Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/2Gsm9NRYgF0muJrS-SqAoAzh6po.roa
File:                     2Gsm9NRYgF0muJrS-SqAoAzh6po.roa (raw, json)
Hash identifier:          eJA1MbUcEh4yuAmwnaBfirlU5UEOafckNlhsXJuvNRM=
Subject key identifier:   D8:6B:26:F4:D4:58:80:5D:26:B8:9A:D2:F9:2A:80:A0:0C:E1:EA:9A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4977
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2Gsm9NRYgF0muJrS-SqAoAzh6po.roa
Signing time:             Tue 07 Jun 2022 00:30:05 +0000
ROA not before:           Tue 07 Jun 2022 00:30:05 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18807 (0x4977)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  7 00:30:05 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=D86B26F4D458805D26B89AD2F92A80A00CE1EA9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:4b:ad:a2:fd:e1:9c:8e:4d:df:eb:3d:e6:
                    0b:e7:0b:05:36:66:2f:98:a6:74:54:8f:88:72:c3:
                    8a:a0:9f:0f:f6:92:42:85:3d:43:79:e7:07:00:1a:
                    e1:94:ff:54:df:74:a3:68:3a:45:7d:c1:d3:84:4f:
                    10:96:3f:f9:46:e2:1b:43:ac:d9:e3:17:6d:50:23:
                    48:f0:11:32:40:0e:14:67:71:77:cb:8c:b2:f3:24:
                    31:8b:17:91:56:7b:a0:d7:fe:3a:36:0a:a3:10:46:
                    06:ae:9a:be:ef:1e:36:40:db:12:d9:77:4a:d3:f3:
                    b3:c7:2b:d1:62:4e:bd:b9:f3:65:90:09:ac:eb:08:
                    7d:69:7c:3c:8a:47:8e:20:4b:be:b8:53:95:16:b2:
                    de:58:a1:00:53:ff:ae:3d:e7:be:9e:7c:f5:2f:14:
                    e1:15:99:84:3d:83:55:bb:b6:ce:b9:e2:3f:87:05:
                    1b:2e:ac:f7:47:5b:5a:be:6f:c3:d7:2c:5c:df:ab:
                    6b:e5:b3:bf:a2:63:ea:98:5c:f2:57:d4:13:02:dc:
                    8c:64:86:9d:64:d5:c7:19:b8:40:a6:a3:e5:67:6a:
                    00:f7:96:5c:15:ae:e2:c3:8f:15:90:4b:d1:52:7f:
                    cd:17:1c:84:98:0a:a8:c7:5b:8c:a7:91:cb:60:3b:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6B:26:F4:D4:58:80:5D:26:B8:9A:D2:F9:2A:80:A0:0C:E1:EA:9A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2Gsm9NRYgF0muJrS-SqAoAzh6po.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a4:23:c3:e7:5b:0c:ae:32:02:ee:be:f9:0d:47:02:f6:10:
         88:f6:eb:6f:ae:14:5d:8b:9f:18:8d:0b:30:9d:ae:13:3e:93:
         f2:c4:fa:3d:36:c3:b4:2f:f8:b5:15:aa:7c:2d:5d:a7:73:47:
         f9:1a:18:03:08:06:16:21:d1:66:60:01:ae:c8:47:d5:04:52:
         ab:7d:46:42:87:6a:33:83:54:aa:f1:6f:ee:16:ea:7c:8b:5a:
         3b:be:aa:43:cd:76:2b:2f:08:9a:cb:de:9a:0d:26:55:e6:02:
         0b:72:fd:7e:4d:04:75:91:d1:bd:93:0f:f7:9b:ba:7a:de:88:
         1b:5d:af:d9:b7:40:11:86:ea:93:d4:9b:b7:c4:a2:18:70:46:
         3f:b9:f0:6d:cc:2e:81:c1:a7:d5:6b:31:b8:89:32:35:c8:4e:
         54:61:ec:12:69:f6:1b:1d:ef:2f:64:69:a2:6b:bd:da:19:f0:
         fd:5e:1d:da:54:cf:88:dc:e1:f0:ba:f8:aa:73:8d:f6:b9:75:
         e8:bd:6f:45:13:42:fc:3a:77:f7:ab:8e:22:e9:7f:c8:ab:a8:
         ec:75:0c:a3:10:26:24:1b:00:09:cb:de:b3:7e:fe:32:ef:5f:
         5c:a1:12:50:f8:b7:ac:24:ab:07:e5:09:09:2c:2b:c6:97:24:
         87:50:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----