Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/HsNL7adKw3TDDWexWAmAUnN6KB0.roa
File:                     HsNL7adKw3TDDWexWAmAUnN6KB0.roa (raw, json)
Hash identifier:          GNsrJkNEqJmMKiVN6e1pRVuQc1Wt0pQMvOLEdQq9vu4=
Subject key identifier:   1E:C3:4B:ED:A7:4A:C3:74:C3:0D:67:B1:58:09:80:52:73:7A:28:1D
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42D4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HsNL7adKw3TDDWexWAmAUnN6KB0.roa
Signing time:             Tue 08 Feb 2022 00:30:07 +0000
ROA not before:           Tue 08 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17108 (0x42d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  8 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=1EC34BEDA74AC374C30D67B158098052737A281D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:a3:6e:74:79:72:d1:e6:5f:1e:62:e3:39:
                    53:86:89:40:42:8a:2e:50:9a:e6:5b:99:5d:54:94:
                    cf:00:5b:d9:79:7f:15:c6:fd:a2:f9:36:5d:4f:38:
                    fc:ef:46:90:0a:5a:dd:69:d7:c9:3d:73:12:a2:db:
                    64:4a:60:35:76:70:40:7d:6a:73:9a:7d:04:ad:9d:
                    e4:ad:77:a1:be:52:af:27:ae:1e:14:c8:66:a8:e1:
                    18:2a:21:ab:a2:59:b7:91:fc:b0:19:ba:7a:89:c3:
                    21:61:fe:01:c2:4c:73:2b:8d:b3:48:60:93:35:04:
                    cb:7c:c1:5c:4d:08:96:e0:38:c5:01:cf:e7:28:19:
                    b2:47:5a:7b:19:ba:56:1c:9e:5e:3e:5a:a9:f4:c6:
                    d4:84:85:bd:81:f4:9d:cc:0e:84:ce:f9:87:be:bb:
                    db:42:07:45:ce:cd:14:46:e1:90:94:ae:0c:e7:16:
                    4f:7a:b0:12:b4:b5:42:42:9a:3f:f0:fe:16:f2:01:
                    37:47:d6:3b:36:ee:b4:96:97:51:1d:3f:15:d0:4c:
                    b8:56:d3:aa:e0:1e:fa:8a:e4:fe:5a:72:82:7f:c3:
                    55:c7:82:67:44:40:dd:c2:3f:8f:d7:a2:18:79:a6:
                    95:b2:4b:47:37:8b:6c:e7:f5:d2:eb:d7:b1:84:7f:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C3:4B:ED:A7:4A:C3:74:C3:0D:67:B1:58:09:80:52:73:7A:28:1D
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HsNL7adKw3TDDWexWAmAUnN6KB0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:b5:f5:bd:9d:a6:c5:a8:92:01:52:2d:2b:dd:6b:38:91:27:
         dc:67:12:f7:5b:af:40:2b:3e:fd:33:52:59:12:07:5a:a2:1f:
         d0:d9:dc:69:1f:42:97:82:02:d2:df:2c:5a:4a:53:26:d8:dc:
         69:e5:23:d2:3b:e3:38:47:c6:36:3b:ab:56:bd:7a:4e:34:52:
         64:3b:c4:bc:92:33:fc:97:ff:ff:62:9d:32:e9:c0:ea:6b:7b:
         98:d7:f1:00:88:04:aa:6d:1e:e5:54:0a:66:e3:23:79:2b:e8:
         0f:a8:97:c6:5d:23:5c:8c:3b:0f:8a:41:ff:f8:47:3c:12:99:
         15:43:86:56:ec:c4:4e:d8:cd:fd:a9:0f:58:2c:a2:e2:1f:92:
         d3:13:db:5d:16:e0:56:e0:d3:93:c8:fe:72:c2:84:0b:96:bd:
         1c:e2:98:cf:f1:11:ca:a2:c6:a3:4a:29:93:d3:8b:e6:59:49:
         40:48:b4:03:da:99:82:92:e5:0d:2e:fc:32:1b:aa:9e:e8:5a:
         aa:86:7d:98:ab:7f:94:a2:ff:11:03:d9:7d:3c:ac:59:71:fc:
         61:de:ae:35:4e:96:30:26:12:24:f9:84:7c:83:da:bb:05:49:
         c9:b8:45:de:be:d2:24:7a:88:05:14:cb:1f:1a:38:20:8e:12:
         7b:5b:6f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----