Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/G7juDHPal-Rv9zVWzesTQx0w-xM.roa
File:                     G7juDHPal-Rv9zVWzesTQx0w-xM.roa (raw, json)
Hash identifier:          vexg6nlQEUs43lGf0Brlu4FA/Ipf2Hq41hcMq8y9s3o=
Subject key identifier:   1B:B8:EE:0C:73:DA:97:E4:6F:F7:35:56:CD:EB:13:43:1D:30:FB:13
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4615
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/G7juDHPal-Rv9zVWzesTQx0w-xM.roa
Signing time:             Sat 09 Apr 2022 00:30:11 +0000
ROA not before:           Sat 09 Apr 2022 00:30:11 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17941 (0x4615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  9 00:30:11 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=1BB8EE0C73DA97E46FF73556CDEB13431D30FB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:37:61:33:bf:4f:2c:06:ac:b2:f4:fa:37:
                    85:69:17:1a:4a:2e:de:f4:b4:3f:2e:ce:a7:cc:2a:
                    f2:33:c4:95:3e:16:25:e3:66:c0:64:72:a8:cc:a3:
                    3d:62:68:0f:a6:e9:0e:a0:2e:27:b8:79:53:17:67:
                    28:85:84:28:26:5c:fa:63:08:f0:35:c2:b9:f9:4e:
                    1e:bf:88:12:dc:cd:f0:a7:f8:c9:32:6b:5f:e1:99:
                    3c:0c:91:1e:5c:f3:2f:73:d5:a4:39:44:15:a8:47:
                    49:86:11:8e:7c:d9:2f:de:cd:c5:11:4b:ca:26:fa:
                    2f:f3:0a:0b:84:c5:74:34:11:c1:0b:db:91:c3:41:
                    0b:c4:50:ec:ed:c7:0a:f2:a5:1c:66:f2:26:61:45:
                    7d:76:53:96:b6:8a:79:99:ef:67:d4:34:78:fb:fb:
                    82:5d:e3:42:66:34:08:e5:ff:a2:30:c1:09:58:2c:
                    dd:ce:f8:dc:e6:bb:56:8f:43:ee:e0:1d:7e:86:7d:
                    9b:d9:0f:c7:8f:f9:ec:dd:53:59:b4:53:fa:93:1b:
                    94:d8:86:1d:41:89:ef:7f:63:7d:57:84:cd:07:a8:
                    65:ef:d9:db:24:65:d6:b3:eb:6a:e4:c9:d4:95:00:
                    4c:27:e6:02:8a:60:63:96:22:65:ee:a7:8a:f1:59:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B8:EE:0C:73:DA:97:E4:6F:F7:35:56:CD:EB:13:43:1D:30:FB:13
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/G7juDHPal-Rv9zVWzesTQx0w-xM.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:93:5d:72:5d:58:be:81:ce:d7:8f:6e:11:ba:06:07:94:10:
         5c:58:e5:35:ca:c9:eb:a6:26:2c:45:cf:bc:32:70:29:de:de:
         b9:ac:fb:4d:64:bf:07:7f:40:93:dd:bd:a2:05:c2:f9:e4:87:
         eb:2e:4f:a7:4e:31:39:b1:7d:d9:91:3b:88:45:b3:d6:80:42:
         12:d9:6e:ff:3e:59:8e:f7:1d:34:36:75:5e:7e:b7:67:16:ad:
         af:de:fd:3e:cb:40:48:f6:5d:5e:39:35:62:16:4b:ce:63:38:
         3f:04:6a:32:76:10:b0:65:78:af:93:62:96:a6:94:88:c7:7e:
         41:14:8f:fb:a6:bc:8d:64:07:28:85:1d:f4:1e:85:c1:92:ea:
         23:5f:e0:06:35:a2:a0:16:47:46:e3:ab:51:f7:f5:3e:33:02:
         d4:a2:b0:11:b8:7c:d1:cd:1f:9e:84:d4:13:cc:e8:1a:df:02:
         40:70:7b:b8:07:5b:32:86:e9:85:cd:47:84:f0:c3:60:12:64:
         f3:d2:6f:1a:16:b7:71:55:55:2a:30:95:a3:0a:46:f0:8d:75:
         33:ce:ae:2d:21:c3:cd:5e:0d:0f:52:40:51:98:6f:50:16:35:
         4f:0c:88:ac:23:89:0b:1a:da:c2:66:5e:a0:20:f4:4b:21:65:
         ba:0b:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----