Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/J2gXtVMR4Bb7oq68aG9DruyMrOA.roa
File:                     J2gXtVMR4Bb7oq68aG9DruyMrOA.roa (raw, json)
Hash identifier:          60OiOmC+4P9buGcCWWsaI7tNesYXYz3yjwTPuGslT2M=
Subject key identifier:   27:68:17:B5:53:11:E0:16:FB:A2:AE:BC:68:6F:43:AE:EC:8C:AC:E0
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       438A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/J2gXtVMR4Bb7oq68aG9DruyMrOA.roa
Signing time:             Mon 21 Feb 2022 00:30:07 +0000
ROA not before:           Mon 21 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17290 (0x438a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 21 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=276817B55311E016FBA2AEBC686F43AEEC8CACE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:03:e2:c7:bc:f7:ba:59:db:13:f7:94:b0:35:
                    b5:74:b0:8b:33:74:f4:b5:55:34:3f:c8:19:09:9a:
                    23:ec:85:ce:7f:9c:a0:ac:ba:a0:c3:e6:84:9f:b7:
                    2f:86:1b:0d:82:51:87:29:8d:03:3a:bc:d7:a5:a0:
                    5a:4d:d4:6f:f2:2b:99:6c:db:b3:53:ab:23:f1:a7:
                    03:60:4d:11:4f:19:9d:4b:69:f6:29:52:89:24:df:
                    69:a0:42:c0:f7:48:11:dd:bc:66:15:3f:76:01:34:
                    a5:eb:38:6d:f8:e2:18:e8:b9:d8:65:d5:f0:70:e2:
                    b1:94:ae:4e:93:40:7b:4a:1f:58:09:b8:3c:48:cd:
                    73:63:a9:7f:53:da:f0:ec:a8:51:e8:c4:bc:5f:5b:
                    56:71:c9:e0:83:ea:a5:32:f2:df:0e:1f:6d:4f:5b:
                    07:2e:f3:0c:8b:b8:7e:2b:66:12:11:eb:56:b2:dd:
                    9f:d6:5f:0a:0a:f2:cc:44:a1:61:f6:0b:af:83:b9:
                    10:6f:f6:9e:70:77:ae:b7:b8:4c:31:0d:cd:1e:57:
                    85:6a:54:0a:1f:dc:ed:94:00:02:db:26:f8:bd:d0:
                    ec:bb:5e:d8:60:3e:c9:9a:54:a7:0b:99:7a:c3:8c:
                    1f:19:18:61:28:3c:95:4f:82:2f:ec:01:d2:22:aa:
                    13:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:17:B5:53:11:E0:16:FB:A2:AE:BC:68:6F:43:AE:EC:8C:AC:E0
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/J2gXtVMR4Bb7oq68aG9DruyMrOA.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:2a:07:79:22:c3:e9:7d:29:fb:97:a5:02:70:99:a4:f3:23:
         ec:4f:0c:bf:cd:80:84:b3:5a:15:70:e7:91:e3:c1:10:06:78:
         f5:2e:70:36:5e:33:39:78:4e:7d:d0:2f:0d:bc:d3:49:fa:a7:
         57:a8:14:54:01:dd:9a:48:bb:99:b1:4b:17:65:a9:fb:8f:28:
         d2:25:27:a7:f7:e4:ee:35:f1:8c:97:80:95:35:40:97:91:9c:
         83:a6:aa:41:0b:3a:4a:2d:8d:6e:63:e7:0f:69:8b:ef:ab:db:
         f5:cb:b7:c4:15:da:f5:4f:80:cd:1b:0e:96:f9:b9:63:16:76:
         3f:b7:f7:f1:ce:b4:31:f8:79:88:dd:ba:cb:cf:b9:bc:1f:dc:
         5d:13:4d:67:40:aa:ba:88:22:f5:4d:fb:33:37:ed:46:db:6a:
         6e:53:ef:4f:2f:85:6e:d3:c6:c6:04:8e:d8:30:29:58:4d:9d:
         ae:a6:30:91:18:7e:f8:f1:ba:d4:ea:e0:b4:84:fa:cd:40:8a:
         8d:9f:09:08:15:7e:d3:b5:29:d9:e8:2d:74:09:6e:18:54:78:
         ce:d3:32:56:28:68:2a:49:7d:3b:ff:ce:6d:75:d5:61:a5:42:
         48:6b:ec:c9:a2:21:15:bd:ac:f9:b7:0e:be:c7:18:05:8f:a7:
         ea:82:52:7b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ4owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMjEw
MDMwMDdaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDI3NjgxN0I1NTMxMUUw
MTZGQkEyQUVCQzY4NkY0M0FFRUM4Q0FDRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+A+LHvPe6WdsT95SwNbV0sIszdPS1VTQ/yBkJmiPshc5/nKCs
uqDD5oSfty+GGw2CUYcpjQM6vNeloFpN1G/yK5ls27NTqyPxpwNgTRFPGZ1LafYp
Uokk32mgQsD3SBHdvGYVP3YBNKXrOG344hjoudhl1fBw4rGUrk6TQHtKH1gJuDxI
zXNjqX9T2vDsqFHoxLxfW1ZxyeCD6qUy8t8OH21PWwcu8wyLuH4rZhIR61ay3Z/W
XwoK8sxEoWH2C6+DuRBv9p5wd663uEwxDc0eV4VqVAof3O2UAALbJvi90Oy7Xthg
PsmaVKcLmXrDjB8ZGGEoPJVPgi/sAdIiqhORAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUJ2gXtVMR4Bb7oq68aG9DruyMrOAwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9KMmdYdFZNUjRCYjdvcTY4YUc5RHJ1eU1yT0Eucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
AAYqB3kiw+l9KfuXpQJwmaTzI+xPDL/NgISzWhVw55HjwRAGePUucDZeMzl4Tn3Q
Lw2800n6p1eoFFQB3ZpIu5mxSxdlqfuPKNIlJ6f35O418YyXgJU1QJeRnIOmqkEL
OkotjW5j5w9pi++r2/XLt8QV2vVPgM0bDpb5uWMWdj+39/HOtDH4eYjdusvPubwf
3F0TTWdAqrqIIvVN+zM37Ubbam5T708vhW7TxsYEjtgwKVhNna6mMJEYfvjxutTq
4LSE+s1Aio2fCQgVftO1KdnoLXQJbhhUeM7TMlYoaCpJfTv/zm111WGlQkhr7Mmi
IRW9rPm3Dr7HGAWPp+qCUns=
-----END CERTIFICATE-----