Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Lmd2e3i85MIByVoTFG5nDblurV8.roa
File:                     Lmd2e3i85MIByVoTFG5nDblurV8.roa (raw, json)
Hash identifier:          s4PgwatTG8G3M2431xBPwmiVGxf86qEYc8Xm6BjktsU=
Subject key identifier:   2E:67:76:7B:78:BC:E4:C2:01:C9:5A:13:14:6E:67:0D:B9:6E:AD:5F
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       49A7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Lmd2e3i85MIByVoTFG5nDblurV8.roa
Signing time:             Fri 10 Jun 2022 00:30:08 +0000
ROA not before:           Fri 10 Jun 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18855 (0x49a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun 10 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=2E67767B78BCE4C201C95A13146E670DB96EAD5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:d3:1b:5b:ac:bd:a2:2b:c7:6e:3a:3c:6c:
                    41:04:e5:22:33:60:37:d5:6f:02:ef:43:b9:c2:34:
                    25:cc:9a:9b:20:61:eb:38:d6:f0:a3:11:5f:f6:1b:
                    d5:29:e1:97:9a:c9:f1:c0:71:1c:24:03:9e:8c:7e:
                    91:7a:94:da:f4:1c:76:bf:88:bf:69:97:5e:cf:f3:
                    49:09:36:9b:6a:87:3d:d7:1d:05:bf:99:58:81:ea:
                    f1:aa:7e:f3:41:7b:b1:68:0d:47:8e:06:05:bb:e3:
                    5f:ea:ed:10:ae:a4:4c:ec:16:6d:25:b4:a9:f6:d1:
                    c5:66:de:74:88:53:31:c1:f5:59:5e:ae:5d:5e:ff:
                    0a:3e:37:ff:f2:cd:07:bc:50:ba:92:d5:11:bd:17:
                    02:7b:4b:38:b5:de:ad:3c:27:2c:b8:58:2b:63:e7:
                    87:5b:ff:e9:8e:21:43:4f:49:c4:3c:93:cf:58:09:
                    4a:3c:d6:8c:f4:6d:d6:f0:2d:fb:db:ad:ae:1a:67:
                    f7:61:c6:56:05:b8:d5:53:a5:4c:26:81:c9:d3:10:
                    b4:a3:e1:be:43:51:4c:35:6c:a6:20:cf:ea:4f:b7:
                    73:b3:af:80:bf:aa:50:c2:13:0d:b2:fe:eb:9f:3f:
                    0e:d8:f3:e1:1b:05:7a:32:1a:2a:68:6b:93:e6:c6:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:67:76:7B:78:BC:E4:C2:01:C9:5A:13:14:6E:67:0D:B9:6E:AD:5F
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Lmd2e3i85MIByVoTFG5nDblurV8.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:64:61:c6:31:73:25:3c:d4:13:9b:96:07:68:a9:fb:86:44:
         21:e6:a0:e6:7f:56:b3:2f:89:1a:81:10:5a:1d:91:50:ee:c2:
         8d:0a:28:94:dc:09:35:30:3e:df:f2:ab:78:18:8d:3f:4d:1b:
         f3:53:c0:d1:6b:4c:ba:b2:7a:aa:91:19:95:fb:f8:d3:0c:32:
         2a:8a:5f:d6:50:65:fa:bf:a8:91:b9:88:49:ae:a5:fc:78:2c:
         c9:79:da:9d:77:1d:1c:9c:45:a1:54:00:da:ea:03:29:d7:91:
         0b:5c:8f:06:d8:74:17:4c:50:46:f7:fa:75:37:f9:a5:ed:fc:
         a0:92:b0:bf:16:de:1a:82:8c:45:05:0e:56:c2:97:49:52:87:
         1e:d9:9c:1b:95:73:c4:ac:d5:d5:e3:aa:d3:64:ac:3d:57:cc:
         a5:0e:ea:8e:ff:31:17:a5:e8:91:42:7c:75:6b:fc:d5:e6:f6:
         83:2d:f2:ee:e1:e1:43:49:64:94:93:b7:f5:77:69:d1:29:8b:
         58:07:aa:2d:51:e3:9c:2e:a1:ce:81:64:cd:1f:f5:54:1c:ab:
         b6:f2:fc:db:40:7c:91:ef:4e:85:c1:d1:fc:54:41:6c:86:cc:
         42:18:0e:68:20:d2:77:91:ff:9c:68:64:ba:4e:d6:d4:0d:f2:
         4a:2c:3b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----