Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3-4UsAQtxwpidY4HsewrSL0rgfA.roa
File:                     3-4UsAQtxwpidY4HsewrSL0rgfA.roa (raw, json)
Hash identifier:          /rg9bJTKRFh2sVLEe2u8IXRD5KpFA37CTLQiTRsR+zs=
Subject key identifier:   DF:EE:14:B0:04:2D:C7:0A:62:75:8E:07:B1:EC:2B:48:BD:2B:81:F0
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43E6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3-4UsAQtxwpidY4HsewrSL0rgfA.roa
Signing time:             Mon 28 Feb 2022 00:30:10 +0000
ROA not before:           Mon 28 Feb 2022 00:30:10 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17382 (0x43e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 28 00:30:10 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=DFEE14B0042DC70A62758E07B1EC2B48BD2B81F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:fc:dd:0f:e0:6a:84:69:b6:a1:e9:5b:a3:
                    fb:32:08:a1:3c:36:51:cb:c3:58:b1:b3:e5:21:12:
                    3c:11:1f:76:b5:94:d9:7a:9c:5d:ce:83:8d:66:74:
                    e0:04:17:5a:da:4d:9a:fa:4f:b1:43:b6:59:d3:1d:
                    c0:56:94:32:05:b5:af:fb:83:da:8b:df:7e:f8:49:
                    64:b5:fc:ce:ac:b5:40:05:b7:e1:bd:2d:14:b2:1a:
                    05:8d:c5:b7:32:a2:a4:fd:bc:bf:78:56:34:c5:5b:
                    a9:21:76:63:b5:c2:f4:08:2f:9c:2f:49:9a:51:a7:
                    95:4b:d6:2f:7f:9f:34:e2:e7:64:18:7d:46:b9:c3:
                    bb:46:10:f7:a1:4e:ef:aa:71:76:52:d3:0a:f2:82:
                    bf:0b:5e:ac:2a:6a:9a:f5:11:7b:71:75:a2:6b:a5:
                    78:4b:2f:70:c3:d8:0a:f6:ad:60:35:e1:5a:b9:a0:
                    38:75:77:7f:6f:6d:cb:bd:17:fa:10:6c:1e:f6:4f:
                    c2:96:98:8a:ea:9f:00:2a:5c:cd:cc:10:5b:76:53:
                    3d:75:d2:3d:f3:e1:ad:e1:cd:bb:6f:af:53:a6:6f:
                    88:21:a5:42:f5:08:6c:95:b3:64:4b:e8:e6:da:ff:
                    ab:55:e3:54:96:35:76:01:bd:87:38:0c:53:66:fb:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EE:14:B0:04:2D:C7:0A:62:75:8E:07:B1:EC:2B:48:BD:2B:81:F0
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3-4UsAQtxwpidY4HsewrSL0rgfA.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:46:3c:09:91:34:b8:b4:f1:55:a0:23:35:85:ee:3a:dc:5d:
         3d:e2:85:3e:eb:0c:0c:20:7a:1f:d4:cb:83:a9:c9:5e:bd:ec:
         ad:42:d9:3f:08:be:5f:7a:e1:8f:41:7b:38:fb:04:35:f7:2c:
         25:9f:11:1e:56:2e:45:1a:37:db:8f:f4:80:c9:87:6f:f1:1e:
         3e:8c:21:1b:14:6a:ef:55:a4:db:cd:0a:d0:fb:40:b0:6b:88:
         bb:c0:26:a1:fd:d6:ba:79:a8:79:74:5f:3a:55:f0:b2:5e:66:
         2e:e1:55:b4:77:58:48:38:e8:51:ea:d8:e2:ce:90:60:b6:db:
         68:c5:94:50:ca:ad:c3:90:b0:38:31:66:5d:7e:38:d4:ea:ed:
         df:ad:fd:0b:3d:0e:9c:45:f6:24:9e:b0:de:ec:9f:2b:59:6a:
         7f:1e:a4:55:62:6d:b9:4b:5d:62:02:69:9d:fd:42:2a:5b:60:
         b1:03:c5:d2:46:4d:cf:fd:35:52:75:4a:2f:30:72:35:d0:58:
         6c:71:a3:34:af:7a:2f:45:0b:40:c1:68:62:82:b7:fc:1c:e2:
         c8:3a:f3:d2:36:2e:e2:59:24:4e:9c:cc:22:e6:e4:0d:a6:bb:
         33:6a:41:97:b6:bf:42:43:b2:b5:59:e8:25:2b:11:07:59:c8:
         6c:d2:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----