Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/5N-IdkV45fLhAR2ldJcATL8uGDw.roa
File:                     5N-IdkV45fLhAR2ldJcATL8uGDw.roa (raw, json)
Hash identifier:          KmhhRNg0O2ZWWj0iaqoOoWOv9f6bpm+7d1o8DqpnMFs=
Subject key identifier:   E4:DF:88:76:45:78:E5:F2:E1:01:1D:A5:74:97:00:4C:BF:2E:18:3C
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       46F7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5N-IdkV45fLhAR2ldJcATL8uGDw.roa
Signing time:             Mon 25 Apr 2022 00:30:08 +0000
ROA not before:           Mon 25 Apr 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18167 (0x46f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 25 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=E4DF88764578E5F2E1011DA57497004CBF2E183C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:c9:d4:91:b0:8f:5b:a2:05:76:df:99:cd:
                    40:fc:98:23:2e:bf:e1:0b:01:fb:95:63:45:d7:e2:
                    6f:b9:c1:eb:38:ad:b7:9a:5b:a7:50:69:90:37:41:
                    be:a0:78:b6:4d:30:40:66:87:c8:20:50:35:12:b4:
                    98:d9:a8:fc:3f:3b:77:ce:ff:97:d5:ca:c2:ea:68:
                    ad:5b:7b:bd:50:d3:6d:b8:33:fb:74:14:71:27:42:
                    42:c2:5d:70:eb:aa:74:82:5e:13:3a:fb:f7:8a:cd:
                    db:d3:8f:28:77:90:b5:8b:70:43:54:4b:53:39:e7:
                    27:0d:d7:41:d7:90:2e:aa:55:21:d1:cb:43:60:67:
                    cb:3a:a6:67:64:70:88:a9:48:83:a0:e5:c9:b3:c7:
                    19:f3:bb:05:cd:04:42:22:4e:62:d9:65:73:aa:60:
                    e1:18:f1:77:c5:50:ea:15:d3:48:5c:ca:8c:ef:28:
                    f9:d4:9e:87:50:d3:5d:91:d8:05:b3:42:3e:68:7a:
                    9f:31:a9:5b:95:e0:2f:0b:35:a6:ab:50:c1:f1:56:
                    c2:5c:1c:ce:15:a5:45:bd:46:4f:98:60:5f:ea:c0:
                    01:75:ce:a0:4e:ad:6c:89:20:96:49:44:38:29:9e:
                    bd:02:a8:d9:27:89:93:d1:55:2f:9e:6e:6b:56:7c:
                    47:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DF:88:76:45:78:E5:F2:E1:01:1D:A5:74:97:00:4C:BF:2E:18:3C
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5N-IdkV45fLhAR2ldJcATL8uGDw.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:f7:9d:b8:44:51:f4:65:1b:91:75:3d:1e:e9:92:c7:4f:60:
         3e:51:d5:5f:d8:e6:e9:07:a9:34:71:79:ce:2d:9b:12:fb:a3:
         e9:16:b6:94:25:4f:fc:f5:93:e2:ae:15:91:7a:b7:8d:bd:0f:
         b6:35:3b:96:33:87:33:c5:4f:ee:b2:8f:37:68:2b:0e:ab:d0:
         c2:42:9c:b6:3e:7c:56:ca:35:6b:4d:3e:00:eb:08:da:a1:64:
         2d:ff:95:a6:65:52:99:8f:8b:1e:ee:18:60:7a:a4:0d:d2:1d:
         d1:e5:5b:f8:59:c2:b3:e2:b4:2c:fd:30:2d:ce:b2:cc:4d:6f:
         69:e8:6a:f3:a1:6e:21:26:da:4a:6e:75:70:f1:39:79:f9:81:
         98:fa:9b:db:87:c5:25:27:ca:af:0a:f4:e8:97:4f:e5:b9:43:
         a3:b6:05:d3:2e:af:b0:c5:9d:e0:5a:d4:4b:40:5b:af:67:64:
         44:4f:ec:da:a5:68:c1:ae:83:92:cc:42:6d:c5:52:13:6f:53:
         fe:32:e9:c6:bf:8b:20:68:27:e7:b1:a3:05:9a:c4:2f:a6:ed:
         bc:55:32:05:ea:2f:16:5a:ea:de:80:34:72:86:7f:56:15:b0:
         e3:e7:91:7f:2b:8a:ef:fb:8d:88:e0:38:4c:ab:8d:9f:a9:27:
         35:e5:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----