Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/HjcCHHK-1tkLaRTqt3CElqnKyzo.roa
File:                     HjcCHHK-1tkLaRTqt3CElqnKyzo.roa (raw, json)
Hash identifier:          Z7DNcL6Naz6BcVi3eNK8JWD0cHyjbphvnvuWCqVTU00=
Subject key identifier:   1E:37:02:1C:72:BE:D6:D9:0B:69:14:EA:B7:70:84:96:A9:CA:CB:3A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4334
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HjcCHHK-1tkLaRTqt3CElqnKyzo.roa
Signing time:             Tue 15 Feb 2022 00:30:07 +0000
ROA not before:           Tue 15 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17204 (0x4334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 15 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=1E37021C72BED6D90B6914EAB7708496A9CACB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:94:f6:13:5a:40:e3:61:4f:92:5c:06:64:b6:
                    84:69:84:0f:75:f2:90:3a:5d:61:ee:10:9f:d1:16:
                    ae:bc:84:06:6b:7d:11:65:08:52:b9:78:e1:79:6c:
                    a9:1b:de:09:c3:94:56:93:c5:0f:60:62:08:b0:cc:
                    c6:13:67:bf:38:c7:12:5f:32:c4:93:78:39:5b:8f:
                    73:5d:cb:72:37:1c:10:0c:ef:73:b0:c1:dd:90:42:
                    5d:61:07:06:1c:a4:b9:42:ff:d2:1b:4f:91:0a:20:
                    15:ca:c4:d7:ac:ee:80:2b:ae:f7:16:fe:b7:c9:10:
                    89:d8:b5:8c:8c:35:27:6c:c6:78:7a:40:a1:f2:d8:
                    e4:01:d1:1b:fa:38:e1:6d:2e:66:ad:73:1b:db:d1:
                    68:93:33:b9:4f:ec:7d:1f:14:91:37:3b:24:a0:34:
                    e9:b8:e5:21:25:58:bd:87:be:07:5a:e2:2d:fa:06:
                    b9:72:bc:0d:2d:60:c1:c0:d9:cc:ad:dd:d5:55:57:
                    00:6b:0e:26:3c:c5:93:5c:59:c0:b9:c6:0c:e3:34:
                    11:ff:15:5d:8f:81:7a:06:1a:e2:07:73:ca:c7:60:
                    5a:c4:20:dd:ed:47:62:12:e1:d8:fe:18:2a:fe:f6:
                    2c:a5:79:46:d5:45:de:24:69:39:0a:a6:c8:e3:61:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:37:02:1C:72:BE:D6:D9:0B:69:14:EA:B7:70:84:96:A9:CA:CB:3A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HjcCHHK-1tkLaRTqt3CElqnKyzo.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:55:d5:12:56:c8:7d:ad:10:59:8a:04:9f:27:ed:c1:24:76:
         6b:cd:5e:7e:b5:e0:29:09:f3:4f:ec:98:48:e0:b9:85:6d:01:
         44:d1:fc:8b:34:e1:ca:0f:46:50:93:59:19:57:dc:b8:aa:f5:
         fb:8d:32:23:dd:26:1a:75:25:6d:c1:6a:e9:9d:ca:02:6a:81:
         1e:0a:8a:01:0b:6b:48:6c:e6:41:d3:f7:f6:c1:53:54:29:cd:
         3a:65:c9:33:ee:db:be:6f:af:62:15:35:a0:85:a6:73:46:39:
         96:bc:0f:cd:22:85:93:e3:25:3f:dc:e6:84:9b:f2:e6:8a:3b:
         dc:f8:df:0c:6e:80:86:3a:5d:0e:6f:66:ac:9d:f1:ed:50:fb:
         7a:92:54:89:4b:6e:ba:94:62:f6:d9:7a:39:dd:ed:69:87:5b:
         0a:47:be:33:1e:48:8a:0c:65:71:94:4f:9d:d4:82:c4:f8:4c:
         7f:73:01:2f:14:58:b8:cb:c3:11:95:5e:cc:dc:f9:bb:5c:64:
         cf:0b:12:35:59:49:e8:59:ee:26:c9:98:cb:3e:66:3f:63:c8:
         5a:2d:55:27:82:1e:55:9b:9f:f9:c6:74:fb:03:9e:24:be:1a:
         e1:db:f7:b1:a8:89:69:93:d2:b5:1e:cd:dd:35:2e:2c:c4:28:
         b4:d4:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----