Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3LSvbcipdRazs6EQoQ2jrHtBesI.roa
File:                     3LSvbcipdRazs6EQoQ2jrHtBesI.roa (raw, json)
Hash identifier:          SxYhv3x6rXM53lhtkJPNSbHRIaRDYB1kZWlJwXP51Ic=
Subject key identifier:   DC:B4:AF:6D:C8:A9:75:16:B3:B3:A1:10:A1:0D:A3:AC:7B:41:7A:C2
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42FB
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3LSvbcipdRazs6EQoQ2jrHtBesI.roa
Signing time:             Fri 11 Feb 2022 00:30:07 +0000
ROA not before:           Fri 11 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17147 (0x42fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 11 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=DCB4AF6DC8A97516B3B3A110A10DA3AC7B417AC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:ab:d6:3d:33:cf:1e:94:59:e6:fe:54:8a:
                    08:8e:5c:82:bc:e1:9c:31:07:23:7f:79:cd:41:1b:
                    00:57:b9:64:7c:b7:1c:76:9f:08:22:0a:63:17:a8:
                    da:b6:de:e3:44:07:be:95:16:41:88:5b:a5:61:49:
                    0a:b8:c9:7b:8b:f3:29:21:9c:08:d5:de:27:4b:93:
                    4b:0f:cd:ea:b9:5b:0e:63:d3:ea:57:84:17:b0:da:
                    4a:0f:aa:23:be:90:4e:05:72:67:d6:b3:74:ab:1f:
                    1d:98:09:9d:6f:a7:8f:55:c5:d2:55:25:fa:78:2e:
                    81:01:29:6d:59:64:8f:ac:62:c4:e6:a9:b0:94:14:
                    db:d5:ae:76:7d:8f:83:44:01:85:78:e0:dc:3d:89:
                    72:8a:38:3d:1b:dc:cf:09:14:2f:e2:b9:b0:45:37:
                    8c:0c:74:82:0c:f8:44:b3:9c:c0:2c:c9:89:af:9b:
                    40:99:c8:ec:4a:c3:75:ef:8f:07:a7:3b:86:28:00:
                    1c:dd:78:0f:bb:7f:66:ab:22:a6:7c:db:73:c9:fb:
                    ca:ec:2f:fe:7e:e0:9d:76:20:62:ae:8e:5a:e2:d5:
                    00:e5:f1:32:a6:11:ed:0e:09:55:30:7b:0c:ff:96:
                    47:3c:6c:7c:2d:a1:26:67:ed:eb:88:34:8b:01:c3:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:AF:6D:C8:A9:75:16:B3:B3:A1:10:A1:0D:A3:AC:7B:41:7A:C2
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3LSvbcipdRazs6EQoQ2jrHtBesI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:7f:fb:9d:5b:90:5b:d5:50:d0:6d:14:c9:d2:30:64:60:93:
         ef:61:e8:73:6e:c1:5f:69:55:44:df:08:56:9f:a3:88:6f:19:
         87:3b:70:7d:69:28:0f:6d:79:d2:01:d3:37:f1:4f:ee:3d:3b:
         e4:6c:30:ae:90:aa:24:a8:2a:d4:57:c9:43:f1:ef:e9:43:c0:
         ec:67:db:3a:63:cd:fa:e9:97:6c:7e:51:85:9e:e9:f8:20:e9:
         ff:d9:88:b3:5d:89:99:7d:53:f6:63:7a:0c:df:16:a0:46:80:
         58:ea:c4:ea:a0:d6:df:5a:e8:86:f1:6f:d1:c5:01:09:90:76:
         ae:ad:60:93:2b:cd:8c:28:52:9f:8b:25:e5:4b:14:1b:12:d2:
         35:fc:81:6d:a0:0d:f5:12:a7:34:6d:f9:34:83:b1:81:b7:95:
         d9:b9:46:78:54:37:f4:76:a9:7d:fd:bd:17:3f:db:3e:47:1a:
         ce:1c:ba:f2:e5:cc:59:fc:f1:84:2b:88:f8:12:86:e7:10:78:
         52:4f:80:73:da:fe:5f:ba:2b:4c:b8:46:bd:7a:46:e3:be:9b:
         a0:21:1c:2c:58:a2:3c:c4:ea:75:ff:8d:a5:88:74:fc:57:72:
         04:c3:8c:05:a0:9e:44:de:7e:b5:9f:7b:d5:54:be:ea:03:37:
         8c:2c:cb:d7
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMTEw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKERDQjRBRjZEQzhBOTc1
MTZCM0IzQTExMEExMERBM0FDN0I0MTdBQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTH6vWPTPPHpRZ5v5UigiOXIK84ZwxByN/ec1BGwBXuWR8txx2
nwgiCmMXqNq23uNEB76VFkGIW6VhSQq4yXuL8ykhnAjV3idLk0sPzeq5Ww5j0+pX
hBew2koPqiO+kE4FcmfWs3SrHx2YCZ1vp49VxdJVJfp4LoEBKW1ZZI+sYsTmqbCU
FNvVrnZ9j4NEAYV44Nw9iXKKOD0b3M8JFC/iubBFN4wMdIIM+ESznMAsyYmvm0CZ
yOxKw3XvjwenO4YoABzdeA+7f2arIqZ823PJ+8rsL/5+4J12IGKujlri1QDl8TKm
Ee0OCVUwewz/lkc8bHwtoSZn7euINIsBw5SLAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU3LSvbcipdRazs6EQoQ2jrHtBesIwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS8zTFN2YmNpcGRSYXpzNkVRb1EyanJIdEJlc0kucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AMJ/+51bkFvVUNBtFMnSMGRgk+9h6HNuwV9pVUTfCFafo4hvGYc7cH1pKA9tedIB
0zfxT+49O+RsMK6QqiSoKtRXyUPx7+lDwOxn2zpjzfrpl2x+UYWe6fgg6f/ZiLNd
iZl9U/ZjegzfFqBGgFjqxOqg1t9a6Ibxb9HFAQmQdq6tYJMrzYwoUp+LJeVLFBsS
0jX8gW2gDfUSpzRt+TSDsYG3ldm5RnhUN/R2qX39vRc/2z5HGs4cuvLlzFn88YQr
iPgShucQeFJPgHPa/l+6K0y4Rr16RuO+m6AhHCxYojzE6nX/jaWIdPxXcgTDjAWg
nkTefrWfe9VUvuoDN4wsy9c=
-----END CERTIFICATE-----