Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GoHf0jJxh5zVqd0IVvCJupcXTRM.roa
File:                     GoHf0jJxh5zVqd0IVvCJupcXTRM.roa (raw, json)
Hash identifier:          2+7/7beM1z9ES4AVBLp6D6KcGa6W/2dARGK7SRCltDM=
Subject key identifier:   1A:81:DF:D2:32:71:87:9C:D5:A9:DD:08:56:F0:89:BA:97:17:4D:13
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       44CF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GoHf0jJxh5zVqd0IVvCJupcXTRM.roa
Signing time:             Thu 17 Mar 2022 00:30:10 +0000
ROA not before:           Thu 17 Mar 2022 00:30:10 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17615 (0x44cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 17 00:30:10 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=1A81DFD23271879CD5A9DD0856F089BA97174D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:6c:9b:7d:4d:7f:5e:53:7c:2f:70:65:7f:
                    ea:29:73:6a:d8:36:1b:03:ac:6b:51:a6:57:1c:11:
                    ad:b5:e5:9f:3d:45:f4:cd:33:3b:af:7b:9b:04:7b:
                    29:87:af:c5:82:cd:41:61:64:49:ea:c3:aa:8f:60:
                    ab:8c:4a:05:7c:18:8a:78:ec:96:14:d4:3b:aa:98:
                    52:bd:79:51:fa:54:63:19:70:fa:c6:58:1c:9e:3b:
                    bb:65:bc:31:b8:2c:f8:8e:7f:dd:e5:c4:b5:be:a5:
                    ac:af:81:31:2c:b3:41:b7:49:0d:17:74:a5:96:ce:
                    46:9a:53:48:84:b1:d8:2d:45:a2:5a:4b:35:16:20:
                    e4:d2:07:8b:4a:75:14:5d:c7:b8:5a:1c:d9:8e:0d:
                    bf:2e:bf:38:69:60:e0:a8:52:da:f5:e6:a0:81:8e:
                    c8:b3:87:ff:ff:57:ae:6d:f6:6d:72:8c:d6:ed:d6:
                    94:f2:3d:f4:09:00:ea:e7:e5:66:9c:35:35:9e:c4:
                    5f:8d:19:3e:2d:8e:6b:06:1a:23:7a:1d:6f:25:16:
                    9d:42:a5:6f:57:bb:54:d3:b3:1b:11:d0:df:52:65:
                    03:6c:f3:51:29:4a:4a:8f:6a:3f:26:2f:53:4b:d6:
                    5d:ed:2c:b2:46:c2:3a:d6:f2:dd:62:ed:c2:0d:1f:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:DF:D2:32:71:87:9C:D5:A9:DD:08:56:F0:89:BA:97:17:4D:13
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GoHf0jJxh5zVqd0IVvCJupcXTRM.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:bd:97:e6:64:1f:18:88:1c:11:3c:53:7a:0a:0f:4c:76:
         49:66:fa:5e:bd:94:6a:d4:b4:04:3e:18:93:c7:a9:ce:bb:fb:
         0e:e7:c2:d1:3b:9f:2b:fe:3e:2e:30:36:5b:b7:dc:9c:d8:be:
         4d:53:10:21:0b:17:c1:b2:9d:83:55:04:ec:e6:3b:67:4e:ef:
         c8:c8:aa:98:9a:44:20:42:19:99:29:25:e6:54:cc:a4:1f:6c:
         2b:3f:df:35:a5:7a:82:30:6e:90:e6:a0:62:31:6a:76:de:6b:
         02:c3:4a:95:de:43:34:5b:4b:a1:9a:ef:f4:9a:67:20:ec:e7:
         dc:61:e6:a6:53:49:97:83:c2:67:47:47:16:be:64:67:e9:4a:
         ed:19:4e:98:1d:55:80:86:10:e9:d5:fe:54:43:1e:77:ad:9d:
         51:f0:65:01:01:f0:a2:54:5f:ea:8f:d9:fc:34:cc:17:f2:eb:
         92:23:7b:49:03:4a:a5:5d:9a:7b:17:43:65:2d:56:ef:06:4d:
         43:64:9b:c0:ab:8e:65:8a:2c:b5:ba:29:f7:65:51:f3:c8:83:
         4d:45:58:de:4d:bc:67:64:eb:fa:f9:7d:6d:1b:84:62:55:db:
         a6:eb:e1:5e:4b:9b:8a:b6:41:ae:d0:08:aa:e2:c9:15:f9:c1:
         6d:c9:05:ae
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMTcw
MDMwMTBaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDFBODFERkQyMzI3MTg3
OUNENUE5REQwODU2RjA4OUJBOTcxNzREMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT1mybfU1/XlN8L3Blf+opc2rYNhsDrGtRplccEa215Z89RfTN
Mzuve5sEeymHr8WCzUFhZEnqw6qPYKuMSgV8GIp47JYU1DuqmFK9eVH6VGMZcPrG
WByeO7tlvDG4LPiOf93lxLW+payvgTEss0G3SQ0XdKWWzkaaU0iEsdgtRaJaSzUW
IOTSB4tKdRRdx7haHNmODb8uvzhpYOCoUtr15qCBjsizh///V65t9m1yjNbt1pTy
PfQJAOrn5WacNTWexF+NGT4tjmsGGiN6HW8lFp1CpW9Xu1TTsxsR0N9SZQNs81Ep
SkqPaj8mL1NL1l3tLLJGwjrW8t1i7cINH/E5AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUGoHf0jJxh5zVqd0IVvCJupcXTRMwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9Hb0hmMGpKeGg1elZxZDBJVnZDSnVwY1hUUk0ucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAkwDQYJKoZIhvcNAQELBQADggEB
AH/FvZfmZB8YiBwRPFN6Cg9Mdklm+l69lGrUtAQ+GJPHqc67+w7nwtE7nyv+Pi4w
Nlu33JzYvk1TECELF8GynYNVBOzmO2dO78jIqpiaRCBCGZkpJeZUzKQfbCs/3zWl
eoIwbpDmoGIxanbeawLDSpXeQzRbS6Ga7/SaZyDs59xh5qZTSZeDwmdHRxa+ZGfp
Su0ZTpgdVYCGEOnV/lRDHnetnVHwZQEB8KJUX+qP2fw0zBfy65Ije0kDSqVdmnsX
Q2UtVu8GTUNkm8CrjmWKLLW6KfdlUfPIg01FWN5NvGdk6/r5fW0bhGJV26br4V5L
m4q2Qa7QCKriyRX5wW3JBa4=
-----END CERTIFICATE-----