Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/R5wHKJddm1VZQWgW5GLB8010F6U.roa
File:                     R5wHKJddm1VZQWgW5GLB8010F6U.roa (raw, json)
Hash identifier:          CKv/cpQGtBBB9mCGga/rdn5EVM492wUvkyYC9LQFGaY=
Subject key identifier:   47:9C:07:28:97:5D:9B:55:59:41:68:16:E4:62:C1:F3:4D:74:17:A5
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       47B8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/R5wHKJddm1VZQWgW5GLB8010F6U.roa
Signing time:             Mon 09 May 2022 00:30:11 +0000
ROA not before:           Mon 09 May 2022 00:30:11 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18360 (0x47b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May  9 00:30:11 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=479C0728975D9B5559416816E462C1F34D7417A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:fb:94:35:40:1e:55:a7:c1:f4:cc:18:14:
                    e4:63:79:5a:4a:c1:e9:07:2d:ac:df:48:c1:37:d7:
                    e3:df:ad:8b:c0:39:13:93:03:fc:c1:26:76:6a:1a:
                    e4:90:31:42:d6:d3:e8:3d:08:cf:0b:89:c9:1d:e4:
                    68:1b:26:8d:08:25:57:c7:55:a4:99:93:18:8d:1b:
                    4b:09:b6:c7:c3:bd:83:7b:31:de:f9:75:c2:55:bf:
                    cb:93:95:47:16:d5:2a:58:dd:eb:da:65:8e:da:cd:
                    e6:b6:2f:a8:63:f2:66:87:a1:47:29:f1:ce:05:d5:
                    02:a3:97:92:45:94:1f:28:d3:8a:9b:39:24:e8:51:
                    02:8c:62:f6:8b:77:a7:58:60:08:51:38:e5:b1:72:
                    4c:12:7a:0b:dc:fd:fa:cf:92:99:a3:e4:c9:4b:4b:
                    61:4b:11:14:b4:ef:84:9f:98:76:74:2b:81:7e:99:
                    73:b0:0a:97:e2:9a:02:5b:11:36:6c:e8:fa:d0:b4:
                    49:72:da:e7:06:b7:60:fe:da:12:ca:72:c3:d2:7b:
                    40:f3:08:89:2b:69:45:ab:21:88:e0:19:9b:8d:95:
                    d0:37:a9:3f:84:8b:14:a4:78:88:f6:aa:c0:6f:bc:
                    18:85:a0:d0:d1:a6:70:59:ae:ce:19:b0:bf:6a:26:
                    50:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:07:28:97:5D:9B:55:59:41:68:16:E4:62:C1:F3:4D:74:17:A5
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/R5wHKJddm1VZQWgW5GLB8010F6U.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f7:88:20:be:c7:1b:05:d5:55:19:c9:df:59:0a:ce:82:8b:
         4a:a5:1f:82:bd:37:23:f2:31:08:4c:6e:d8:b4:ae:02:72:cb:
         63:57:2f:72:80:f7:7c:b4:81:a9:60:5e:af:14:79:d0:e1:47:
         aa:90:c0:62:51:16:87:42:93:48:af:c8:81:26:d6:e4:88:3a:
         4f:94:7d:f2:09:4c:aa:e3:84:be:6d:ac:23:7f:83:52:ca:dc:
         d1:10:e3:26:22:9e:35:43:a4:a1:f1:b9:eb:80:19:d2:25:c4:
         20:7e:79:2e:30:37:d2:af:7b:47:62:17:da:30:8f:1e:e2:7a:
         cf:14:ea:97:11:22:b7:a9:e2:e4:78:79:32:0b:2c:dc:96:a3:
         1c:c7:4d:6c:c9:1a:89:c0:cf:13:bf:f7:15:46:a0:5c:00:bc:
         d2:47:76:3d:84:50:5c:cf:10:c6:ca:f6:59:6e:e8:43:ec:f8:
         cb:5e:a0:6d:23:2b:5f:31:29:7a:a5:70:90:4e:3c:05:99:f7:
         46:db:96:95:9f:e1:48:5b:2a:1b:19:ef:0c:2b:2e:57:ac:32:
         f8:0d:98:92:c5:eb:3e:4f:70:c9:31:01:a1:6f:69:98:aa:a3:
         69:88:20:70:c7:0a:d4:4d:77:6e:7a:75:9f:18:5c:e7:d1:39:
         be:35:6c:f5
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR7gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MDkw
MDMwMTFaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDQ3OUMwNzI4OTc1RDlC
NTU1OTQxNjgxNkU0NjJDMUYzNEQ3NDE3QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4JvuUNUAeVafB9MwYFORjeVpKwekHLazfSME31+PfrYvAOROT
A/zBJnZqGuSQMULW0+g9CM8Lickd5GgbJo0IJVfHVaSZkxiNG0sJtsfDvYN7Md75
dcJVv8uTlUcW1SpY3evaZY7azea2L6hj8maHoUcp8c4F1QKjl5JFlB8o04qbOSTo
UQKMYvaLd6dYYAhROOWxckwSegvc/frPkpmj5MlLS2FLERS074SfmHZ0K4F+mXOw
CpfimgJbETZs6PrQtEly2ucGt2D+2hLKcsPSe0DzCIkraUWrIYjgGZuNldA3qT+E
ixSkeIj2qsBvvBiFoNDRpnBZrs4ZsL9qJlDbAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUR5wHKJddm1VZQWgW5GLB8010F6UwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9SNXdIS0pkZG0xVlpRV2dXNUdMQjgwMTBGNlUucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
AAT3iCC+xxsF1VUZyd9ZCs6Ci0qlH4K9NyPyMQhMbti0rgJyy2NXL3KA93y0galg
Xq8UedDhR6qQwGJRFodCk0ivyIEm1uSIOk+UffIJTKrjhL5trCN/g1LK3NEQ4yYi
njVDpKHxueuAGdIlxCB+eS4wN9Kve0diF9owjx7ies8U6pcRIrep4uR4eTILLNyW
oxzHTWzJGonAzxO/9xVGoFwAvNJHdj2EUFzPEMbK9llu6EPs+MteoG0jK18xKXql
cJBOPAWZ90bblpWf4UhbKhsZ7wwrLlesMvgNmJLF6z5PcMkxAaFvaZiqo2mIIHDH
CtRNd256dZ8YXOfROb41bPU=
-----END CERTIFICATE-----