Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Qrythpwnp0dgDKY3fMw8bwZbUzk.roa
File:                     Qrythpwnp0dgDKY3fMw8bwZbUzk.roa (raw, json)
Hash identifier:          mkIJMZm6+aVBI3f8UUpvwqd0C3th6iMh8XJf1ggnLyU=
Subject key identifier:   42:BC:AD:86:9C:27:A7:47:60:0C:A6:37:7C:CC:3C:6F:06:5B:53:39
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       46BC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Qrythpwnp0dgDKY3fMw8bwZbUzk.roa
Signing time:             Thu 21 Apr 2022 00:30:09 +0000
ROA not before:           Thu 21 Apr 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18108 (0x46bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 21 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=42BCAD869C27A747600CA6377CCC3C6F065B5339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a3:ed:07:cd:d6:bd:11:6f:28:4d:a1:fe:7e:
                    f3:30:cb:6c:98:35:39:57:10:ca:da:ae:1c:eb:38:
                    53:ad:cb:e2:8f:23:e6:a5:c3:e8:64:ca:17:72:a2:
                    46:e6:6a:de:73:c2:b0:99:b3:dc:be:1b:ff:d5:e7:
                    b8:de:de:52:bb:79:ee:26:d8:ad:bf:f3:25:c4:98:
                    ad:1f:5a:76:d9:3b:c1:eb:5f:a7:e8:88:ec:88:5c:
                    c1:6c:4f:ff:12:70:44:4f:6d:33:c6:be:26:71:1a:
                    a9:ed:55:df:9e:ae:30:87:39:b6:c1:aa:ef:42:2a:
                    5e:83:8f:1c:e5:77:35:c5:74:e3:de:db:0a:cf:c8:
                    19:4a:ec:ff:29:8c:5a:04:62:72:9c:8d:84:f4:ca:
                    ac:4f:85:13:33:17:56:1a:43:85:ed:07:8c:40:60:
                    2c:38:ae:bc:83:0a:d9:e6:67:0c:4a:5f:4b:d7:e7:
                    e2:f3:07:1d:ab:72:0d:26:27:ec:ab:3b:59:73:fe:
                    4d:b6:d0:79:ca:7a:b3:e4:15:0b:54:e7:db:cf:b3:
                    94:89:53:1d:56:86:39:fb:39:79:6f:f2:09:ec:ac:
                    b0:9d:71:f2:44:33:b0:25:54:2b:f3:d5:ed:2c:13:
                    22:60:cf:ba:26:8d:cf:ad:aa:e0:13:70:ee:89:5a:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BC:AD:86:9C:27:A7:47:60:0C:A6:37:7C:CC:3C:6F:06:5B:53:39
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Qrythpwnp0dgDKY3fMw8bwZbUzk.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:1c:46:c0:48:9d:84:52:1e:86:57:38:76:71:fd:f6:81:06:
         3c:51:86:61:c5:3f:f8:d0:90:2d:00:38:68:01:00:33:fc:ff:
         0c:56:e0:62:1f:3e:a0:9d:fa:90:4e:e0:02:2f:d7:8e:c1:0b:
         cf:09:99:0e:82:45:97:88:63:8f:49:55:3e:00:26:78:6d:53:
         e1:cf:4b:47:68:08:21:a3:42:dd:1d:fd:f8:0c:e3:b0:6c:67:
         ab:9c:64:4c:60:5c:1d:3c:db:e1:50:32:b8:d9:66:db:13:9f:
         b8:48:76:fc:91:21:51:36:cc:0a:6b:28:20:a9:65:2d:73:57:
         6a:7d:7e:6d:4a:eb:ba:ac:98:b1:de:5c:61:31:58:78:7e:7b:
         7d:ef:3c:50:ca:51:64:96:6a:75:8c:12:58:19:8b:9e:82:e9:
         7e:c4:eb:80:c6:4d:dd:87:37:c6:c1:73:bf:a7:3c:80:e2:12:
         04:25:a7:e9:2f:ee:03:2f:37:e5:d4:52:40:66:39:75:a6:e6:
         aa:d0:f4:a6:24:ef:5b:f9:ba:f9:39:21:3d:0b:a3:e1:80:58:
         09:88:75:69:01:29:92:c9:96:9e:33:9c:50:0b:a3:74:aa:26:
         0d:29:7b:08:02:1f:7c:a2:45:f7:88:57:80:2c:a7:c3:c7:c3:
         9f:38:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----