Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7FRiA70kSTWN0k95VBQwa9WrUXA.roa
File:                     7FRiA70kSTWN0k95VBQwa9WrUXA.roa (raw, json)
Hash identifier:          nJnzlYxaXAtHSCA+Tw8GIfCB/ZC1EFVEbvufSBlI7QA=
Subject key identifier:   EC:54:62:03:BD:24:49:35:8D:D2:4F:79:54:14:30:6B:D5:AB:51:70
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       45D0
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7FRiA70kSTWN0k95VBQwa9WrUXA.roa
Signing time:             Mon 04 Apr 2022 00:30:09 +0000
ROA not before:           Mon 04 Apr 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17872 (0x45d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  4 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=EC546203BD2449358DD24F795414306BD5AB5170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:93:d9:10:61:0c:0c:86:99:9e:9f:3f:9d:
                    f6:a8:3a:15:24:da:de:bf:44:b8:68:38:8f:89:5a:
                    54:76:63:44:6d:dd:9b:01:cf:f0:ef:a4:6c:c6:bc:
                    98:05:73:b8:87:eb:10:74:82:04:fc:4d:51:7a:a6:
                    f3:e6:6c:b0:ea:46:08:1c:29:75:bf:de:73:fa:c8:
                    85:42:26:a1:29:bc:1c:c4:2a:53:72:b0:74:17:17:
                    f8:20:d0:3c:39:a0:7a:d9:ee:ac:ab:87:05:77:79:
                    dc:6d:0e:8f:53:2c:98:56:16:6e:5f:15:84:3a:25:
                    6f:ce:06:81:9a:9f:93:c5:1e:04:ff:5f:56:3f:ce:
                    28:52:83:bb:03:2a:5e:fe:b1:5e:2f:07:ae:9e:7a:
                    8c:e6:66:c6:2d:e9:70:e0:2e:e8:2b:1d:43:bf:a6:
                    a6:b2:4e:f1:87:96:b8:c2:9d:7c:fc:7f:e9:ee:6b:
                    54:fc:0f:2c:94:21:6a:bf:b4:a6:14:77:26:0e:57:
                    b0:27:ab:f9:a9:27:97:55:6f:5a:89:ef:3d:3a:e1:
                    c7:75:65:57:90:d5:33:64:7d:d0:c8:b2:96:f1:84:
                    27:97:25:ee:51:ec:8c:be:63:cb:62:48:f7:b7:1e:
                    1f:c8:7a:67:0c:2b:7e:00:b9:c2:10:b5:e9:3d:0e:
                    25:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:54:62:03:BD:24:49:35:8D:D2:4F:79:54:14:30:6B:D5:AB:51:70
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7FRiA70kSTWN0k95VBQwa9WrUXA.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:bf:65:65:cd:c6:2d:c0:0b:33:75:45:98:0e:6f:d7:78:ca:
         51:37:8c:dc:83:d6:96:37:95:df:07:e2:35:62:8b:39:bd:c2:
         94:50:84:fb:7a:d1:1f:d4:6f:b8:42:56:dd:1b:19:f0:fb:60:
         f4:cd:43:80:07:db:cb:51:51:a6:35:ac:b2:42:35:f8:ed:ed:
         49:11:a9:84:67:bb:de:18:bd:b3:0b:a3:66:44:32:a1:1c:a4:
         14:ac:0d:bf:4d:a2:27:5c:22:6f:df:60:74:78:df:11:85:5d:
         c5:2d:fb:6a:83:b7:a4:16:0b:ee:0d:8c:2f:a2:a1:7e:13:64:
         59:b1:52:65:90:e3:66:21:96:18:aa:f7:a4:c6:75:30:db:34:
         6d:7d:77:e7:01:cb:de:73:7c:fe:fe:33:57:28:52:99:13:d0:
         38:4d:5d:4c:c0:c0:5b:0e:8b:0c:d3:73:b6:6b:be:20:5b:2b:
         da:80:64:ae:7c:fe:65:2e:a8:30:f0:f5:ea:db:36:ba:5f:40:
         f1:a7:2f:6f:fd:32:31:7f:16:3f:f1:ed:6e:33:49:d5:cf:8c:
         d0:b6:31:e7:dc:d3:95:3a:92:d5:fd:e8:85:27:92:10:9b:a6:
         35:fe:93:ad:25:b6:21:35:15:13:7a:f8:f4:1a:6c:fb:cb:c4:
         09:bb:cf:14
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDQw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEVDNTQ2MjAzQkQyNDQ5
MzU4REQyNEY3OTU0MTQzMDZCRDVBQjUxNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3WpPZEGEMDIaZnp8/nfaoOhUk2t6/RLhoOI+JWlR2Y0Rt3ZsB
z/DvpGzGvJgFc7iH6xB0ggT8TVF6pvPmbLDqRggcKXW/3nP6yIVCJqEpvBzEKlNy
sHQXF/gg0Dw5oHrZ7qyrhwV3edxtDo9TLJhWFm5fFYQ6JW/OBoGan5PFHgT/X1Y/
zihSg7sDKl7+sV4vB66eeozmZsYt6XDgLugrHUO/pqayTvGHlrjCnXz8f+nua1T8
DyyUIWq/tKYUdyYOV7Anq/mpJ5dVb1qJ7z064cd1ZVeQ1TNkfdDIspbxhCeXJe5R
7Iy+Y8tiSPe3Hh/IemcMK34AucIQtek9DiUPAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU7FRiA70kSTWN0k95VBQwa9WrUXAwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS83RlJpQTcwa1NUV04wazk1VkJRd2E5V3JVWEEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
ALe/ZWXNxi3ACzN1RZgOb9d4ylE3jNyD1pY3ld8H4jViizm9wpRQhPt60R/Ub7hC
Vt0bGfD7YPTNQ4AH28tRUaY1rLJCNfjt7UkRqYRnu94YvbMLo2ZEMqEcpBSsDb9N
oidcIm/fYHR43xGFXcUt+2qDt6QWC+4NjC+ioX4TZFmxUmWQ42Yhlhiq96TGdTDb
NG19d+cBy95zfP7+M1coUpkT0DhNXUzAwFsOiwzTc7ZrviBbK9qAZK58/mUuqDDw
9erbNrpfQPGnL2/9MjF/Fj/x7W4zSdXPjNC2Mefc05U6ktX96IUnkhCbpjX+k60l
tiE1FRN6+PQabPvLxAm7zxQ=
-----END CERTIFICATE-----