Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/8mHEqeASm2z9DoHq40FtYHrmf4A.roa
File:                     8mHEqeASm2z9DoHq40FtYHrmf4A.roa (raw, json)
Hash identifier:          IkJ5StqwqjeI1xNNgjWNvdijdq3bFhJSybFcDOdlcNM=
Subject key identifier:   F2:61:C4:A9:E0:12:9B:6C:FD:0E:81:EA:E3:41:6D:60:7A:E6:7F:80
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       45CA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/8mHEqeASm2z9DoHq40FtYHrmf4A.roa
Signing time:             Mon 04 Apr 2022 00:30:05 +0000
ROA not before:           Mon 04 Apr 2022 00:30:05 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17866 (0x45ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  4 00:30:05 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=F261C4A9E0129B6CFD0E81EAE3416D607AE67F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:33:6b:62:42:b7:df:25:b0:dc:88:d4:04:
                    a5:42:d9:9f:44:a5:cf:ac:b0:35:5c:06:65:f0:da:
                    c0:50:68:b6:aa:84:c2:5e:11:a7:f0:64:b9:74:7f:
                    7f:0f:ee:fc:26:cb:2f:27:76:ea:e5:3c:0a:9e:bd:
                    23:1a:6b:5b:55:3e:0f:eb:b3:45:db:1f:d0:be:96:
                    00:4c:5a:46:1a:65:79:74:a4:39:e4:e5:1c:48:9d:
                    f7:49:21:34:17:a8:13:32:26:6d:8c:d7:cb:ae:d4:
                    c4:24:da:67:56:0d:8a:0f:b4:d0:c5:28:19:44:f9:
                    52:48:33:40:3d:29:a1:92:fe:e5:85:2c:23:08:eb:
                    bb:bd:d8:83:89:7b:8e:f4:b0:77:ff:4a:9d:fc:ea:
                    9b:d6:e7:d2:65:35:fb:a3:f4:b1:10:a6:de:6c:d6:
                    7c:a0:8f:6b:11:2d:70:e8:dc:4d:16:90:8e:55:42:
                    69:f5:ef:d0:10:71:3a:6d:f8:43:53:ff:74:5a:b2:
                    da:de:69:21:f9:1c:81:6d:de:b9:98:91:09:2d:4f:
                    d1:8e:a4:cc:c1:85:e5:7d:77:96:e9:ec:d6:6c:fa:
                    ac:b3:e1:68:82:0f:19:83:36:45:bf:f1:23:62:37:
                    95:85:12:c6:0c:77:48:07:0e:7a:08:74:b1:1f:66:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:61:C4:A9:E0:12:9B:6C:FD:0E:81:EA:E3:41:6D:60:7A:E6:7F:80
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/8mHEqeASm2z9DoHq40FtYHrmf4A.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:15:cd:25:43:b2:f2:c6:f3:c7:2f:69:92:47:09:79:ba:fd:
         55:80:0f:87:bf:eb:39:21:88:23:ee:e4:69:08:ef:9f:26:69:
         8b:2e:64:a4:5c:bd:b4:bf:88:49:56:81:37:55:ff:62:63:ee:
         14:89:13:5b:0c:ce:47:46:51:5b:23:e8:69:91:65:9c:5d:ba:
         7a:4b:3e:57:d2:af:5b:4b:ea:8f:06:a7:29:84:51:30:69:3c:
         c4:10:04:a4:dd:d6:71:f7:c7:eb:75:12:c2:da:25:fa:ca:79:
         ed:df:8c:68:c8:2a:fc:94:fd:8e:91:fb:dc:e9:72:c8:17:00:
         ca:5e:23:37:72:e3:d4:c4:a7:93:c8:da:15:8a:8b:bc:a1:95:
         7a:d8:c5:87:e0:40:9b:38:e2:1d:30:14:66:d7:e8:4f:50:88:
         58:1d:d0:56:e5:73:0f:fb:a3:a2:72:83:1e:af:04:d5:9b:61:
         c6:04:35:ce:4b:63:62:d1:7f:f7:43:a1:55:56:d0:cd:a8:b2:
         2f:80:79:0c:7d:69:e7:aa:83:58:8e:97:ce:8d:7e:6a:5e:91:
         55:38:37:d9:da:92:96:d2:66:19:60:40:e4:a9:73:2c:1a:a8:
         30:10:4d:66:aa:34:75:37:4a:a3:70:03:1c:27:4b:58:e8:e4:
         33:79:d3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----