Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/2qCJtooRg5g2jT4atVO6pZvdvhg.roa
File:                     2qCJtooRg5g2jT4atVO6pZvdvhg.roa (raw, json)
Hash identifier:          7Cmu9nlN0msz1XmxQQ0d4j8iZkGmSUVIgiKmFu1B3Cg=
Subject key identifier:   DA:A0:89:B6:8A:11:83:98:36:8D:3E:1A:B5:53:BA:A5:9B:DD:BE:18
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       48C5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2qCJtooRg5g2jT4atVO6pZvdvhg.roa
Signing time:             Sat 28 May 2022 00:30:08 +0000
ROA not before:           Sat 28 May 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18629 (0x48c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 28 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=DAA089B68A118398368D3E1AB553BAA59BDDBE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:86:da:4f:27:68:ba:1d:25:8e:43:30:ed:a6:
                    13:80:8b:a7:0b:23:fa:1c:39:c4:45:e7:07:20:8f:
                    3c:d1:b1:a9:10:f6:d9:7b:b1:da:9f:ce:b7:b2:46:
                    d6:44:c7:61:33:12:c3:16:a1:3d:66:d3:d2:f4:86:
                    94:19:cb:6c:f7:ac:18:70:3a:e1:78:76:9e:42:1d:
                    c9:bc:ca:27:92:24:0d:4f:34:30:b5:9c:2b:32:f6:
                    b9:96:30:bc:0c:8e:9e:4d:8c:13:f4:47:c4:75:f3:
                    e3:f0:ab:4d:fd:6b:7d:95:d0:73:98:0b:0c:f8:66:
                    b4:31:52:32:6e:bb:2e:e2:53:fe:0a:3f:e8:41:48:
                    92:81:78:c6:be:bb:27:f0:79:91:7a:bb:82:fe:e2:
                    0b:4a:61:bc:8c:b6:1e:08:33:78:10:04:cf:33:00:
                    28:39:e7:8d:13:0a:aa:ff:fb:0d:38:55:b1:48:d3:
                    2d:0c:b1:48:46:1b:a8:fc:98:68:b7:0c:6b:2e:3e:
                    9d:ef:fa:80:69:56:b7:f2:ed:70:87:49:f4:3c:6d:
                    03:54:48:46:aa:73:f7:aa:9d:c0:22:85:b6:ec:4d:
                    85:f5:c5:dd:e9:e1:66:76:cf:a1:f8:84:7a:b8:44:
                    58:bf:29:d9:58:bd:87:e0:c2:a9:d5:7f:99:cd:15:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A0:89:B6:8A:11:83:98:36:8D:3E:1A:B5:53:BA:A5:9B:DD:BE:18
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2qCJtooRg5g2jT4atVO6pZvdvhg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:48:5b:43:2d:e7:a8:c6:8d:96:3c:a9:a0:bb:e7:84:84:57:
         ee:8b:57:a1:ae:70:62:92:23:64:1b:f9:74:bd:53:25:6c:0d:
         5d:e8:b7:5b:1b:ea:58:2d:99:e6:2d:6a:95:1d:c0:32:8d:75:
         d5:17:fb:68:88:ec:24:7a:51:c3:23:17:af:d3:ec:f3:3a:8a:
         d6:d9:3e:6d:fc:de:cc:97:6f:38:0b:ab:ee:37:4c:8f:bd:6f:
         73:bf:ad:d0:61:22:b6:a7:68:30:06:fb:26:c5:41:49:d0:9b:
         4b:4a:1b:e4:e3:6f:ad:12:78:55:c4:ca:31:f7:52:7c:47:c1:
         3d:40:ca:fe:7f:93:7e:b3:55:5c:85:6a:76:06:d3:b9:49:84:
         16:14:25:28:f6:dc:c6:be:d2:e4:bb:c7:a5:1c:ad:f4:e9:62:
         bf:87:82:1d:ff:5f:36:8f:bd:1a:29:60:57:38:fc:5e:85:53:
         46:b8:f1:9c:95:0d:3f:51:e0:61:ec:18:9f:55:69:99:79:f5:
         30:04:48:12:23:c0:e7:67:4b:3e:e8:60:93:29:da:7d:60:a6:
         e7:44:f3:19:70:58:7b:aa:da:8a:db:64:f3:f8:c6:27:0f:15:
         ca:52:96:19:fb:50:88:30:40:7f:01:77:01:ff:cf:fd:b6:26:
         2c:28:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----