Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7UBPvPkckv1BqCsUcdep9Q16K0E.roa
File:                     7UBPvPkckv1BqCsUcdep9Q16K0E.roa (raw, json)
Hash identifier:          JZQHVbvL+hav41CWvYwCpx+ETJdJlVz7ulZJJHziHs4=
Subject key identifier:   ED:40:4F:BC:F9:1C:92:FD:41:A8:2B:14:71:D7:A9:F5:0D:7A:2B:41
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4855
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7UBPvPkckv1BqCsUcdep9Q16K0E.roa
Signing time:             Fri 20 May 2022 00:30:10 +0000
ROA not before:           Fri 20 May 2022 00:30:10 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18517 (0x4855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 20 00:30:10 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=ED404FBCF91C92FD41A82B1471D7A9F50D7A2B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:41:2e:55:64:77:aa:3b:fc:f0:a7:6c:dc:
                    cb:0b:ec:33:b8:90:a3:19:e7:c1:e4:dd:df:84:aa:
                    72:b4:c9:77:6e:0a:0b:b7:8a:2b:5c:47:7a:d1:12:
                    17:87:dd:ff:05:da:89:d0:44:de:dd:5c:62:0e:97:
                    5a:e6:fc:fb:13:61:f8:05:b2:3b:3a:4b:ec:29:5a:
                    a9:2f:3f:b2:ef:f7:9a:b1:7b:b2:f8:08:90:8b:08:
                    73:3d:b6:ad:7c:54:65:f0:73:d1:46:94:ca:6d:94:
                    ea:67:cc:65:16:39:0e:9d:db:70:d0:d9:f3:b8:75:
                    09:6b:6e:5c:10:10:f8:4e:13:90:43:60:ff:f1:c3:
                    de:50:9c:e6:7a:b6:78:8a:7e:16:29:81:2d:41:b3:
                    3b:a4:83:4a:d3:69:11:f3:cf:f4:56:00:f3:de:b8:
                    a3:d5:a9:dc:35:80:47:18:20:56:ad:70:d6:11:7a:
                    ca:91:8c:cc:c0:ea:c6:5e:7a:01:ce:76:4d:87:6f:
                    da:d5:31:63:9e:9a:89:40:71:a0:00:31:d1:2e:7a:
                    52:a2:bb:8f:19:91:e3:20:fb:2e:1f:63:86:59:fa:
                    65:e7:16:13:26:a5:d8:59:22:42:2f:52:61:e7:64:
                    85:b1:d5:25:b8:4e:6a:f9:77:ef:fe:e1:88:61:3f:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:40:4F:BC:F9:1C:92:FD:41:A8:2B:14:71:D7:A9:F5:0D:7A:2B:41
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7UBPvPkckv1BqCsUcdep9Q16K0E.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:fc:36:0c:4f:4b:46:21:e4:31:ed:39:aa:cf:e6:45:ac:aa:
         99:f9:c5:e1:78:3c:26:f9:9c:49:b1:25:12:3a:b5:0d:c5:8e:
         ab:b1:0d:2c:ab:49:fd:f4:05:ff:0b:b7:db:11:f4:ad:b5:77:
         77:0d:89:98:4c:dc:f0:2c:47:5b:96:ee:f0:7c:d7:07:b2:e4:
         da:b2:6f:a7:e2:2b:07:66:bb:a5:7e:92:ed:06:e6:47:78:32:
         fc:46:b1:b0:d0:62:53:c5:51:f2:0a:58:0d:5a:79:67:e9:11:
         74:33:93:69:67:35:26:db:2f:e3:9a:35:62:c4:59:e4:96:e9:
         16:20:9a:dd:03:59:a0:c2:e8:08:2a:a2:9a:c9:a7:d7:a8:79:
         7b:0f:89:9b:e1:f0:02:87:fd:b7:2b:2f:95:04:bb:2b:52:b8:
         3a:b0:f5:06:01:f3:3e:29:98:ce:e8:e8:18:e4:98:41:98:17:
         83:4d:8e:e3:37:23:f7:41:da:a6:f8:bd:12:37:a1:40:a4:e7:
         d5:9c:28:5c:c0:db:49:42:42:8a:5c:87:b6:08:85:5a:47:fc:
         ff:23:27:a9:80:fa:d5:09:09:88:c9:2c:65:c3:b5:69:64:79:
         4b:3b:26:e4:a8:23:82:91:3d:27:8c:99:18:20:44:f0:4a:04:
         4e:fb:4b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----