Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/S2wMOK4ByslsGTTNcoTEP4VqvgI.roa
File:                     S2wMOK4ByslsGTTNcoTEP4VqvgI.roa (raw, json)
Hash identifier:          2moe6aEj9YgeIhdTIkC/vHYJz1OFqwQVLyBk5JHKmIs=
Subject key identifier:   4B:6C:0C:38:AE:01:CA:C9:6C:19:34:CD:72:84:C4:3F:85:6A:BE:02
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       48DE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/S2wMOK4ByslsGTTNcoTEP4VqvgI.roa
Signing time:             Mon 30 May 2022 00:30:07 +0000
ROA not before:           Mon 30 May 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18654 (0x48de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 30 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=4B6C0C38AE01CAC96C1934CD7284C43F856ABE02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:c8:6d:e4:37:e7:24:3c:b8:62:71:42:c6:
                    5a:a3:bc:ae:09:fc:d7:4b:60:19:d3:7e:68:8c:07:
                    71:e5:4e:33:e1:46:8d:76:3a:c0:ac:12:87:9a:ea:
                    60:5d:01:de:07:9f:14:3c:08:12:1f:97:d8:5e:91:
                    96:7a:75:dc:03:c9:6f:21:5b:1b:df:d0:3e:bb:bc:
                    6f:f1:b8:ff:4b:94:68:e0:96:af:1b:ed:3a:2f:02:
                    b6:ff:ab:e1:a4:79:b7:3c:5c:f0:1b:8a:ad:55:bb:
                    b9:f8:c7:f6:28:2f:0c:7d:f9:19:1a:de:5f:f4:32:
                    29:0d:e1:51:73:f3:be:51:f1:58:4c:97:10:80:68:
                    1e:99:af:a5:7e:ab:0a:21:3d:3d:a8:b7:d6:c7:22:
                    d3:60:b9:b5:c2:d1:bf:51:32:54:4e:91:cf:cf:66:
                    32:64:1b:78:2c:14:bb:90:39:32:8b:ff:60:97:54:
                    ce:87:88:2c:90:c1:06:46:1c:2e:b7:3f:3a:d9:c9:
                    32:5d:a7:58:6b:33:66:34:75:6d:89:9d:b1:2e:43:
                    41:d8:b5:2b:55:ed:d9:a4:1d:33:6d:93:72:1b:4d:
                    47:22:44:a9:4a:bf:0d:0e:6e:8f:08:d4:b6:3a:06:
                    a8:83:42:55:c1:f7:1e:2c:78:f1:bc:14:34:05:3d:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6C:0C:38:AE:01:CA:C9:6C:19:34:CD:72:84:C4:3F:85:6A:BE:02
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/S2wMOK4ByslsGTTNcoTEP4VqvgI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:39:27:03:78:7f:cb:ca:03:4e:f7:e5:99:81:a1:44:b4:54:
         7f:e6:e2:6e:bb:0a:44:f2:80:a6:13:96:ef:1f:8d:a3:73:47:
         05:41:4b:4c:10:ea:8a:3b:fb:02:b5:b6:50:78:19:fe:c8:bb:
         d2:3c:2f:64:e6:11:ba:58:d6:3b:9b:b6:cd:45:93:be:51:f4:
         59:93:35:2c:e8:62:8e:b9:dd:9a:50:30:2b:a7:ad:5e:3c:32:
         8b:91:20:f9:94:0d:13:c5:86:80:44:d4:28:81:a6:ac:22:d4:
         05:40:d3:be:49:b9:4a:49:1f:01:1c:49:4c:e1:a0:a1:8e:9c:
         18:8c:1f:93:31:01:31:94:12:53:ab:95:5a:6b:0a:b4:5c:ad:
         c2:f3:c4:c9:57:d5:ae:5a:04:eb:fe:cd:11:f9:0d:0f:d3:3b:
         4a:a4:6b:29:22:7e:dd:b6:37:97:3f:6e:3b:78:23:41:62:c0:
         5e:5d:f3:ac:5e:a4:d4:48:be:40:bb:ef:09:22:82:42:8f:ba:
         20:23:5d:59:8d:91:8a:93:4e:d3:5d:32:34:f9:07:83:ba:8a:
         f5:14:f3:6c:01:51:40:62:5d:ea:5b:89:8e:27:7e:20:1d:84:
         89:ad:5f:5c:57:2f:db:06:74:76:94:44:40:70:e4:ab:e0:f5:
         07:e7:28:e0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MzAw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDRCNkMwQzM4QUUwMUNB
Qzk2QzE5MzRDRDcyODRDNDNGODU2QUJFMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKaMht5DfnJDy4YnFCxlqjvK4J/NdLYBnTfmiMB3HlTjPhRo12
OsCsEoea6mBdAd4HnxQ8CBIfl9hekZZ6ddwDyW8hWxvf0D67vG/xuP9LlGjglq8b
7TovArb/q+Gkebc8XPAbiq1Vu7n4x/YoLwx9+Rka3l/0MikN4VFz875R8VhMlxCA
aB6Zr6V+qwohPT2ot9bHItNgubXC0b9RMlROkc/PZjJkG3gsFLuQOTKL/2CXVM6H
iCyQwQZGHC63PzrZyTJdp1hrM2Y0dW2JnbEuQ0HYtStV7dmkHTNtk3IbTUciRKlK
vw0Obo8I1LY6BqiDQlXB9x4sePG8FDQFPfrPAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUS2wMOK4ByslsGTTNcoTEP4VqvgIwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9TMndNT0s0QnlzbHNHVFROY29URVA0VnF2Z0kucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
ABc5JwN4f8vKA0735ZmBoUS0VH/m4m67CkTygKYTlu8fjaNzRwVBS0wQ6oo7+wK1
tlB4Gf7Iu9I8L2TmEbpY1jubts1Fk75R9FmTNSzoYo653ZpQMCunrV48MouRIPmU
DRPFhoBE1CiBpqwi1AVA075JuUpJHwEcSUzhoKGOnBiMH5MxATGUElOrlVprCrRc
rcLzxMlX1a5aBOv+zRH5DQ/TO0qkaykift22N5c/bjt4I0FiwF5d86xepNRIvkC7
7wkigkKPuiAjXVmNkYqTTtNdMjT5B4O6ivUU82wBUUBiXepbiY4nfiAdhImtX1xX
L9sGdHaUREBw5Kvg9QfnKOA=
-----END CERTIFICATE-----