Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/RU-lprzacWwlTFZkt8o2IClv8eA.roa
File:                     RU-lprzacWwlTFZkt8o2IClv8eA.roa (raw, json)
Hash identifier:          g2kkA7/DEoZuzD+vhZ0Ksf842gl+a651ySUczpzPRdg=
Subject key identifier:   45:4F:A5:A6:BC:DA:71:6C:25:4C:56:64:B7:CA:36:20:29:6F:F1:E0
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       46BE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RU-lprzacWwlTFZkt8o2IClv8eA.roa
Signing time:             Thu 21 Apr 2022 00:30:11 +0000
ROA not before:           Thu 21 Apr 2022 00:30:11 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18110 (0x46be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 21 00:30:11 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=454FA5A6BCDA716C254C5664B7CA3620296FF1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:cf:5b:d9:8f:a9:c1:5c:17:11:0d:31:d2:
                    30:53:74:0d:fd:d9:60:eb:e1:a5:55:4c:bf:74:4d:
                    08:bd:ce:4e:f2:0f:90:68:4e:e6:41:65:06:d3:43:
                    e9:17:98:10:c5:58:ea:a2:38:d4:e2:07:c7:17:34:
                    65:3b:fa:c3:0e:10:55:8e:54:f5:0c:40:a9:d7:88:
                    83:a3:4b:e6:51:97:e2:8c:22:d8:9b:77:4a:c3:f9:
                    e7:27:a7:9f:09:2b:eb:5c:c4:79:28:00:9a:58:69:
                    c2:48:37:13:cd:b5:77:be:fb:b3:d0:d8:86:37:7a:
                    2e:68:a5:db:72:0b:a6:79:30:fa:dd:35:5d:e0:77:
                    51:df:8c:16:8d:7b:a1:d2:6d:7c:6a:e5:45:ea:21:
                    85:86:53:13:f1:5d:ba:a8:c2:2a:89:24:8b:98:83:
                    2d:0d:4c:ce:5e:a3:6e:06:a8:98:b3:11:1e:5e:c1:
                    b5:f5:c1:52:f5:bc:73:02:d2:52:03:4a:4b:b4:e5:
                    68:33:ee:0c:c5:26:2a:5b:fb:71:4a:c9:d0:59:66:
                    7e:f5:80:85:09:90:c6:92:73:31:3a:4e:53:86:8f:
                    8a:78:f8:fa:1e:21:ac:13:d0:ae:20:73:d5:fc:c5:
                    b8:68:55:a9:49:71:6b:38:62:d1:01:21:48:a0:32:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4F:A5:A6:BC:DA:71:6C:25:4C:56:64:B7:CA:36:20:29:6F:F1:E0
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/RU-lprzacWwlTFZkt8o2IClv8eA.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a9:61:0c:8a:ab:1f:3c:ad:04:a0:4c:44:60:8d:8e:42:ad:
         85:e2:98:1b:89:00:af:12:b4:07:c3:d0:0d:85:65:28:75:82:
         d7:b0:63:e8:6b:0e:c7:f9:5b:d5:51:d0:6b:94:ea:46:3d:80:
         e3:4d:89:01:f1:ed:35:05:15:3d:83:4e:61:f2:bf:8e:2e:bd:
         a9:8b:81:0e:7c:b8:73:4e:0e:12:ba:9f:4a:76:86:d4:b6:8c:
         b4:0a:15:f9:84:6d:bf:0a:6d:d2:57:03:97:eb:7c:d2:ab:b5:
         8a:ce:b9:67:4c:e9:93:3a:49:c5:7d:9a:af:f6:75:99:20:23:
         57:cb:5e:4d:87:b5:ad:4b:bc:62:f1:75:e9:a4:32:5c:e3:9c:
         70:ae:f9:e8:dd:d6:78:60:f1:18:31:dd:aa:c6:4e:09:30:f0:
         ee:48:db:b2:c7:54:43:e8:44:73:65:86:9b:5b:68:00:55:ec:
         52:48:e9:77:db:72:25:63:8f:63:02:b0:18:81:bd:77:ca:b4:
         f7:d5:28:df:61:4c:e5:32:94:be:5c:56:0d:f3:dd:d3:ab:84:
         93:74:a0:4e:9c:c0:69:37:16:b8:7f:74:df:57:c3:4f:c2:5f:
         d4:a5:2a:df:8f:44:31:d5:99:be:58:e3:86:19:a1:cb:d7:cb:
         fa:9e:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----