identifier:          auPL7ZbHkiHpNHK8luY6Qbw6KqcwcbIhvgOZ8Y+Tu1A=
Subject key identifier:   D0:F0:BF:4B:9F:D0:30:0A:C8:28:E3:88:DE:6E:4B:C3:91:C3:A5:CC
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       430C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0PC_S5_QMArIKOOI3m5Lw5HDpcw.roa
Signing time:             Sat 12 Feb 2022 00:30:07 +0000
ROA not before:           Sat 12 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17164 (0x430c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 12 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=D0F0BF4B9FD0300AC828E388DE6E4BC391C3A5CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:64:d1:32:0b:11:62:e2:10:87:8c:c2:21:49:
                    65:a3:df:0a:14:d4:e5:43:ce:d5:6d:b8:a7:c2:64:
                    1f:b8:db:83:1f:83:ba:6d:d4:d0:0f:bc:39:29:ee:
                    7a:4d:01:f5:32:dd:e1:76:2e:1e:55:05:27:c7:cc:
                    ef:15:d0:d6:17:80:c9:7c:58:15:80:eb:17:37:72:
                    1d:21:b2:ef:e3:19:6a:ad:e8:51:b5:35:b2:c1:9b:
                    b7:d3:3e:e2:b0:4b:5d:83:54:7a:09:b3:35:93:e1:
                    78:34:0c:33:a8:00:12:e8:6b:7e:bf:e3:b3:d3:4a:
                    d4:c3:42:9e:9a:ff:37:3f:46:71:0a:c8:29:7a:b6:
                    6a:91:af:ea:ac:7e:2b:33:15:2c:9f:bc:72:3f:23:
                    20:2f:9e:70:6e:38:e4:5a:fc:84:b8:2c:c3:3a:38:
                    ca:12:88:8f:ff:8f:99:90:7e:14:94:52:ad:e1:5f:
                    d4:10:ec:21:22:e4:4c:83:bb:1d:72:2c:4c:cd:7a:
                    f0:dc:18:4f:6a:35:10:a2:d4:06:f0:eb:3c:78:72:
                    e6:ee:1e:aa:9e:cd:09:91:0b:3e:8f:85:1d:d2:6f:
                    9c:de:50:70:f9:44:fe:0d:82:00:97:7b:63:cd:91:
                    10:b7:01:b4:51:ea:9a:04:bf:d7:7b:91:7b:8c:47:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F0:BF:4B:9F:D0:30:0A:C8:28:E3:88:DE:6E:4B:C3:91:C3:A5:CC
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/0PC_S5_QMArIKOOI3m5Lw5HDpcw.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a4:bf:38:2a:54:47:ea:79:14:ed:c8:b0:fd:3b:4f:b7:04:
         c5:0c:18:9c:54:31:c1:63:59:47:ea:e1:59:75:6d:64:4f:bc:
         89:e1:51:af:df:f6:74:a9:70:44:22:03:6f:b1:52:9f:cb:6a:
         36:5f:bd:12:df:ce:4c:49:d2:c1:89:cf:53:f0:c3:6d:d8:95:
         2f:55:53:f9:13:8d:32:bb:89:1c:c9:46:66:67:de:6c:b3:97:
         5e:3c:de:4a:aa:fc:b0:ca:ac:14:42:d6:d1:24:29:e8:ee:4b:
         9b:bb:0b:f5:14:55:dd:54:7d:82:2f:1a:8b:e4:90:44:78:0a:
         e4:23:6a:b5:75:52:13:b0:b7:88:2a:e9:40:1b:d4:a3:e2:33:
         8e:47:e7:85:5f:1b:2a:87:59:0a:cd:a9:82:48:5b:3c:66:13:
         ea:40:c0:6d:18:7a:8c:23:b9:98:95:d5:c3:e0:9e:15:d3:de:
         1a:2a:1f:a8:f1:9f:55:37:42:1f:18:0e:f2:ad:2b:d4:bf:81:
         cf:af:0f:d5:b3:09:2a:89:72:81:e0:8b:50:60:e4:34:01:69:
         a1:f7:62:b1:c8:1a:2f:6a:34:7f:68:2a:f3:f6:80:6d:4d:e1:
         8f:86:4f:e4:a8:80:88:7b:5e:75:c7:45:55:fe:27:16:28:b7:
         c8:e8:ef:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----