Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Kg_i69ukCGbdmJ4cxo0MVv5g82k.roa
File:                     Kg_i69ukCGbdmJ4cxo0MVv5g82k.roa (raw, json)
Hash identifier:          ByuP5fbbevQ02ARf9cjZdJmdfi66L5BhKPloLVVchYM=
Subject key identifier:   2A:0F:E2:EB:DB:A4:08:66:DD:98:9E:1C:C6:8D:0C:56:FE:60:F3:69
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4960
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Kg_i69ukCGbdmJ4cxo0MVv5g82k.roa
Signing time:             Sun 05 Jun 2022 00:30:07 +0000
ROA not before:           Sun 05 Jun 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18784 (0x4960)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  5 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=2A0FE2EBDBA40866DD989E1CC68D0C56FE60F369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:72:d6:10:99:b2:19:30:a7:a6:ec:31:cb:
                    b4:eb:8e:0a:27:d1:2d:cc:f5:32:a8:7b:72:db:9d:
                    a7:8c:8f:7a:ed:25:07:c3:f9:9d:7b:8f:07:00:82:
                    cb:42:7a:3a:d6:a3:d1:78:aa:7e:65:df:5e:f4:c4:
                    8c:35:24:6b:b3:12:e9:4e:f7:1b:12:8e:13:0b:53:
                    24:b4:8a:3f:62:c7:f0:eb:2b:aa:76:2d:b1:4e:a7:
                    ee:31:9e:17:2d:8a:4a:1c:68:92:a2:2d:6c:95:31:
                    a2:c1:cf:8f:00:29:65:84:15:67:da:3e:88:34:05:
                    9e:16:36:2b:01:72:98:b7:3d:9e:97:58:1f:db:1e:
                    27:d7:fd:f4:94:2e:44:54:76:a8:4a:95:d0:ca:08:
                    bc:21:61:04:a2:c8:c6:c2:20:d0:69:52:56:34:f0:
                    e5:1b:8d:c0:bd:c9:97:03:f6:a6:11:8d:1b:42:a9:
                    8c:3e:4c:67:58:c5:db:35:32:e7:41:50:87:63:bc:
                    3b:ac:c1:50:7a:ea:be:15:c2:3d:0e:62:d9:6f:4b:
                    c4:78:72:e5:8a:69:c5:f3:5a:96:e0:61:47:35:2d:
                    6b:b8:2a:36:25:fe:a4:6f:73:18:c3:c3:f5:db:8b:
                    d0:b3:02:6d:cc:ae:25:4f:d8:d5:ca:d9:da:d0:27:
                    6c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0F:E2:EB:DB:A4:08:66:DD:98:9E:1C:C6:8D:0C:56:FE:60:F3:69
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Kg_i69ukCGbdmJ4cxo0MVv5g82k.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:49:62:2f:21:9e:98:cc:b5:5f:ce:85:ec:a4:58:76:83:
         bf:c1:e2:ed:a3:4c:e5:12:2e:ee:ae:b4:50:2f:fe:c7:2a:2e:
         87:77:a7:82:d9:78:c2:5f:15:96:38:ee:42:cc:04:66:e3:4b:
         ff:c3:ce:4c:9b:b7:c6:2c:60:9c:11:1d:fe:4a:7e:6a:c3:c0:
         6d:11:09:dd:bf:59:83:27:59:97:b3:d3:64:cf:93:68:d0:07:
         d3:58:24:93:78:d3:00:29:93:1e:12:67:a4:80:26:46:88:3a:
         25:31:eb:1c:0f:45:4b:8b:7f:76:81:05:68:4a:46:c3:e1:95:
         06:b4:b6:a0:67:58:35:90:f1:5d:a7:69:07:b8:2b:24:0a:0b:
         ea:a2:c0:6e:48:9f:65:82:c9:f1:5b:c2:92:b3:94:5f:74:77:
         fc:90:45:d0:a9:36:3c:5f:60:23:c7:5e:aa:a9:05:c2:05:ad:
         5a:75:59:bb:fa:1a:1b:28:86:d5:8b:68:4e:fc:99:fc:fb:6e:
         2b:f7:c1:de:90:04:d3:a9:62:25:e5:40:7c:03:16:fa:9c:ac:
         aa:e4:18:76:20:6f:7b:83:1b:2c:a8:c5:78:6d:c6:dc:3b:45:
         85:e0:7c:31:19:08:3a:8f:f0:b7:34:ce:d8:75:f5:7c:84:91:
         cd:05:aa:9d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDUw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDJBMEZFMkVCREJBNDA4
NjZERDk4OUUxQ0M2OEQwQzU2RkU2MEYzNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIVnLWEJmyGTCnpuwxy7Trjgon0S3M9TKoe3LbnaeMj3rtJQfD
+Z17jwcAgstCejrWo9F4qn5l3170xIw1JGuzEulO9xsSjhMLUyS0ij9ix/DrK6p2
LbFOp+4xnhctikocaJKiLWyVMaLBz48AKWWEFWfaPog0BZ4WNisBcpi3PZ6XWB/b
HifX/fSULkRUdqhKldDKCLwhYQSiyMbCINBpUlY08OUbjcC9yZcD9qYRjRtCqYw+
TGdYxds1MudBUIdjvDuswVB66r4Vwj0OYtlvS8R4cuWKacXzWpbgYUc1LWu4KjYl
/qRvcxjDw/Xbi9CzAm3MriVP2NXK2drQJ2wZAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUKg/i69ukCGbdmJ4cxo0MVv5g82kwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9LZ19pNjl1a0NHYmRtSjRjeG8wTVZ2NWc4Mmsucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAMwDQYJKoZIhvcNAQELBQADggEB
AHx0SWIvIZ6YzLVfzoXspFh2g7/B4u2jTOUSLu6utFAv/scqLod3p4LZeMJfFZY4
7kLMBGbjS//Dzkybt8YsYJwRHf5KfmrDwG0RCd2/WYMnWZez02TPk2jQB9NYJJN4
0wApkx4SZ6SAJkaIOiUx6xwPRUuLf3aBBWhKRsPhlQa0tqBnWDWQ8V2naQe4KyQK
C+qiwG5In2WCyfFbwpKzlF90d/yQRdCpNjxfYCPHXqqpBcIFrVp1Wbv6GhsohtWL
aE78mfz7biv3wd6QBNOpYiXlQHwDFvqcrKrkGHYgb3uDGyyoxXhtxtw7RYXgfDEZ
CDqP8Lc0zth19XyEkc0Fqp0=
-----END CERTIFICATE-----