Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/MO6-LnMgunyxbzD5YcFvepTExfQ.roa
File:                     MO6-LnMgunyxbzD5YcFvepTExfQ.roa (raw, json)
Hash identifier:          99oHVFwkP7XyqDWdlNlRDizpSvbrUQ4G1YKyCH3DzFA=
Subject key identifier:   30:EE:BE:2E:73:20:BA:7C:B1:6F:30:F9:61:C1:6F:7A:94:C4:C5:F4
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4487
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MO6-LnMgunyxbzD5YcFvepTExfQ.roa
Signing time:             Sat 12 Mar 2022 00:30:06 +0000
ROA not before:           Sat 12 Mar 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17543 (0x4487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 12 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=30EEBE2E7320BA7CB16F30F961C16F7A94C4C5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1d:de:ba:6a:eb:d8:ac:ca:c4:c7:6d:17:6f:
                    95:93:ff:dd:89:b2:41:86:18:d5:24:fa:b3:cf:8d:
                    39:7c:b7:e8:03:b9:8d:7b:74:87:0c:c4:b3:73:8a:
                    bf:7d:c6:d4:fa:bb:14:1d:87:95:fc:f5:d8:2c:ce:
                    6b:23:e8:c2:c8:c8:b8:b5:19:b7:9c:7a:29:70:f4:
                    ec:42:e6:22:3b:31:86:a4:c3:a3:a2:14:6e:26:97:
                    88:5a:89:18:4b:dd:11:ef:ad:fe:e2:bf:93:ee:2c:
                    2c:d0:67:e6:1b:b6:88:fa:d7:e0:4b:fa:d0:93:06:
                    73:0a:b4:74:e3:7f:00:13:af:b8:a1:4f:ae:db:27:
                    be:a8:83:81:c6:3d:69:0b:e3:c6:78:b0:71:ac:cf:
                    45:5c:2b:99:31:e6:18:0c:16:d1:ea:8a:25:77:7e:
                    ba:2f:08:17:15:14:19:6b:e5:e4:c2:15:67:93:29:
                    94:38:4b:3d:95:1b:6a:91:64:3f:97:68:5c:3f:94:
                    49:03:28:17:eb:1b:b3:a7:56:ad:01:b5:30:03:85:
                    49:17:ea:a5:e0:bc:7c:48:b7:3c:43:e1:26:32:49:
                    26:b4:cb:b9:24:88:06:e7:b0:bb:25:de:18:1b:8a:
                    e0:79:01:a3:ed:9e:0c:f0:55:fd:1c:13:5c:4a:9e:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EE:BE:2E:73:20:BA:7C:B1:6F:30:F9:61:C1:6F:7A:94:C4:C5:F4
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MO6-LnMgunyxbzD5YcFvepTExfQ.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:29:aa:01:6a:45:27:00:3f:c3:44:f8:d2:bf:dc:18:50:
         15:18:78:9b:08:af:c4:6b:c4:20:48:a5:e4:0a:80:01:70:5b:
         3c:57:22:a4:2e:d7:81:c6:20:34:f2:5e:01:6a:97:8e:25:6b:
         97:5a:66:ef:bd:cf:44:e4:d8:1b:f8:51:09:c1:8b:73:05:9c:
         ba:a9:3f:e1:42:23:06:4b:f7:d4:7f:48:0d:64:13:06:dd:53:
         4a:cd:b7:cc:7e:07:a9:ff:78:38:1a:59:fc:05:4f:00:e0:cf:
         45:90:d0:3c:19:e9:c4:f3:48:ce:83:20:43:3c:d3:cc:a4:54:
         df:5c:fb:6c:8a:03:75:5c:f4:d1:e3:f9:4f:9a:cf:59:33:cc:
         14:79:84:c0:61:40:e4:67:ce:1c:0d:eb:35:7f:21:2b:12:d5:
         18:28:29:53:6a:5e:41:4a:a4:ea:4a:e6:aa:0b:3e:66:50:3a:
         ff:d2:8d:2f:3e:7c:92:3c:d2:d7:5b:a6:d3:3e:84:fe:97:a1:
         c6:64:f1:f4:34:9e:50:c3:40:fc:51:b3:1c:47:53:e5:c8:af:
         d3:9d:d1:13:3c:4d:69:97:ea:5e:95:f5:75:1c:6e:05:ef:b2:
         ff:87:35:f5:5d:06:b2:f4:c1:78:87:8c:c7:7d:f2:70:3c:44:
         77:08:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----