Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/AkhT62VoYMb52B9WXTrrRf5ZyKk.roa
File:                     AkhT62VoYMb52B9WXTrrRf5ZyKk.roa (raw, json)
Hash identifier:          7us87zfFyELdekn6Vogrok9xFHVWwWn2y5NP+87+LpM=
Subject key identifier:   02:48:53:EB:65:68:60:C6:F9:D8:1F:56:5D:3A:EB:45:FE:59:C8:A9
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       45D8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AkhT62VoYMb52B9WXTrrRf5ZyKk.roa
Signing time:             Tue 05 Apr 2022 00:30:05 +0000
ROA not before:           Tue 05 Apr 2022 00:30:05 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17880 (0x45d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  5 00:30:05 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=024853EB656860C6F9D81F565D3AEB45FE59C8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:55:56:56:22:cb:1d:91:a3:de:35:5f:8b:
                    6c:05:f5:e1:48:bc:5d:0d:db:82:1e:43:94:26:d8:
                    4b:f8:32:de:28:7d:03:2d:79:9e:0e:df:ef:af:38:
                    2d:c3:d8:f9:18:79:3a:99:84:d0:dd:57:ca:1d:d2:
                    21:fb:43:c1:e0:5c:d0:51:1e:83:f7:d4:82:ae:06:
                    94:a5:ec:fe:ea:34:0b:e7:3b:4d:29:f2:48:a8:e0:
                    4b:b0:f5:60:a9:1c:1b:40:c3:6b:85:8c:14:96:cc:
                    77:e2:e8:c8:83:32:90:fb:4c:12:16:dd:7a:a8:a1:
                    a0:3e:2b:ec:db:93:8c:8f:d1:89:f1:ab:7f:42:e6:
                    8d:b6:b2:ec:5f:00:1f:ea:e3:f8:40:5c:3d:d3:68:
                    61:65:14:52:93:33:91:86:96:dd:fb:d0:04:a6:5e:
                    e4:0f:bb:35:5c:eb:65:67:75:a4:1d:45:cd:f4:0f:
                    0a:64:e2:6b:21:bc:11:bd:1a:f3:91:bd:d7:33:8c:
                    1a:d2:01:57:df:00:38:54:46:79:1e:c9:7c:59:bc:
                    9a:9b:21:74:6b:e4:b6:cc:9e:51:3c:8d:1c:14:a4:
                    0e:07:e9:71:2d:72:b0:b9:ca:f9:fb:01:b8:26:a4:
                    a3:49:42:9a:d8:d9:28:30:ed:a1:62:06:87:a8:31:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:48:53:EB:65:68:60:C6:F9:D8:1F:56:5D:3A:EB:45:FE:59:C8:A9
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AkhT62VoYMb52B9WXTrrRf5ZyKk.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:98:32:17:36:d8:b5:79:72:76:6b:d1:51:b5:11:a2:ff:07:
         f3:cb:60:1e:92:c2:97:ef:2c:9c:ba:30:1a:5c:55:b3:22:2e:
         7b:46:08:7c:7e:86:1c:39:5e:11:89:c1:15:53:72:97:77:ae:
         0c:80:fe:5d:56:d7:15:ca:a0:16:6c:fb:e3:d4:95:67:f4:1c:
         17:d8:69:b3:18:4d:a2:97:3a:9a:3f:51:2b:66:f2:fa:9f:95:
         15:38:b7:39:bf:77:ad:fa:0b:fe:91:37:c5:8c:6f:9b:c9:60:
         19:26:50:55:49:bf:6a:c1:e2:a2:2f:10:7d:9d:64:c8:79:23:
         81:0b:e7:17:42:38:7c:09:5c:64:b5:8e:03:17:ca:99:f1:fc:
         f0:05:cb:03:79:42:f5:48:40:e6:28:94:97:ac:c8:24:f1:c7:
         a1:e4:bf:c3:22:81:8e:8b:ad:80:b0:c2:54:1f:95:da:f9:c0:
         b1:0b:ee:0c:15:58:71:86:fa:ae:22:4d:59:c2:ef:c0:4a:6e:
         cf:62:76:57:82:36:28:6a:e8:47:2b:86:47:69:13:dd:3d:56:
         c1:2d:d5:90:0f:7b:2c:eb:bb:94:9b:bc:4f:8d:05:13:b7:39:
         7a:91:c1:6e:46:ae:f3:34:d9:5e:0e:ad:1e:62:4a:f8:e6:e2:
         d1:ec:2b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----