Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/SsYFKgulBK4dzrUJR5RIp1LRIck.roa
File:                     SsYFKgulBK4dzrUJR5RIp1LRIck.roa (raw, json)
Hash identifier:          FeSztCwrmwCHdecr56fvWGkNkI1BqnXTWMiE01BUlsU=
Subject key identifier:   4A:C6:05:2A:0B:A5:04:AE:1D:CE:B5:09:47:94:48:A7:52:D1:21:C9
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       49D1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SsYFKgulBK4dzrUJR5RIp1LRIck.roa
Signing time:             Mon 13 Jun 2022 00:30:09 +0000
ROA not before:           Mon 13 Jun 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18897 (0x49d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun 13 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=4AC6052A0BA504AE1DCEB509479448A752D121C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:5b:f1:18:12:57:a3:a7:7d:fe:99:5e:d4:
                    f1:c9:45:7c:33:2c:2d:61:47:8a:30:56:e2:0b:f3:
                    ff:fd:50:0d:aa:6a:41:f5:a1:11:b9:e3:72:eb:79:
                    6d:9d:09:e1:28:2c:6f:8d:26:f4:c6:8d:45:ef:08:
                    91:09:58:d3:ba:64:c0:05:93:5c:09:2e:3d:2f:d5:
                    f9:29:a7:9c:3d:70:f3:0b:5c:68:01:c8:ba:2c:79:
                    e6:cf:d0:b1:2f:84:ca:c2:e0:cc:3e:c6:9b:9e:81:
                    5f:02:c1:6d:da:5e:20:9e:02:74:b0:6b:f0:1d:0e:
                    46:d9:7c:99:3a:bc:3a:7c:81:a7:06:52:bf:2a:d5:
                    b8:15:10:98:d2:c8:e1:38:25:a9:31:a3:ed:37:b3:
                    63:c7:15:ed:d7:08:c0:44:47:d4:6e:49:27:4a:b1:
                    df:c8:b0:42:51:a7:03:c6:1b:ba:3e:ce:26:d0:d6:
                    f2:8b:e3:ed:94:18:20:aa:0b:28:b1:d9:46:7e:f5:
                    23:60:89:b7:35:97:1b:20:42:05:2d:27:3e:a6:4d:
                    55:29:c2:24:3b:ec:07:f3:a4:69:30:4d:b3:58:3b:
                    c9:9b:9d:2c:f3:3d:66:2c:7a:ef:c8:10:ed:56:c3:
                    65:f7:45:af:3c:2b:80:ef:5f:46:ba:67:e2:ac:8d:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C6:05:2A:0B:A5:04:AE:1D:CE:B5:09:47:94:48:A7:52:D1:21:C9
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/SsYFKgulBK4dzrUJR5RIp1LRIck.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ca:da:c1:9b:ee:a8:8d:f3:b0:3d:3c:d0:2c:26:e3:9d:69:
         1b:f1:c3:8a:c5:c0:01:77:dd:4f:b3:72:22:ca:73:a6:d1:f0:
         22:00:31:73:31:c6:05:56:40:51:1c:13:9d:1c:d6:ae:39:c0:
         bf:c8:1b:27:0b:91:cf:63:26:e3:9d:62:59:0c:b8:a8:a0:03:
         ec:bb:76:e1:2a:00:f8:8c:b7:f5:f3:9b:4c:2e:53:30:e9:68:
         21:d0:c6:b6:19:27:dc:38:27:c2:ab:d3:a4:7c:35:0c:a2:c9:
         c2:a8:43:21:82:3b:e1:7a:4c:06:b4:89:02:2a:4d:d0:0b:65:
         a5:6b:96:ea:a1:b5:ce:dd:cb:4f:c8:2b:9c:37:3c:5e:de:f0:
         25:45:01:fe:a2:8b:70:d2:74:dc:19:2f:25:d5:2d:2a:92:33:
         d0:57:0b:22:0a:55:11:ae:2d:6b:cb:05:96:ba:a2:a9:e0:2b:
         0d:df:d6:b8:ef:5a:bd:66:40:af:2f:bf:f7:b1:f9:50:7c:80:
         97:b5:13:88:33:cd:cc:7d:9f:c0:c5:f1:e2:80:8a:6a:a7:8b:
         60:50:d8:18:34:d3:08:b9:41:ae:43:a5:6e:f6:ea:0a:d9:85:
         59:6e:e9:cc:95:e8:e0:1d:41:80:c9:3b:9a:66:b4:e2:8b:49:
         77:22:ee:68
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MTMw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDRBQzYwNTJBMEJBNTA0
QUUxRENFQjUwOTQ3OTQ0OEE3NTJEMTIxQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjj1vxGBJXo6d9/ple1PHJRXwzLC1hR4owVuIL8//9UA2qakH1
oRG543LreW2dCeEoLG+NJvTGjUXvCJEJWNO6ZMAFk1wJLj0v1fkpp5w9cPMLXGgB
yLoseebP0LEvhMrC4Mw+xpuegV8CwW3aXiCeAnSwa/AdDkbZfJk6vDp8gacGUr8q
1bgVEJjSyOE4Jakxo+03s2PHFe3XCMBER9RuSSdKsd/IsEJRpwPGG7o+zibQ1vKL
4+2UGCCqCyix2UZ+9SNgibc1lxsgQgUtJz6mTVUpwiQ77AfzpGkwTbNYO8mbnSzz
PWYseu/IEO1Ww2X3Ra88K4DvX0a6Z+KsjdaJAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUSsYFKgulBK4dzrUJR5RIp1LRIckwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9Tc1lGS2d1bEJLNGR6clVKUjVSSXAxTFJJY2sucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AHfK2sGb7qiN87A9PNAsJuOdaRvxw4rFwAF33U+zciLKc6bR8CIAMXMxxgVWQFEc
E50c1q45wL/IGycLkc9jJuOdYlkMuKigA+y7duEqAPiMt/Xzm0wuUzDpaCHQxrYZ
J9w4J8Kr06R8NQyiycKoQyGCO+F6TAa0iQIqTdALZaVrluqhtc7dy0/IK5w3PF7e
8CVFAf6ii3DSdNwZLyXVLSqSM9BXCyIKVRGuLWvLBZa6oqngKw3f1rjvWr1mQK8v
v/ex+VB8gJe1E4gzzcx9n8DF8eKAimqni2BQ2Bg00wi5Qa5DpW726grZhVlu6cyV
6OAdQYDJO5pmtOKLSXci7mg=
-----END CERTIFICATE-----