Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/MLdDQTnl7N5smoHdX0zcG4rlV8I.roa
File:                     MLdDQTnl7N5smoHdX0zcG4rlV8I.roa (raw, json)
Hash identifier:          wxm+sdXwFJqH9Z6leRFxEHbyNeHkKF6tUFlqiHUhLrs=
Subject key identifier:   30:B7:43:41:39:E5:EC:DE:6C:9A:81:DD:5F:4C:DC:1B:8A:E5:57:C2
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4828
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MLdDQTnl7N5smoHdX0zcG4rlV8I.roa
Signing time:             Tue 17 May 2022 00:30:08 +0000
ROA not before:           Tue 17 May 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18472 (0x4828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 17 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=30B7434139E5ECDE6C9A81DD5F4CDC1B8AE557C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:22:42:26:0e:0b:ef:de:6f:9c:d9:61:d9:
                    46:6f:66:7a:49:99:44:91:d4:da:68:84:45:9d:08:
                    3d:9b:73:d0:7e:b6:0d:89:04:97:10:1a:6c:49:24:
                    5e:67:29:70:69:05:b8:11:72:83:65:f6:14:a2:a9:
                    9b:8d:2e:ae:a5:75:b4:95:aa:04:c0:d3:a8:81:20:
                    f3:c2:8d:18:75:30:8c:2f:a3:69:49:c3:0f:e8:4c:
                    17:80:13:59:25:66:2f:ba:82:17:36:17:ad:2f:77:
                    dc:17:88:04:bb:62:3f:d6:75:b9:ba:fe:b9:32:9d:
                    5a:d5:05:ba:1f:ec:3a:f3:18:d1:be:57:31:ab:8a:
                    c3:6b:b8:81:77:d2:90:77:04:c5:68:d7:bb:1f:d3:
                    29:b9:1c:e0:67:c3:81:61:6a:d9:ad:15:ec:4a:ae:
                    99:4c:8f:82:fa:7e:05:e1:fd:70:05:c2:60:6c:1c:
                    3f:1f:87:cf:72:78:30:19:9b:13:28:f2:87:df:da:
                    48:6f:e1:eb:70:8e:77:f5:88:5d:23:df:e8:ab:2f:
                    f3:34:d9:8f:d2:31:84:cd:34:0a:df:23:4f:48:58:
                    84:34:ba:9b:01:d0:94:e1:31:15:7b:3a:7c:e5:ca:
                    e7:71:0e:6d:64:95:60:c8:d2:62:5c:9f:19:63:e9:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B7:43:41:39:E5:EC:DE:6C:9A:81:DD:5F:4C:DC:1B:8A:E5:57:C2
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MLdDQTnl7N5smoHdX0zcG4rlV8I.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:d0:ca:aa:65:04:0b:9c:82:4a:08:85:9c:4f:e7:82:65:f9:
         dc:2d:7f:32:c3:f1:c6:c6:fc:21:75:b9:0f:f0:c5:18:f3:7a:
         6c:09:dd:4a:a4:6d:68:f2:5c:9e:c2:88:bd:a0:b7:51:a9:33:
         49:e2:4d:c0:5f:66:a7:13:34:16:ec:17:1a:9e:90:47:22:98:
         3f:17:2f:2d:0b:6b:cd:50:db:87:a5:17:89:3b:48:f6:d8:ca:
         0c:49:ab:5e:a0:5e:82:80:0c:e5:da:0c:88:33:4f:a2:e7:29:
         95:83:f2:88:e9:c0:a2:a0:2f:93:b2:e6:6c:8a:40:fc:c4:82:
         aa:72:7f:06:54:85:68:ad:28:cc:c5:50:5d:ec:d7:b0:a6:96:
         58:40:39:c2:a2:0b:d2:4c:46:4c:0f:43:e7:64:59:e5:99:f0:
         e5:29:27:f7:42:9d:62:f8:89:53:48:5e:fb:87:00:b0:e7:20:
         4f:40:f6:fd:23:c9:4e:67:4c:ae:7b:fd:39:bd:15:17:89:34:
         31:38:8e:6a:bd:ab:73:e1:a1:7d:45:4d:4b:76:8b:26:76:bb:
         b5:cc:8a:f6:b0:f3:48:99:40:ca:69:14:fe:93:0f:83:f5:a7:
         94:31:70:18:3a:58:e0:d1:7a:1a:e4:c1:fd:ba:3d:55:d3:b3:
         c1:0d:97:1b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSCgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTcw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDMwQjc0MzQxMzlFNUVD
REU2QzlBODFERDVGNENEQzFCOEFFNTU3QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFZSJCJg4L795vnNlh2UZvZnpJmUSR1NpohEWdCD2bc9B+tg2J
BJcQGmxJJF5nKXBpBbgRcoNl9hSiqZuNLq6ldbSVqgTA06iBIPPCjRh1MIwvo2lJ
ww/oTBeAE1klZi+6ghc2F60vd9wXiAS7Yj/Wdbm6/rkynVrVBbof7DrzGNG+VzGr
isNruIF30pB3BMVo17sf0ym5HOBnw4FhatmtFexKrplMj4L6fgXh/XAFwmBsHD8f
h89yeDAZmxMo8off2khv4etwjnf1iF0j3+irL/M02Y/SMYTNNArfI09IWIQ0upsB
0JThMRV7OnzlyudxDm1klWDI0mJcnxlj6VrrAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUMLdDQTnl7N5smoHdX0zcG4rlV8IwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9NTGREUVRubDdONXNtb0hkWDB6Y0c0cmxWOEkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
AFnQyqplBAucgkoIhZxP54Jl+dwtfzLD8cbG/CF1uQ/wxRjzemwJ3UqkbWjyXJ7C
iL2gt1GpM0niTcBfZqcTNBbsFxqekEcimD8XLy0La81Q24elF4k7SPbYygxJq16g
XoKADOXaDIgzT6LnKZWD8ojpwKKgL5Oy5myKQPzEgqpyfwZUhWitKMzFUF3s17Cm
llhAOcKiC9JMRkwPQ+dkWeWZ8OUpJ/dCnWL4iVNIXvuHALDnIE9A9v0jyU5nTK57
/Tm9FReJNDE4jmq9q3PhoX1FTUt2iyZ2u7XMivaw80iZQMppFP6TD4P1p5QxcBg6
WODRehrkwf26PVXTs8ENlxs=
-----END CERTIFICATE-----