Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3CVflj3-ApyhbSLOjs7zqYS1M9Q.roa
File:                     3CVflj3-ApyhbSLOjs7zqYS1M9Q.roa (raw, json)
Hash identifier:          e/NvGCQc6e/ZpKn9QfCNzaKv8QSZwb1kgecmJQ9uwfc=
Subject key identifier:   DC:25:5F:96:3D:FE:02:9C:A1:6D:22:CE:8E:CE:F3:A9:84:B5:33:D4
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43A1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3CVflj3-ApyhbSLOjs7zqYS1M9Q.roa
Signing time:             Wed 23 Feb 2022 00:30:08 +0000
ROA not before:           Wed 23 Feb 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17313 (0x43a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 23 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=DC255F963DFE029CA16D22CE8ECEF3A984B533D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:a7:ff:30:90:ef:80:6b:92:62:d4:88:e2:
                    14:dc:20:dd:da:55:2c:5f:e8:8c:0c:b7:74:b8:2b:
                    0c:74:95:0b:1b:11:00:a9:83:cf:9d:1e:e6:fb:7a:
                    79:93:f7:81:94:dd:a9:d0:48:78:b9:3a:bc:5f:a3:
                    c7:bb:8f:46:d2:20:30:ec:52:46:ae:3a:51:8e:c3:
                    2c:ca:16:57:ed:cb:00:b8:16:4e:ac:8f:f7:5a:44:
                    b2:d9:b2:a1:ac:ad:35:d8:c1:47:4f:e6:d6:1a:d1:
                    09:db:b0:c2:c3:f1:11:f0:63:c5:92:33:dc:5c:44:
                    90:82:03:63:59:dd:7a:c0:dd:91:db:9f:1e:63:0f:
                    ca:0e:73:be:ba:32:b0:6d:ea:3d:36:4d:56:7b:66:
                    3c:61:f3:8a:b5:11:ca:fa:0e:97:e3:46:84:d6:72:
                    de:d1:d1:fe:ae:d5:a4:2a:40:bf:1f:6d:d2:63:00:
                    06:3e:5b:77:a1:75:a8:85:6c:fa:c2:29:33:14:33:
                    46:7c:e0:bc:78:99:16:01:53:dd:ca:6f:11:89:c1:
                    57:1d:f7:2b:f2:00:84:69:2a:da:ae:da:93:3e:58:
                    29:06:c4:7b:1f:58:27:66:c5:44:8c:5e:b6:3a:ea:
                    8f:1f:14:74:04:85:47:68:e7:3d:ad:77:50:ee:a3:
                    76:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:25:5F:96:3D:FE:02:9C:A1:6D:22:CE:8E:CE:F3:A9:84:B5:33:D4
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3CVflj3-ApyhbSLOjs7zqYS1M9Q.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:dd:a9:46:0e:13:47:30:c4:f5:84:d5:2b:3a:3d:10:b7:
         13:fb:c3:4a:99:32:8c:b0:26:ab:2e:42:0b:34:c0:7e:63:17:
         c6:48:99:2a:d1:27:2e:7b:55:e4:a8:89:b5:5d:05:32:d7:21:
         15:45:9e:98:95:52:08:55:49:ec:80:8f:5d:e2:9d:34:c6:be:
         cd:ba:d0:93:b7:d5:81:bc:ff:4a:65:e1:b1:29:4c:08:46:c4:
         91:6e:3c:75:21:43:d7:a7:d9:91:b3:62:ae:52:a1:68:e5:3d:
         e9:16:95:30:e3:da:e7:9b:ff:13:6e:b1:33:82:29:aa:7b:06:
         6f:06:b7:b0:60:cf:28:3c:d1:57:64:ba:0f:1c:04:e6:8a:76:
         05:c3:a2:90:2e:a3:e4:3d:09:85:91:db:ee:94:6f:de:8a:3a:
         de:2c:c0:b4:89:61:61:3a:fa:08:4e:18:2a:10:2d:31:e2:39:
         b7:0d:88:80:95:bb:fb:ca:34:25:31:08:7a:37:88:f8:72:ad:
         5c:1d:9d:cb:0c:2c:dd:75:10:22:15:27:a7:e1:14:63:4e:31:
         ca:0b:72:bb:c4:2f:6a:68:2c:5a:d7:bb:92:f2:b1:9f:2b:19:
         51:27:ce:78:c5:4d:4f:68:e5:38:84:15:c5:9d:8e:6c:4c:05:
         4a:43:42:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----