Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4MVN9ZPcO7vA5yQQSQHWx14KzcY.roa
File:                     4MVN9ZPcO7vA5yQQSQHWx14KzcY.roa (raw, json)
Hash identifier:          PF1+T24o00QqBVnjs+CNZ+aISYwbyUNTPW5CNLEfkWQ=
Subject key identifier:   E0:C5:4D:F5:93:DC:3B:BB:C0:E7:24:10:49:01:D6:C7:5E:0A:CD:C6
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       46CA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4MVN9ZPcO7vA5yQQSQHWx14KzcY.roa
Signing time:             Fri 22 Apr 2022 00:30:07 +0000
ROA not before:           Fri 22 Apr 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18122 (0x46ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 22 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=E0C54DF593DC3BBBC0E724104901D6C75E0ACDC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:f3:65:d1:ae:45:3d:e3:ef:e3:04:90:07:
                    ff:f6:44:bc:da:ea:d0:22:db:08:f9:75:7e:5a:1d:
                    38:57:56:3d:a2:84:e9:d4:e5:94:75:b3:61:06:d0:
                    36:0f:e2:e1:26:36:46:4e:dc:b4:24:f8:ee:37:66:
                    2f:ed:3a:96:48:c6:a8:a6:50:8b:2a:e4:74:8f:95:
                    99:d6:28:1f:a2:92:5a:06:6a:73:f4:d6:9f:8a:11:
                    d8:32:16:bf:26:55:32:7a:6b:72:6d:9f:6f:25:7e:
                    41:e1:00:1b:2d:e7:ad:5a:dc:9c:88:2c:6e:ca:23:
                    c7:dc:2a:1a:c3:f9:63:b0:e1:8b:44:44:8f:19:ee:
                    dc:33:dd:ee:07:13:23:f0:4f:fd:41:81:be:f9:a6:
                    58:c2:13:87:61:c9:cd:d5:ff:31:bb:ec:1d:49:4d:
                    a7:3f:20:58:e3:15:68:36:2c:ea:43:9e:e4:80:fb:
                    62:e1:ad:3c:61:fe:3d:0e:f3:54:b6:60:fe:ea:9f:
                    3e:a5:de:e4:69:4d:0e:99:6e:72:5e:22:63:69:20:
                    22:aa:b2:be:5e:49:d5:95:63:3d:88:f9:c8:a9:58:
                    82:fa:30:34:12:b5:b2:17:94:e9:f6:11:45:18:6c:
                    0c:92:8a:6e:80:1c:5a:9b:9e:d9:08:ae:a4:c8:6c:
                    f2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C5:4D:F5:93:DC:3B:BB:C0:E7:24:10:49:01:D6:C7:5E:0A:CD:C6
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4MVN9ZPcO7vA5yQQSQHWx14KzcY.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:55:78:5c:0c:cb:1a:cc:b2:c4:51:b6:c6:d0:a3:d0:32:fc:
         e8:b1:e6:56:bb:c0:e7:6f:c5:46:11:c5:f8:a7:c9:06:5a:bc:
         94:3f:4f:71:48:85:68:ec:43:15:11:77:98:0f:38:be:f3:25:
         26:cc:a0:02:e7:1e:56:d2:15:5a:68:37:93:73:a4:b7:af:b3:
         2b:f3:bc:5a:93:4e:4e:6c:00:ea:74:39:f6:aa:b7:a9:5a:31:
         a3:13:ac:25:55:36:c2:9f:8c:dc:b6:46:db:23:c7:e5:77:ee:
         3b:61:4b:84:38:cf:36:bd:a5:76:36:c6:b4:71:b3:f1:bd:06:
         b9:02:42:5e:9e:19:26:e9:fa:5a:2a:75:db:e5:9e:95:fc:40:
         82:c0:20:41:64:f3:20:cd:92:a5:46:5c:65:24:a3:23:f8:5b:
         d0:ab:58:b5:5f:48:7f:e9:12:40:8d:13:2b:41:e6:d5:a5:7a:
         1d:f0:f4:29:85:8e:77:5e:41:87:03:05:92:fc:50:e7:1f:1e:
         6b:85:78:a1:fc:9e:8d:1d:91:88:39:08:26:d4:a8:9b:d7:fa:
         88:9b:fe:c0:6c:12:d5:f9:eb:a4:ad:4b:e3:44:15:0f:cf:fb:
         d3:66:55:dc:ad:c4:01:50:cf:45:30:18:5d:62:50:b8:e9:77:
         9f:e4:03:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----