Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/83GExWvLAoJZbqNgG-1neHwx-9U.roa
File:                     83GExWvLAoJZbqNgG-1neHwx-9U.roa (raw, json)
Hash identifier:          QalQeDgDMLp/AY/w5xCCJOizuFDmAKhlUmLj2aIVLaA=
Subject key identifier:   F3:71:84:C5:6B:CB:02:82:59:6E:A3:60:1B:ED:67:78:7C:31:FB:D5
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       44E3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/83GExWvLAoJZbqNgG-1neHwx-9U.roa
Signing time:             Fri 18 Mar 2022 01:07:25 +0000
ROA not before:           Fri 18 Mar 2022 01:07:25 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17635 (0x44e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 18 01:07:25 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=F37184C56BCB0282596EA3601BED67787C31FBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:70:d7:10:38:00:b7:e1:6e:30:c9:4e:19:
                    88:4b:61:25:1d:4f:64:29:5e:b7:92:3e:de:c5:a1:
                    63:e1:89:a3:5c:46:8c:21:9c:d7:8f:19:bd:97:bd:
                    08:21:ca:26:61:8a:ec:8c:74:21:ab:aa:8c:3a:1d:
                    0f:c0:37:3b:6f:5b:38:9e:f2:dd:e7:a7:ae:7b:0c:
                    04:46:8a:64:1d:d9:29:e9:25:50:be:96:28:40:6c:
                    10:48:04:44:4c:9e:61:7a:20:2b:96:73:1a:9d:80:
                    68:52:a0:8c:d7:c0:ca:4d:ba:1c:56:45:41:70:92:
                    2c:75:b9:fb:d4:bf:3a:72:1c:9a:ed:24:1e:d1:bb:
                    5f:59:ec:66:08:71:90:b3:51:67:6c:a0:9e:09:a0:
                    b4:e4:b0:28:8a:52:1e:c6:1a:6f:16:54:16:95:65:
                    bf:64:10:9c:3b:2a:04:72:c9:8a:36:1f:94:ba:75:
                    90:0d:0b:1b:68:db:d9:39:26:7f:27:ac:7c:e4:2d:
                    59:fa:a3:d4:5f:5d:7f:e9:99:88:9b:45:d2:e5:6e:
                    f7:5a:32:f2:83:86:e5:59:f8:63:cb:0f:35:fe:5d:
                    ea:06:88:84:39:bd:4e:6e:91:07:e8:b9:9c:28:f7:
                    f6:98:3d:87:3b:77:f3:5e:18:4a:9d:17:1f:e9:7c:
                    b4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:71:84:C5:6B:CB:02:82:59:6E:A3:60:1B:ED:67:78:7C:31:FB:D5
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/83GExWvLAoJZbqNgG-1neHwx-9U.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e6:fc:5f:4a:84:2a:9e:48:5d:85:31:b5:b9:a3:ed:34:23:
         75:03:aa:da:10:eb:9f:2d:80:1d:ab:e9:5f:86:8f:c1:ca:8b:
         a4:8a:ba:21:85:41:02:a5:d8:e3:d8:c4:9e:ae:0f:99:5b:b8:
         d7:98:12:69:1d:9d:ae:13:52:fc:86:43:db:5e:c4:4d:c0:e9:
         84:9a:21:dd:17:45:f2:7a:9c:c2:bf:3d:f9:24:e4:41:02:62:
         db:a5:bb:5b:00:d6:72:8d:80:03:c6:b9:5b:1f:9f:1a:3d:c1:
         c0:86:12:f4:ea:b4:40:fe:ea:f9:7d:81:71:fa:64:b1:3b:a7:
         3f:35:3f:09:95:03:c3:06:16:0b:58:be:d9:2b:ac:bc:41:04:
         6a:db:f6:a8:a3:f8:bf:57:7b:ba:63:e9:92:d3:30:3e:95:b7:
         7d:26:f7:91:e8:6c:a6:af:cb:00:d4:67:67:28:6f:8c:0b:69:
         33:29:1b:a0:65:fa:8b:28:25:26:d2:2a:7c:f9:75:7a:bb:db:
         9a:a7:15:0b:02:dc:76:3d:b1:21:63:47:21:9b:35:52:44:98:
         16:0a:88:93:2f:cf:12:0b:c8:b6:d8:96:96:1c:51:a1:02:dd:
         2b:74:66:ca:e8:b7:e4:0e:72:8b:b1:23:e2:c8:f8:3b:7b:54:
         ff:cb:30:bf
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICROMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMTgw
MTA3MjVaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEYzNzE4NEM1NkJDQjAy
ODI1OTZFQTM2MDFCRUQ2Nzc4N0MzMUZCRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcnHDXEDgAt+FuMMlOGYhLYSUdT2QpXreSPt7FoWPhiaNcRowh
nNePGb2XvQghyiZhiuyMdCGrqow6HQ/ANztvWzie8t3np657DARGimQd2SnpJVC+
lihAbBBIBERMnmF6ICuWcxqdgGhSoIzXwMpNuhxWRUFwkix1ufvUvzpyHJrtJB7R
u19Z7GYIcZCzUWdsoJ4JoLTksCiKUh7GGm8WVBaVZb9kEJw7KgRyyYo2H5S6dZAN
Cxto29k5Jn8nrHzkLVn6o9RfXX/pmYibRdLlbvdaMvKDhuVZ+GPLDzX+XeoGiIQ5
vU5ukQfouZwo9/aYPYc7d/NeGEqdFx/pfLQ1AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU83GExWvLAoJZbqNgG+1neHwx+9UwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS84M0dFeFd2TEFvSlpicU5nRy0xbmVId3gtOVUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAYwDQYJKoZIhvcNAQELBQADggEB
AIrm/F9KhCqeSF2FMbW5o+00I3UDqtoQ658tgB2r6V+Gj8HKi6SKuiGFQQKl2OPY
xJ6uD5lbuNeYEmkdna4TUvyGQ9texE3A6YSaId0XRfJ6nMK/Pfkk5EECYtulu1sA
1nKNgAPGuVsfnxo9wcCGEvTqtED+6vl9gXH6ZLE7pz81PwmVA8MGFgtYvtkrrLxB
BGrb9qij+L9Xe7pj6ZLTMD6Vt30m95HobKavywDUZ2cob4wLaTMpG6Bl+osoJSbS
Knz5dXq725qnFQsC3HY9sSFjRyGbNVJEmBYKiJMvzxILyLbYlpYcUaEC3St0Zsro
t+QOcouxI+LI+Dt7VP/LML8=
-----END CERTIFICATE-----