Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Fam3Za1qqs5FaDzI3XfV7m1lqns.roa
File:                     Fam3Za1qqs5FaDzI3XfV7m1lqns.roa (raw, json)
Hash identifier:          xeEG/h5XqmHdwHsObdZ8SMYb8q5dOUD2Xn27KRg56iQ=
Subject key identifier:   15:A9:B7:65:AD:6A:AA:CE:45:68:3C:C8:DD:77:D5:EE:6D:65:AA:7B
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       490E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Fam3Za1qqs5FaDzI3XfV7m1lqns.roa
Signing time:             Wed 01 Jun 2022 00:30:13 +0000
ROA not before:           Wed 01 Jun 2022 00:30:13 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18702 (0x490e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  1 00:30:13 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=15A9B765AD6AAACE45683CC8DD77D5EE6D65AA7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:4f:e4:cc:87:38:1b:ee:49:42:eb:9c:10:
                    92:a6:ac:9a:b2:c8:b5:24:e6:fc:c9:88:24:c0:ad:
                    df:1b:62:c0:f6:5b:2a:1c:7f:1e:be:59:31:e5:8c:
                    21:fb:34:c2:51:8f:f7:8a:ce:fb:09:6d:85:3c:1f:
                    e4:0f:bf:8c:08:59:58:a3:7d:36:e0:98:c1:9e:69:
                    11:4a:e5:19:b2:a7:13:26:d7:eb:d6:2e:3d:29:a7:
                    e1:e9:5b:2c:d0:6c:be:10:b3:6c:e6:9b:69:8d:6c:
                    2b:eb:d2:1f:d7:3b:6d:65:04:aa:40:27:7f:b7:31:
                    bc:55:86:44:04:de:b3:28:c3:74:0f:a9:e3:d3:a9:
                    e2:7e:4e:a3:e0:a8:68:7a:e1:6d:a0:bc:74:d4:2e:
                    4b:08:d2:33:42:d1:44:6a:32:5b:ad:e4:fd:69:f2:
                    75:2d:dc:1b:d7:93:de:82:0f:06:ff:9f:75:1b:df:
                    29:f0:09:18:06:fe:d0:7a:68:29:f8:30:88:11:42:
                    b3:f5:7e:09:8a:24:16:e7:6a:a0:7f:cc:fe:7f:b9:
                    b2:db:ab:e6:53:e7:5b:37:fe:60:5f:58:dc:bc:e5:
                    b0:05:77:2b:11:b8:d3:7f:05:39:78:cb:85:48:03:
                    51:34:02:66:81:8f:9c:69:3b:93:4d:fd:4a:27:ff:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A9:B7:65:AD:6A:AA:CE:45:68:3C:C8:DD:77:D5:EE:6D:65:AA:7B
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Fam3Za1qqs5FaDzI3XfV7m1lqns.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:3e:0b:62:cf:32:e7:40:7a:3e:a4:48:1f:8f:85:37:0a:
         aa:c0:e4:cf:d0:9e:d5:3d:d9:c8:c3:89:56:12:16:b0:dd:4e:
         05:d8:e7:25:72:f9:05:5d:cb:9d:53:cb:05:98:0e:57:db:5c:
         aa:95:5c:79:3d:9e:6c:16:68:7e:f1:34:fd:81:06:4a:fd:0a:
         76:ee:55:b3:2c:4e:c5:4b:59:d4:ed:68:08:77:70:2f:dc:04:
         ef:3a:90:32:57:f4:c5:95:77:b6:2b:9a:6c:4b:e2:7c:3d:81:
         00:b8:93:db:61:ad:ad:a5:27:3a:fc:b0:95:f2:95:ea:d1:5e:
         a8:f1:e4:5a:6c:c4:53:5e:0e:ff:38:7f:53:49:8b:cb:dd:56:
         01:c7:45:11:af:bd:16:3e:4f:d7:11:9d:68:66:06:16:c3:e9:
         4c:4c:0e:76:69:fc:0b:5e:1e:97:da:ad:fc:46:e5:9e:54:fe:
         a4:bd:96:47:63:16:6a:ed:9e:bd:39:2e:d4:ea:21:21:ab:ee:
         5f:ae:7c:e7:fb:68:d9:54:e7:30:6e:21:18:bb:5a:56:4f:2d:
         9e:1f:f6:47:e0:9e:80:77:a2:2a:9e:ac:26:35:ae:47:79:1a:
         66:4d:98:d3:37:27:9b:f5:df:b5:00:59:02:53:19:80:b5:97:
         80:24:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----