Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/M508VIVckrw9LdBls7Y30ekdBgI.roa
File:                     M508VIVckrw9LdBls7Y30ekdBgI.roa (raw, json)
Hash identifier:          AfkSQZIfC6JCrHHZaGkGTtV6WeQ6+nADfyt3paWI0fk=
Subject key identifier:   33:9D:3C:54:85:5C:92:BC:3D:2D:D0:65:B3:B6:37:D1:E9:1D:06:02
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       495D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/M508VIVckrw9LdBls7Y30ekdBgI.roa
Signing time:             Sun 05 Jun 2022 00:30:06 +0000
ROA not before:           Sun 05 Jun 2022 00:30:06 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18781 (0x495d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  5 00:30:06 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=339D3C54855C92BC3D2DD065B3B637D1E91D0602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:ea:d4:80:a1:39:51:ef:8f:c1:11:94:4e:
                    1d:4f:34:8c:df:ae:68:df:e2:e5:7e:df:0f:f5:21:
                    bd:5a:a2:05:09:ad:26:92:8d:df:d4:53:62:70:8f:
                    57:12:66:03:68:4a:91:4f:b5:36:b7:00:08:11:ef:
                    4f:9c:8f:72:7e:1d:65:da:9a:00:0a:87:16:c4:0d:
                    d0:45:4d:2a:c6:0d:5c:b6:7b:a3:8a:fd:a0:8c:29:
                    ff:63:b5:bd:2a:7b:6d:34:a7:64:72:3b:4c:d4:78:
                    24:b1:ba:0c:3b:95:05:45:78:3b:c5:43:c4:3f:b9:
                    ae:19:90:ee:b5:e0:ba:55:4b:3e:a4:95:c1:a0:47:
                    e1:e6:39:00:9a:0b:f2:c4:be:79:af:3c:4b:b2:11:
                    ba:c3:76:66:55:ce:5b:f0:98:ed:39:65:f6:54:e8:
                    6a:a9:fe:c0:ef:b1:53:fc:54:0e:6e:28:07:ea:d9:
                    f2:fb:19:1f:f2:20:d8:12:20:bd:01:dc:36:9b:93:
                    50:41:4e:bf:c8:be:f6:bd:d6:92:d2:d8:54:c5:00:
                    49:12:d6:43:ed:1f:35:ad:76:ea:92:20:8a:29:4a:
                    8e:b7:b5:dc:67:76:f0:43:d3:c8:7c:7e:41:66:a0:
                    07:ee:ca:cd:89:70:40:b8:3f:59:1d:04:dc:0c:6d:
                    07:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9D:3C:54:85:5C:92:BC:3D:2D:D0:65:B3:B6:37:D1:E9:1D:06:02
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/M508VIVckrw9LdBls7Y30ekdBgI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:bb:82:58:77:de:94:79:b3:a8:95:c8:bf:73:b6:2b:7f:71:
         e2:55:c4:2d:68:ae:40:5d:fd:1d:00:4d:13:e9:fc:1e:86:f5:
         d1:55:3a:83:f5:05:5f:60:e5:fc:57:03:6e:bc:fa:c8:46:68:
         5b:40:68:5a:10:88:a7:a3:98:97:3b:2f:32:ba:16:85:17:e6:
         0b:b6:27:60:7e:7a:e9:58:02:87:e9:3e:7d:0a:6c:dd:71:23:
         45:a0:85:fa:e2:97:61:5e:94:23:c8:b8:33:b0:c8:5e:8e:9c:
         c2:17:ae:3c:ed:89:bf:2f:13:f3:84:df:f5:6f:7c:0c:57:9a:
         0c:ad:a0:71:cb:49:29:1c:ea:50:12:0d:eb:60:b4:f2:40:dd:
         6f:cf:47:f0:66:17:8c:c4:17:13:62:9c:01:b8:89:cc:58:36:
         b1:4d:84:e7:c0:0d:a4:ed:1b:c4:3b:ed:88:08:fe:01:c4:7f:
         1a:d3:55:09:48:96:ac:e0:9d:ae:15:e2:90:8d:f3:49:62:60:
         f8:8e:14:9d:31:d7:d7:22:46:40:45:8e:74:df:87:3c:95:67:
         a7:c9:ea:cf:3b:75:9f:e4:62:bd:20:7c:36:d0:13:e5:74:2b:
         c1:75:e9:0e:6f:df:93:00:c4:77:a0:44:b6:05:6f:d2:30:07:
         dc:02:77:4a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDUw
MDMwMDZaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDMzOUQzQzU0ODU1Qzky
QkMzRDJERDA2NUIzQjYzN0QxRTkxRDA2MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQLOrUgKE5Ue+PwRGUTh1PNIzfrmjf4uV+3w/1Ib1aogUJrSaS
jd/UU2Jwj1cSZgNoSpFPtTa3AAgR70+cj3J+HWXamgAKhxbEDdBFTSrGDVy2e6OK
/aCMKf9jtb0qe200p2RyO0zUeCSxugw7lQVFeDvFQ8Q/ua4ZkO614LpVSz6klcGg
R+HmOQCaC/LEvnmvPEuyEbrDdmZVzlvwmO05ZfZU6Gqp/sDvsVP8VA5uKAfq2fL7
GR/yINgSIL0B3Dabk1BBTr/Ivva91pLS2FTFAEkS1kPtHzWtduqSIIopSo63tdxn
dvBD08h8fkFmoAfuys2JcEC4P1kdBNwMbQevAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUM508VIVckrw9LdBls7Y30ekdBgIwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9NNTA4VklWY2tydzlMZEJsczdZMzBla2RCZ0kucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL8wDQYJKoZIhvcNAQELBQADggEB
ADq7glh33pR5s6iVyL9ztit/ceJVxC1orkBd/R0ATRPp/B6G9dFVOoP1BV9g5fxX
A268+shGaFtAaFoQiKejmJc7LzK6FoUX5gu2J2B+eulYAofpPn0KbN1xI0Wghfri
l2FelCPIuDOwyF6OnMIXrjztib8vE/OE3/VvfAxXmgytoHHLSSkc6lASDetgtPJA
3W/PR/BmF4zEFxNinAG4icxYNrFNhOfADaTtG8Q77YgI/gHEfxrTVQlIlqzgna4V
4pCN80liYPiOFJ0x19ciRkBFjnTfhzyVZ6fJ6s87dZ/kYr0gfDbQE+V0K8F16Q5v
35MAxHegRLYFb9IwB9wCd0o=
-----END CERTIFICATE-----