Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/7dxTXueGWUmzV5RO62ggNkaTsdM.roa
File:                     7dxTXueGWUmzV5RO62ggNkaTsdM.roa (raw, json)
Hash identifier:          Xbpjd7ZKf24TG7EEAs6BvllcOK7yCrCo7Lu4EhVihAM=
Subject key identifier:   ED:DC:53:5E:E7:86:59:49:B3:57:94:4E:EB:68:20:36:46:93:B1:D3
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       44EA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7dxTXueGWUmzV5RO62ggNkaTsdM.roa
Signing time:             Sat 19 Mar 2022 00:30:06 +0000
ROA not before:           Sat 19 Mar 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17642 (0x44ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 19 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=EDDC535EE7865949B357944EEB6820364693B1D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:07:51:62:1d:7c:1c:6c:5d:b7:94:c6:ad:
                    2e:17:63:c6:02:79:c0:3c:f2:99:12:79:88:31:9e:
                    a5:e7:25:76:e9:57:1e:1b:60:a1:d0:e9:66:1f:c5:
                    36:94:75:e9:f0:f3:9a:e2:fa:91:5e:9c:0d:14:06:
                    aa:12:c7:c0:81:17:6a:18:de:2c:48:6d:2e:ab:a4:
                    0d:0f:82:b3:d9:b4:f3:40:f0:f5:50:c5:fa:e9:f9:
                    48:fd:e1:80:c2:4b:e3:b6:28:18:d2:46:4a:a8:1f:
                    29:49:4b:f1:06:32:1f:ef:ba:14:b0:92:38:a1:f6:
                    56:37:6b:7a:e7:63:84:2a:7b:a6:3b:a0:55:9b:76:
                    8a:80:6d:ba:c9:b3:e6:9b:6d:6e:dc:e9:e6:dd:33:
                    83:0e:93:fd:4c:a8:7d:73:75:84:23:af:5d:6f:a8:
                    a6:8f:4d:c8:da:0f:37:bb:81:23:ca:01:26:fa:d2:
                    9f:27:75:ce:c2:2e:9d:2e:3b:19:79:8e:7d:e2:e7:
                    61:cf:57:dd:16:95:bb:0d:80:9d:78:d5:70:02:30:
                    d4:33:79:ca:e2:05:ab:f4:cd:c6:39:ac:a2:c8:98:
                    cd:6d:27:f9:84:9a:94:1d:84:00:ba:bd:ff:1b:24:
                    e9:23:8a:cc:3a:42:2b:c0:a6:eb:a3:c3:2f:cd:a7:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:53:5E:E7:86:59:49:B3:57:94:4E:EB:68:20:36:46:93:B1:D3
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/7dxTXueGWUmzV5RO62ggNkaTsdM.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:59:e7:77:c1:2c:60:b9:a4:20:01:ee:54:b5:13:cb:2c:d3:
         38:4e:12:2d:69:41:b8:35:3c:71:44:21:a4:2e:98:1a:34:6d:
         2c:69:22:d0:f3:d9:4f:da:1d:d8:2d:7d:69:fe:90:12:e5:de:
         0d:29:02:31:c1:92:64:cb:fa:77:df:59:3e:e0:0b:03:48:e0:
         f4:fa:b9:b7:96:6e:87:ae:84:38:1b:0a:f7:67:5d:88:85:0c:
         4b:d8:d0:42:37:0b:4e:9a:c9:89:b5:6d:50:8b:78:ad:6d:da:
         59:23:43:36:f5:72:29:bf:f2:9c:e0:26:bd:ae:8a:5a:4b:03:
         7e:6b:d1:e7:ee:2c:0c:a3:7b:d5:7f:5a:2b:04:9e:7b:7d:bd:
         9a:a3:53:ad:94:f6:ac:6d:a0:91:bd:50:81:27:b2:0a:4f:2f:
         8c:47:71:42:f0:7b:93:84:81:55:52:88:4e:96:71:ac:c6:84:
         a4:03:aa:cd:17:0c:e0:10:4c:9a:16:d6:47:6c:0f:ce:8e:f3:
         bc:f4:69:6c:33:57:4a:58:a3:83:b4:19:52:c5:8e:a6:25:0e:
         53:38:3f:2e:10:97:03:91:d9:cf:b1:6f:ad:fc:b9:68:3b:62:
         38:8c:d9:d0:a8:1a:af:66:c9:74:27:c4:20:57:2e:a0:84:b7:
         35:7f:d2:5e
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICROowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMTkw
MDMwMDZaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEVEREM1MzVFRTc4NjU5
NDlCMzU3OTQ0RUVCNjgyMDM2NDY5M0IxRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4DwdRYh18HGxdt5TGrS4XY8YCecA88pkSeYgxnqXnJXbpVx4b
YKHQ6WYfxTaUdenw85ri+pFenA0UBqoSx8CBF2oY3ixIbS6rpA0PgrPZtPNA8PVQ
xfrp+Uj94YDCS+O2KBjSRkqoHylJS/EGMh/vuhSwkjih9lY3a3rnY4Qqe6Y7oFWb
doqAbbrJs+abbW7c6ebdM4MOk/1MqH1zdYQjr11vqKaPTcjaDze7gSPKASb60p8n
dc7CLp0uOxl5jn3i52HPV90WlbsNgJ141XACMNQzecriBav0zcY5rKLImM1tJ/mE
mpQdhAC6vf8bJOkjisw6QivApuujwy/NpzhxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU7dxTXueGWUmzV5RO62ggNkaTsdMwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS83ZHhUWHVlR1dVbXpWNVJPNjJnZ05rYVRzZE0ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
ADJZ53fBLGC5pCAB7lS1E8ss0zhOEi1pQbg1PHFEIaQumBo0bSxpItDz2U/aHdgt
fWn+kBLl3g0pAjHBkmTL+nffWT7gCwNI4PT6ubeWboeuhDgbCvdnXYiFDEvY0EI3
C06ayYm1bVCLeK1t2lkjQzb1cim/8pzgJr2uilpLA35r0efuLAyje9V/WisEnnt9
vZqjU62U9qxtoJG9UIEnsgpPL4xHcULwe5OEgVVSiE6WcazGhKQDqs0XDOAQTJoW
1kdsD86O87z0aWwzV0pYo4O0GVLFjqYlDlM4Py4QlwOR2c+xb638uWg7YjiM2dCo
Gq9myXQnxCBXLqCEtzV/0l4=
-----END CERTIFICATE-----