Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/1dgyNkL8DvEvOI8831Swx1XX5Ek.roa
File:                     1dgyNkL8DvEvOI8831Swx1XX5Ek.roa (raw, json)
Hash identifier:          4BeC1UDM2mZg1yP4Q0qlVVsHHCoUfUvZBrak6AJcqK8=
Subject key identifier:   D5:D8:32:36:42:FC:0E:F1:2F:38:8F:3C:DF:54:B0:C7:55:D7:E4:49
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       44C1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1dgyNkL8DvEvOI8831Swx1XX5Ek.roa
Signing time:             Wed 16 Mar 2022 00:30:08 +0000
ROA not before:           Wed 16 Mar 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17601 (0x44c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 16 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=D5D8323642FC0EF12F388F3CDF54B0C755D7E449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d5:1f:dc:72:31:f7:f0:7d:41:62:64:27:7a:
                    1b:98:8d:f1:95:2c:24:19:7b:52:00:d6:f6:f8:85:
                    77:bb:8f:f8:7a:fc:92:21:28:3f:c5:e6:b7:d1:59:
                    57:d4:35:c3:8b:2f:c7:67:3e:2d:60:13:0b:ee:7d:
                    a9:11:f4:c0:cd:54:43:b8:a9:67:d4:e8:f2:90:f6:
                    04:54:53:32:c0:e9:cd:e3:74:87:49:f4:f2:98:d9:
                    e8:fd:db:74:a5:ed:0c:f8:bd:be:eb:65:e0:f7:30:
                    c3:a5:fb:22:13:1c:55:62:11:f2:9d:8a:97:1d:d4:
                    96:93:64:5e:64:1f:87:bd:5e:c9:98:59:ed:0a:81:
                    8c:88:e2:57:b7:f4:60:d2:c3:2b:b6:b2:55:ee:9a:
                    82:04:6b:da:f1:ea:d3:2b:18:7f:e3:a8:75:ca:12:
                    76:b3:e2:72:12:b7:d5:b0:5b:d9:2d:80:d9:3e:de:
                    95:fa:29:b6:4f:1c:43:68:aa:aa:f5:1e:c6:98:ac:
                    12:c9:8d:3a:62:02:5d:3c:5f:b9:7d:59:2d:15:00:
                    8f:e3:00:9d:c8:c3:87:52:a1:12:ec:e0:92:8e:6c:
                    df:e9:f8:7d:2f:37:b0:b2:12:98:9b:1b:53:0d:80:
                    1d:61:53:a1:71:1f:59:2d:69:f0:0d:73:5a:89:97:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:32:36:42:FC:0E:F1:2F:38:8F:3C:DF:54:B0:C7:55:D7:E4:49
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/1dgyNkL8DvEvOI8831Swx1XX5Ek.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:94:06:aa:3a:44:3c:14:55:3c:3a:63:22:03:49:82:50:5a:
         2c:d4:dd:de:68:aa:fa:cb:a2:5f:5e:28:ec:a0:df:87:f9:0c:
         d6:57:04:2c:d4:5f:64:54:a6:c7:c0:2e:c3:34:e8:29:85:1a:
         eb:26:ec:bd:d8:d1:d4:f9:94:fc:10:c9:bb:74:87:2b:34:f4:
         13:5f:d8:ed:46:6b:7e:c0:1c:33:50:3f:68:36:2e:3c:d9:53:
         d9:57:02:01:7e:4f:1a:b8:3e:69:59:16:d0:49:d7:c3:5e:6e:
         5f:a2:08:28:85:50:5f:d7:cf:12:8d:58:d3:b3:34:fd:7d:e4:
         79:62:41:8a:7b:f1:f8:5f:6d:68:f3:07:0e:01:61:21:a4:ee:
         41:e9:b1:ea:1e:90:15:d3:07:c0:3e:0e:2b:cf:d4:df:1b:11:
         6f:8f:58:17:43:da:16:27:3a:db:4a:7b:78:b5:76:78:2c:ce:
         e2:5a:73:53:27:76:6c:30:46:75:fe:8c:25:f0:a6:96:19:08:
         40:b1:aa:8d:67:24:ba:11:8f:a6:a0:96:73:94:d1:7e:81:be:
         ee:31:7a:29:00:ae:34:f3:6e:92:f8:a5:8d:3f:ca:ef:f1:59:
         fa:9f:b7:75:de:5a:24:b2:67:58:20:d5:ff:1b:1f:94:25:5f:
         d5:08:9a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----