Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/B9Tv2OUEw93Qn0mfbIBzDYcwKUo.roa
File:                     B9Tv2OUEw93Qn0mfbIBzDYcwKUo.roa (raw, json)
Hash identifier:          SyK/HdBhuMCfZvQ8p05HVJ8EG9GPS6OR2GXwTn38AlM=
Subject key identifier:   07:D4:EF:D8:E5:04:C3:DD:D0:9F:49:9F:6C:80:73:0D:87:30:29:4A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       442E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/B9Tv2OUEw93Qn0mfbIBzDYcwKUo.roa
Signing time:             Sat 05 Mar 2022 00:30:09 +0000
ROA not before:           Sat 05 Mar 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17454 (0x442e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar  5 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=07D4EFD8E504C3DDD09F499F6C80730D8730294A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:a2:dc:08:00:b1:6e:b1:01:a9:52:27:9b:
                    83:10:1e:fa:95:28:c5:91:4f:92:40:f6:1d:69:c6:
                    84:8b:24:3e:c8:b9:9d:bb:45:d2:ce:17:2a:c2:f0:
                    b9:36:44:9b:0b:1d:4c:72:a4:44:0c:af:4e:a8:72:
                    52:03:50:2a:a8:ed:00:e2:56:2f:7b:15:d5:fc:92:
                    3b:3b:31:a9:7d:cd:a3:62:b4:2b:e7:af:0c:a3:a4:
                    c3:b5:4a:e2:67:a2:c2:22:4c:48:90:f2:92:28:2d:
                    b9:01:41:55:e1:7f:85:bf:64:01:ff:14:58:b2:c1:
                    aa:04:cd:26:2c:71:39:a6:7c:66:0f:29:5e:17:7a:
                    52:85:d6:df:c8:4e:aa:59:22:88:1c:7e:ff:4c:96:
                    e2:13:4e:47:d6:c6:4b:4d:de:9b:d2:48:1c:db:89:
                    09:d6:e0:c6:9a:c1:0f:e0:d2:67:29:a2:b5:cb:eb:
                    44:1d:bb:ce:ff:93:ea:82:72:ea:77:f3:e2:48:bc:
                    30:b0:f0:78:2d:fc:18:29:9c:a2:f9:8c:29:a2:48:
                    8d:4c:2f:f6:7c:6e:15:58:83:bc:78:42:21:dc:2e:
                    0a:37:60:66:71:5f:5f:ae:0e:2d:b8:3d:cf:74:07:
                    b9:eb:5d:9b:6e:d8:ad:71:08:9a:27:30:fc:a8:e8:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D4:EF:D8:E5:04:C3:DD:D0:9F:49:9F:6C:80:73:0D:87:30:29:4A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/B9Tv2OUEw93Qn0mfbIBzDYcwKUo.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:cc:9a:87:60:52:cf:8e:c4:0a:e8:a1:1f:a1:0b:89:37:e5:
         31:84:63:9d:4c:23:c5:d6:e9:8e:22:ac:73:df:e8:93:b9:72:
         37:7b:89:f4:8b:11:2b:95:6c:0f:9e:f0:42:9f:eb:5a:02:08:
         4a:f2:2f:aa:37:d3:6a:08:d6:13:bb:a6:68:f4:f2:1d:98:30:
         80:95:e1:72:ba:10:af:7a:5f:96:4c:a6:e9:1e:0a:18:d7:cc:
         d1:4b:c1:4a:93:c6:84:aa:24:d9:57:10:eb:d3:10:d5:39:c5:
         fa:56:ca:35:dc:ed:ae:4f:1f:65:13:ce:2f:42:39:d2:77:33:
         6a:ae:c7:a2:0e:d6:a7:8d:d0:02:fc:ec:fc:63:f2:cb:d9:e5:
         4c:84:60:0a:78:57:9b:d0:76:ee:ca:c2:d8:17:61:5c:99:8c:
         1f:fa:a2:ed:2c:97:d0:71:50:13:87:d6:00:58:8c:1a:67:86:
         8d:61:3d:17:f6:b3:d9:7b:dc:d4:1b:f6:f2:63:ae:a5:4a:c0:
         b0:a8:61:4b:bf:ac:7d:46:5b:76:5e:5f:14:64:05:d6:90:9b:
         f2:30:fc:1b:90:91:56:58:82:d4:41:58:6c:19:dd:c2:a9:91:
         36:96:63:83:c0:f9:b7:13:8d:66:59:d6:aa:33:c0:60:1d:71:
         fa:ea:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----