Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/64CKGLBhCfkEN17X9AGy0UO6was.roa
File:                     64CKGLBhCfkEN17X9AGy0UO6was.roa (raw, json)
Hash identifier:          O4aYkFbFOSWiqA2oShEhfsRTFFwmcYCkmioX9xQNh/I=
Subject key identifier:   EB:80:8A:18:B0:61:09:F9:04:37:5E:D7:F4:01:B2:D1:43:BA:C1:AB
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       445F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/64CKGLBhCfkEN17X9AGy0UO6was.roa
Signing time:             Wed 09 Mar 2022 00:36:45 +0000
ROA not before:           Wed 09 Mar 2022 00:36:45 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17503 (0x445f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar  9 00:36:45 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=EB808A18B06109F904375ED7F401B2D143BAC1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:73:bb:d2:b8:47:9a:23:9b:76:95:cb:4f:
                    1e:fb:f4:ba:a0:ce:60:11:2f:50:52:04:a8:e9:9a:
                    e3:c3:b5:ac:fe:c3:6f:40:b6:a3:e1:ec:0e:b0:0c:
                    e4:1e:06:d9:cc:9c:03:a3:d6:6c:ee:ed:87:fb:7c:
                    82:ee:bd:5d:e5:0a:50:ae:1c:fd:51:48:2f:80:5f:
                    d4:5a:42:6a:97:fd:3f:9b:83:0e:c0:28:ff:ef:b8:
                    36:5b:b3:8c:a6:fc:5b:bc:21:f0:1d:df:7f:0f:04:
                    1a:72:bf:8a:2c:99:64:97:6c:bb:81:86:ba:f3:b4:
                    a8:bd:4e:b3:61:09:e2:9f:a7:f4:bb:0f:56:50:8c:
                    43:08:0a:ff:1d:4a:3e:86:5e:97:38:61:4d:e8:64:
                    21:09:76:f9:bb:12:cf:a2:4a:c7:4c:cf:ea:15:ee:
                    f1:e4:c9:41:ae:42:cf:4c:7a:cd:73:8d:c1:2d:de:
                    ad:29:17:53:90:a6:a4:39:c1:af:97:0d:38:cf:ae:
                    f6:89:d5:3b:2e:56:35:bd:7d:04:c2:f5:ab:72:57:
                    5d:05:50:81:7c:19:50:35:3d:e7:63:66:c5:e3:f2:
                    d5:3c:2d:56:4a:ea:e4:01:a6:83:a9:86:d5:6a:c4:
                    2a:a2:0d:c2:d5:ad:db:cc:1e:6d:b6:e6:f3:20:de:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:80:8A:18:B0:61:09:F9:04:37:5E:D7:F4:01:B2:D1:43:BA:C1:AB
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/64CKGLBhCfkEN17X9AGy0UO6was.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:26:91:75:ff:38:b5:6a:23:8d:55:27:8e:5f:59:e3:9b:cd:
         fe:ea:75:20:bc:8d:d0:ec:02:92:a0:4a:71:55:53:20:5b:0e:
         66:9a:26:9e:2f:5d:3d:de:a0:c7:7e:48:c7:ee:dc:5d:68:69:
         97:a0:7b:e8:a5:5c:84:25:3e:c6:8b:c7:1e:cc:81:fc:b3:47:
         70:75:d2:9f:d2:68:c5:31:f0:0e:4f:c7:c3:4a:b3:09:ea:1a:
         0b:3b:34:52:28:4b:3d:5a:af:17:49:d7:cb:f0:45:31:ba:7f:
         37:30:4b:b7:33:a6:8e:b7:ab:85:9a:2a:50:8b:97:29:4a:f6:
         d0:89:7b:15:ac:72:2c:8b:b9:af:5e:cf:9f:c4:0b:3c:79:33:
         1c:aa:06:bc:5e:10:d1:a2:c5:bb:99:43:a1:4a:80:df:07:0b:
         f2:da:3c:0e:cd:6e:51:e0:5e:44:b7:ea:d6:b7:f5:48:ba:d9:
         1b:bd:7b:08:29:72:3c:9f:7d:89:66:be:04:07:20:ff:41:87:
         18:25:d2:0b:02:7a:e0:c9:54:09:15:d7:6a:08:06:97:52:74:
         9e:ac:13:a8:60:7d:69:ac:14:c0:90:91:b5:5e:fb:3d:e3:6f:
         0c:4f:0d:65:53:35:13:46:a3:c2:9a:b1:2d:1b:11:3e:ab:56:
         70:74:5c:b3
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMDkw
MDM2NDVaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEVCODA4QTE4QjA2MTA5
RjkwNDM3NUVEN0Y0MDFCMkQxNDNCQUMxQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHQnO70rhHmiObdpXLTx779LqgzmARL1BSBKjpmuPDtaz+w29A
tqPh7A6wDOQeBtnMnAOj1mzu7Yf7fILuvV3lClCuHP1RSC+AX9RaQmqX/T+bgw7A
KP/vuDZbs4ym/Fu8IfAd338PBBpyv4osmWSXbLuBhrrztKi9TrNhCeKfp/S7D1ZQ
jEMICv8dSj6GXpc4YU3oZCEJdvm7Es+iSsdMz+oV7vHkyUGuQs9Mes1zjcEt3q0p
F1OQpqQ5wa+XDTjPrvaJ1TsuVjW9fQTC9atyV10FUIF8GVA1PedjZsXj8tU8LVZK
6uQBpoOphtVqxCqiDcLVrdvMHm225vMg3sBDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU64CKGLBhCfkEN17X9AGy0UO6waswHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS82NENLR0xCaENma0VOMTdYOUFHeTBVTzZ3YXMucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AIEmkXX/OLVqI41VJ45fWeObzf7qdSC8jdDsApKgSnFVUyBbDmaaJp4vXT3eoMd+
SMfu3F1oaZege+ilXIQlPsaLxx7MgfyzR3B10p/SaMUx8A5Px8NKswnqGgs7NFIo
Sz1arxdJ18vwRTG6fzcwS7czpo63q4WaKlCLlylK9tCJexWsciyLua9ez5/ECzx5
MxyqBrxeENGixbuZQ6FKgN8HC/LaPA7NblHgXkS36ta39Ui62Ru9ewgpcjyffYlm
vgQHIP9Bhxgl0gsCeuDJVAkV12oIBpdSdJ6sE6hgfWmsFMCQkbVe+z3jbwxPDWVT
NRNGo8KasS0bET6rVnB0XLM=
-----END CERTIFICATE-----