Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/PyrmZkx3OydJwM_HDhBQ-EDyGoM.roa
File:                     PyrmZkx3OydJwM_HDhBQ-EDyGoM.roa (raw, json)
Hash identifier:          lIejt5eOmnzLiVMNv82Ky7xi/VhrUp749aVTVP5K9+8=
Subject key identifier:   3F:2A:E6:66:4C:77:3B:27:49:C0:CF:C7:0E:10:50:F8:40:F2:1A:83
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4523
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PyrmZkx3OydJwM_HDhBQ-EDyGoM.roa
Signing time:             Wed 23 Mar 2022 00:30:06 +0000
ROA not before:           Wed 23 Mar 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17699 (0x4523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 23 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=3F2AE6664C773B2749C0CFC70E1050F840F21A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:c6:92:30:d1:dd:39:d9:4e:2d:99:89:f6:
                    d0:28:0d:65:f9:1f:47:08:05:89:8a:43:12:4a:57:
                    6a:78:24:ac:f7:3a:40:5e:4e:b3:d0:6b:2b:86:47:
                    a9:dc:9c:0f:42:df:d1:a6:ed:23:b2:8e:c2:6b:fc:
                    fb:02:46:12:be:b4:8f:f2:ea:96:84:1c:db:e1:c7:
                    a3:b4:c8:0d:33:87:9c:30:de:99:fd:c5:bd:43:b5:
                    bf:d7:0d:be:af:83:97:1d:78:f4:a1:e0:53:f0:c0:
                    7e:d7:03:36:81:ee:88:94:ff:97:12:f0:de:5d:ca:
                    2b:53:cf:72:be:a2:e3:71:fe:87:de:96:73:0b:f9:
                    c0:f9:22:63:f8:af:b2:57:9c:9c:b6:81:54:5d:d4:
                    7d:bc:1f:36:9d:49:ad:f6:03:98:56:b9:c7:bc:3f:
                    05:f1:8b:c1:ca:63:87:05:c4:80:79:9a:da:d8:70:
                    39:dd:4e:f0:46:19:2d:1b:4a:24:df:a7:0a:ea:90:
                    98:6f:88:87:92:cb:42:80:97:7a:f7:43:06:2d:07:
                    76:ea:2e:66:90:3b:0e:64:ae:66:8b:4e:35:d9:54:
                    27:71:93:f1:ac:a7:76:2c:11:f5:e2:73:e5:8f:0e:
                    a1:55:8e:cc:e5:8c:ef:f4:d0:0a:95:7b:7a:b8:57:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2A:E6:66:4C:77:3B:27:49:C0:CF:C7:0E:10:50:F8:40:F2:1A:83
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PyrmZkx3OydJwM_HDhBQ-EDyGoM.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b4:86:30:35:71:4a:2c:51:2b:5d:65:1c:fe:fa:44:82:d4:
         99:32:4a:1c:57:86:00:18:70:f9:6d:ed:7a:cf:a8:cd:00:06:
         9d:88:b7:20:cb:7e:f8:5d:54:80:15:e8:cd:67:a5:89:6a:06:
         2b:81:bb:12:1c:ff:54:d3:43:60:48:a4:c7:e5:b9:ba:b0:59:
         1b:b0:db:54:e5:2a:89:2a:a1:00:29:19:af:ca:75:c4:55:76:
         81:06:43:2a:ec:a4:26:7a:95:bb:3c:15:50:bb:3c:89:32:fd:
         2d:c0:4a:e7:69:3c:eb:a4:31:19:fc:c4:cf:a2:94:59:a2:e2:
         6b:62:5c:c3:63:e9:e2:b7:83:f1:6b:c4:9c:ad:60:6d:7b:d5:
         b8:de:79:27:00:01:b5:11:f6:e2:99:9a:f6:c4:f4:dc:d3:0c:
         a1:d9:d6:69:89:2b:92:f6:6b:07:bf:cb:1d:71:f8:20:5c:8e:
         c8:cb:38:33:ae:6b:b7:26:c7:4d:d5:4e:0f:05:7c:3d:9f:27:
         41:d5:78:68:9c:20:bf:a5:3f:ec:17:c2:cb:a0:3c:0c:f1:c4:
         dd:40:10:02:d8:07:f4:6f:d1:0f:91:1c:64:16:90:b6:7a:1b:
         fb:4e:70:f8:a1:98:6f:00:cb:33:f9:6f:d4:34:4b:c5:48:5f:
         70:09:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----