Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/J2imzUyBkEIzLWiXGAxNBAwErD4.roa
File:                     J2imzUyBkEIzLWiXGAxNBAwErD4.roa (raw, json)
Hash identifier:          b+ZngyrdQUAoRo0fPLmXqx4XpTfqzZbUT+zNrAuydRQ=
Subject key identifier:   27:68:A6:CD:4C:81:90:42:33:2D:68:97:18:0C:4D:04:0C:04:AC:3E
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43CC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/J2imzUyBkEIzLWiXGAxNBAwErD4.roa
Signing time:             Sat 26 Feb 2022 00:30:09 +0000
ROA not before:           Sat 26 Feb 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17356 (0x43cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 26 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=2768A6CD4C819042332D6897180C4D040C04AC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:de:bd:df:c7:5f:2f:87:6d:ce:80:7a:d9:4d:
                    08:85:00:4c:5e:3f:fe:a7:54:aa:20:51:c2:c6:34:
                    23:4b:14:9f:54:38:e4:15:d5:05:36:a8:66:90:37:
                    97:66:6d:5b:8f:01:80:ab:6f:a1:4f:cd:d7:6c:3c:
                    6c:3c:ac:24:bd:04:6d:35:2c:3c:c9:f6:5f:83:d8:
                    43:44:ba:d9:c7:3d:5e:8f:24:49:c2:6a:86:0e:3e:
                    02:11:09:89:2b:41:f9:97:d2:9d:68:64:4d:e9:b0:
                    1e:94:d2:a6:8a:b0:95:ff:fe:2a:9a:7c:4d:84:97:
                    e7:bf:c0:a6:d8:4d:76:17:c0:ff:fe:6f:e0:4a:27:
                    f2:c9:fa:dd:b5:1d:39:33:cc:eb:ff:52:a1:87:1e:
                    d2:54:68:3e:33:b8:b5:03:17:3f:ea:60:85:a9:6a:
                    58:0e:49:7b:14:50:f6:b7:d6:4f:78:3a:c1:09:33:
                    8b:98:7a:77:05:df:da:0e:0a:c9:b1:fb:f8:4a:cc:
                    3a:2c:68:20:d6:62:8e:d7:3a:93:8d:d5:ab:f2:ea:
                    ef:25:27:4f:46:51:c7:6f:55:98:34:45:bf:dd:b3:
                    c2:3d:78:bc:f8:4b:42:54:c4:6c:c0:8d:0c:71:22:
                    a0:81:86:af:55:b4:95:67:f3:2c:05:9c:5e:05:f7:
                    68:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:A6:CD:4C:81:90:42:33:2D:68:97:18:0C:4D:04:0C:04:AC:3E
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/J2imzUyBkEIzLWiXGAxNBAwErD4.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:dd:e8:a8:83:96:0a:a0:e8:56:e8:69:e2:37:4e:95:2a:3d:
         fc:8d:fc:9e:fc:c7:ba:27:0f:f5:05:1a:a4:b1:96:89:3a:50:
         eb:c0:83:be:72:fc:a2:e0:ab:e7:59:ba:1b:fd:56:03:27:19:
         25:c0:7c:e1:8f:05:88:8e:35:20:a6:85:1e:33:73:93:17:64:
         35:db:c7:bc:d1:e5:31:6a:11:4e:ce:0b:b3:05:3b:b3:59:1d:
         72:71:92:2f:d7:88:92:be:24:68:16:49:0c:25:2d:2b:32:73:
         1b:64:ba:06:c7:3b:ea:55:7c:a9:a6:47:2e:6c:6a:af:eb:35:
         24:5f:88:86:17:f5:94:bf:19:4b:3f:dd:47:d1:ee:6a:4e:96:
         bb:92:e9:c5:76:1d:2f:55:06:03:b2:94:6b:e1:87:2a:d5:2b:
         aa:02:63:c7:12:94:f9:a7:49:db:fc:96:ad:e9:2a:0c:2d:4d:
         7a:a0:89:6f:f5:ea:95:c5:7f:ac:a8:ef:f9:d9:dd:e9:ef:fb:
         c1:8a:99:be:90:21:50:01:80:81:09:22:48:cb:2f:fc:11:86:
         84:eb:ec:fe:74:c7:ce:15:f9:ac:73:46:a0:79:c9:eb:ff:41:
         7f:59:2c:3a:86:eb:0c:8f:1e:6b:2d:94:2a:97:9d:c7:51:fa:
         52:58:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----