Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GUaPU51iaQ7PN6VPt8GEZzwzEWY.roa
File:                     GUaPU51iaQ7PN6VPt8GEZzwzEWY.roa (raw, json)
Hash identifier:          qOI1NfYOMxL+461sOuxNYe4bdA8Zqtk7AZ0fDw6bcFI=
Subject key identifier:   19:46:8F:53:9D:62:69:0E:CF:37:A5:4F:B7:C1:84:67:3C:33:11:66
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42E1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GUaPU51iaQ7PN6VPt8GEZzwzEWY.roa
Signing time:             Wed 09 Feb 2022 00:30:07 +0000
ROA not before:           Wed 09 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17121 (0x42e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  9 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=19468F539D62690ECF37A54FB7C184673C331166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:5d:77:6e:51:83:0d:c2:14:5a:ca:30:17:
                    01:13:24:31:3a:23:49:d5:94:a8:dd:ef:4d:bb:75:
                    2d:2a:36:29:81:6d:28:fe:24:9d:32:19:56:6a:43:
                    ed:57:a6:fd:33:1e:5a:cb:68:ad:ba:f5:15:d7:46:
                    28:23:de:bd:e5:40:b8:e3:02:55:df:ec:53:9b:28:
                    c5:c5:86:9e:27:93:25:8e:7f:a6:3b:da:54:3d:3a:
                    f7:0f:b3:2a:63:20:f2:08:53:a9:fe:fc:05:54:47:
                    e3:29:c8:19:9c:10:cb:cd:77:c4:1b:da:7e:f7:82:
                    27:1c:1f:22:94:5d:84:55:83:d5:0a:04:90:30:51:
                    29:53:47:ed:fc:b8:d3:86:b1:5a:af:cb:fc:04:52:
                    e2:9f:4f:c6:90:22:c4:17:b3:2a:46:56:67:a3:c4:
                    99:8c:59:02:da:22:91:f9:70:b2:f4:9b:f2:af:b4:
                    cb:4b:e8:20:7d:9a:b9:81:6e:32:2a:70:86:f7:e1:
                    69:e4:2d:e5:fe:05:10:a7:db:3c:cb:3e:58:b6:1a:
                    f0:f5:24:93:9a:52:5a:e1:7c:00:09:81:3b:83:73:
                    75:cc:c0:41:99:47:00:de:16:9d:a1:3e:c3:7a:61:
                    c7:25:d2:80:82:4e:ed:a3:7c:17:49:6e:8a:cd:93:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:46:8F:53:9D:62:69:0E:CF:37:A5:4F:B7:C1:84:67:3C:33:11:66
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GUaPU51iaQ7PN6VPt8GEZzwzEWY.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:1b:f7:18:78:63:82:9a:d9:40:a5:43:a8:70:e9:85:38:f5:
         be:23:f0:fa:f2:9b:95:bf:1c:94:1d:31:4b:58:9b:02:dd:76:
         47:55:30:fa:ae:40:2a:39:a0:96:ca:11:da:8b:08:4b:0c:32:
         00:3a:f3:1e:13:be:63:09:06:c5:e8:c3:66:8a:fe:92:59:34:
         6c:ac:8e:85:dd:2f:fd:0a:d4:df:46:71:42:80:fa:ea:ad:ca:
         88:86:f6:0b:c0:a8:6d:a9:1c:0f:1b:81:41:d0:ba:50:44:39:
         03:5c:8a:eb:72:f4:2b:f5:25:f8:d6:fa:d4:aa:55:13:39:aa:
         ce:99:0f:9f:50:35:7b:59:c5:6a:30:6b:6e:65:f1:dd:bc:5a:
         38:96:2c:5d:9e:23:23:e8:1a:04:0f:be:a5:4a:03:cc:96:13:
         97:a1:05:4b:f7:58:bf:70:9d:1e:71:3a:fe:f6:90:78:d9:a9:
         55:6c:80:39:95:18:24:26:30:38:df:13:bf:05:8a:3d:cc:12:
         e5:2b:e3:cf:fa:37:86:61:e1:52:91:32:a6:ab:ec:39:74:d4:
         58:f0:e1:1f:c7:c6:8d:b3:cc:b9:b7:34:08:3f:da:28:6d:bb:
         48:cc:74:40:f3:e0:98:d6:d7:14:b2:96:60:69:20:44:7a:a0:
         06:ea:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----