Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7BDiuNgUeVKesPRwWu6BX0VNcF0.roa
File:                     7BDiuNgUeVKesPRwWu6BX0VNcF0.roa (raw, json)
Hash identifier:          En+7fkyqEBWJ8WvwI5wPYwE5jzDWDdkwPEfcTfOYaDk=
Subject key identifier:   EC:10:E2:B8:D8:14:79:52:9E:B0:F4:70:5A:EE:81:5F:45:4D:70:5D
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       45E9
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7BDiuNgUeVKesPRwWu6BX0VNcF0.roa
Signing time:             Wed 06 Apr 2022 00:30:07 +0000
ROA not before:           Wed 06 Apr 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17897 (0x45e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  6 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=EC10E2B8D81479529EB0F4705AEE815F454D705D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:4d:d6:7c:4b:50:b2:7b:66:39:10:7a:15:
                    b9:fa:43:a4:fc:e2:1a:b9:3b:f5:60:cd:5c:8b:d7:
                    17:f4:1c:a5:d8:df:ac:17:98:85:3c:ff:f7:8f:df:
                    fd:69:56:4f:7d:ce:2f:50:56:a2:7b:94:1e:36:ff:
                    07:29:f7:7f:df:ca:c3:52:e6:54:b2:4c:bc:a0:19:
                    fe:5c:06:63:27:07:5b:cf:60:25:24:f9:f2:f9:f6:
                    7a:c1:0c:c3:f0:d5:cb:d7:e0:f2:1d:8f:28:6c:c9:
                    d5:d8:f0:a6:ac:29:12:18:c5:77:ae:12:72:e1:50:
                    ab:9b:19:1c:fe:57:8d:15:eb:70:53:45:37:53:72:
                    7e:0d:2d:c2:ba:d3:a8:3b:cd:b8:ef:3d:c4:d0:99:
                    91:7d:19:f8:42:2d:ce:c9:f9:1c:13:99:77:ac:d2:
                    27:4a:b2:2a:36:7a:48:aa:54:e8:ef:c5:82:65:4f:
                    19:3a:19:91:6b:d5:86:37:cb:b6:10:06:25:d9:56:
                    b6:dc:0b:78:52:26:a8:fa:98:68:ae:0b:89:9a:82:
                    4f:e8:1f:5a:7d:62:4f:67:04:33:b5:03:6a:45:96:
                    92:3d:1d:98:5f:00:ca:6a:06:e3:76:8d:b9:e5:5d:
                    f1:fb:4b:20:2a:59:d4:30:e2:6f:08:ff:94:d6:c0:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:10:E2:B8:D8:14:79:52:9E:B0:F4:70:5A:EE:81:5F:45:4D:70:5D
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7BDiuNgUeVKesPRwWu6BX0VNcF0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:d4:48:a5:95:99:ab:6b:13:b5:3a:90:3f:af:0e:a8:a5:
         c8:26:a8:74:ce:18:29:e1:ac:fa:57:1f:ed:fb:5a:49:3b:ba:
         dc:ac:14:d8:09:80:86:79:8a:22:bd:e6:07:cf:0a:44:30:8d:
         fb:76:92:34:05:a4:61:dc:0a:73:a9:a1:36:fa:a1:97:c3:e3:
         43:b7:28:0f:e0:6b:3c:45:dd:ff:a4:1b:5c:bf:98:64:5e:76:
         2a:90:b3:0b:db:f1:56:04:a0:d6:b7:c2:2c:50:00:3a:0f:70:
         6d:23:7c:32:31:e9:76:af:14:63:f6:a3:30:45:ca:dc:fe:06:
         38:22:ce:40:6d:4e:00:77:2b:93:f1:df:e9:e6:e4:6e:0c:e7:
         b6:78:3b:9a:25:d5:22:7a:de:6b:79:1a:86:2f:a1:42:82:4b:
         31:e3:6c:57:aa:55:ba:42:01:73:e9:5f:16:29:95:af:52:f0:
         1b:c1:9a:f4:64:1a:cd:97:d9:50:ac:84:c8:96:d5:4f:9d:68:
         3b:b7:fc:e3:fe:e1:5e:f6:ce:95:15:a8:10:ac:d6:ba:59:86:
         0a:ba:22:30:5b:76:50:3e:e5:d9:cf:e4:24:98:b3:7b:11:a2:
         1b:de:cc:a8:30:60:77:b5:a8:a4:a5:86:63:d9:2b:b4:79:95:
         c7:bb:a4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----