Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/5lkgiMufT0IMAGDLa8yDa1WERWY.roa
File:                     5lkgiMufT0IMAGDLa8yDa1WERWY.roa (raw, json)
Hash identifier:          rMGdEviYPLH5N3B0rXOY6X2h28bFGvfTUVhmRqbFcsY=
Subject key identifier:   E6:59:20:88:CB:9F:4F:42:0C:00:60:CB:6B:CC:83:6B:55:84:45:66
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       494B
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5lkgiMufT0IMAGDLa8yDa1WERWY.roa
Signing time:             Sat 04 Jun 2022 00:30:08 +0000
ROA not before:           Sat 04 Jun 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18763 (0x494b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  4 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=E6592088CB9F4F420C0060CB6BCC836B55844566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:15:a6:65:1c:c7:14:f9:01:bb:d6:5f:13:68:
                    47:1c:a6:b7:5c:2e:70:5d:44:95:a3:48:99:4c:b6:
                    e2:96:2e:fc:d7:ee:ad:2f:40:ac:3a:63:10:f7:cb:
                    79:7d:a4:d5:d2:c2:75:d7:ca:6f:3c:94:8b:58:f7:
                    ce:7b:b7:bd:d9:f3:33:8e:75:e5:49:28:b4:9f:85:
                    e2:ab:9b:25:f3:1c:ed:9c:7f:a6:12:8d:25:69:7a:
                    8d:00:91:24:b4:82:10:97:34:47:37:a3:44:c7:75:
                    61:7e:51:ad:e8:08:8f:9f:95:27:d0:15:e3:73:61:
                    e1:ad:c0:cb:c1:39:20:0a:14:32:93:dd:9c:2b:18:
                    57:26:a6:49:e1:fd:ce:be:0d:32:32:3e:bc:34:7b:
                    5e:f9:bb:11:4f:a3:75:87:04:4f:a9:f7:46:9c:77:
                    f3:36:3a:aa:2c:75:15:20:4d:5f:3e:e7:20:a5:8f:
                    d8:52:05:05:db:3c:f1:f3:bd:1b:68:8b:21:0e:a7:
                    d9:07:87:63:6c:80:15:ab:da:f9:9c:45:83:15:31:
                    47:ee:74:83:28:cc:75:b5:7c:a6:2a:89:55:37:87:
                    49:0f:36:e4:99:ae:9f:c2:37:80:60:80:55:3e:d7:
                    52:8d:c6:84:94:d8:bf:ad:04:03:c7:ad:09:d7:d0:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:59:20:88:CB:9F:4F:42:0C:00:60:CB:6B:CC:83:6B:55:84:45:66
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5lkgiMufT0IMAGDLa8yDa1WERWY.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:46:5e:63:b4:b8:6e:a9:82:68:e3:a4:77:2b:40:9b:70:bf:
         83:be:85:f4:a9:96:67:ce:69:d5:02:64:9a:5c:6c:2c:c3:f3:
         5d:72:8f:18:d4:1d:4f:c9:4c:1f:21:d1:b7:cf:16:07:1e:b5:
         ec:e6:93:6c:7a:ed:6c:5f:4d:78:05:8a:20:9c:93:b7:7e:fd:
         da:07:a0:8d:6f:06:2f:c9:e5:9f:2e:6e:58:6e:03:4b:1e:64:
         92:cf:36:f0:5a:34:3e:50:06:93:28:e2:76:24:eb:e6:a8:68:
         4b:ee:55:8d:9a:17:4f:8f:bb:8e:1d:ad:6a:e3:02:94:b9:d4:
         48:54:cb:30:13:23:20:e8:e6:e5:4a:d0:67:91:46:b0:8b:8b:
         25:da:92:02:96:0d:e3:b5:d6:1f:26:3d:a4:a7:4a:bb:48:2d:
         db:2a:47:75:58:6e:f3:db:13:b8:37:60:c7:0e:bc:4b:ce:b7:
         9a:2f:7b:1c:2b:80:02:8d:d7:20:5a:20:33:ee:c1:b1:c1:23:
         d6:f6:47:b6:bd:f8:59:8d:e6:22:e7:13:8c:94:10:e8:43:ea:
         6b:30:de:a4:6e:0d:9c:c0:0b:de:32:16:70:5f:87:a3:f5:24:
         09:11:f7:2c:d6:54:7c:0a:35:34:ca:fe:a5:cd:8d:79:78:bd:
         71:fe:2c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----