Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/St-9EF1caLNAgF9Ztkhal_p-_0k.roa
File:                     St-9EF1caLNAgF9Ztkhal_p-_0k.roa (raw, json)
Hash identifier:          loCqr0Y/KkcYAkFLR2AIzqdJNP5IfX/s3w5cmClDxbs=
Subject key identifier:   4A:DF:BD:10:5D:5C:68:B3:40:80:5F:59:B6:48:5A:97:FA:7E:FF:49
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       496D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/St-9EF1caLNAgF9Ztkhal_p-_0k.roa
Signing time:             Mon 06 Jun 2022 00:30:08 +0000
ROA not before:           Mon 06 Jun 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18797 (0x496d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  6 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=4ADFBD105D5C68B340805F59B6485A97FA7EFF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:a2:6b:c0:42:f6:b4:c6:de:eb:8e:68:38:
                    28:34:63:ca:5c:42:10:2d:2b:6c:05:91:c2:1d:da:
                    be:fb:c4:03:c1:7b:45:b6:9c:15:e7:9c:e5:0d:c8:
                    9b:82:34:99:7e:27:8e:66:9e:aa:99:bd:64:ee:33:
                    06:0a:ae:7f:2f:8b:ed:00:45:2c:44:a6:46:94:ac:
                    31:28:23:45:f6:89:12:44:12:e8:f6:6a:c8:8e:d2:
                    95:65:b2:29:8e:72:c9:80:d7:a7:13:26:4a:cb:c3:
                    de:e5:2e:38:77:e9:24:3c:33:3d:9c:d2:1d:25:65:
                    98:37:67:13:6c:19:13:f7:5b:0f:1e:06:8c:2e:03:
                    f1:3d:6f:e1:1e:8d:f2:13:d0:4e:0b:b5:9c:69:07:
                    31:d2:d7:d6:56:43:32:f2:fb:dd:89:00:8c:4f:e7:
                    28:ec:96:27:91:61:95:d9:4f:a8:52:aa:b4:f5:17:
                    f0:68:5c:ae:44:76:2a:f5:66:9a:1b:e1:c5:80:79:
                    af:b6:74:6b:0c:2a:3f:2c:fe:a1:0d:86:0d:b5:2e:
                    62:1c:b4:32:68:2a:ca:5c:de:ee:52:5f:bd:a7:fc:
                    60:ec:9e:3b:67:6e:f7:d4:bd:0e:eb:4f:11:fa:c1:
                    7f:85:04:2e:33:89:37:71:7e:99:c8:79:12:f7:78:
                    3d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DF:BD:10:5D:5C:68:B3:40:80:5F:59:B6:48:5A:97:FA:7E:FF:49
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/St-9EF1caLNAgF9Ztkhal_p-_0k.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:df:2f:e6:f0:f4:fe:59:f1:17:39:ac:95:37:91:a1:9a:e2:
         f8:f4:70:e1:23:7e:b1:fd:8e:63:63:a1:4a:f7:11:da:58:dd:
         69:71:c9:39:03:9d:ce:3b:b3:ad:fe:98:5a:7f:97:38:2a:5f:
         88:9f:29:17:95:1c:d2:8d:6e:a6:35:1b:c5:55:a4:da:cd:22:
         3c:ed:3c:e8:07:0f:fb:2b:fa:7a:fa:e0:37:ef:28:b4:ef:0f:
         12:9e:c9:a7:25:2e:a1:14:33:18:8e:da:cc:71:61:22:63:13:
         e8:67:c7:ca:bc:55:b2:41:b5:49:81:b8:c4:ed:9b:6f:e6:a9:
         29:b3:1e:3c:f4:97:9b:84:f8:30:a9:52:c8:59:67:e2:66:9a:
         17:f2:15:2b:e1:ca:2e:c6:23:f7:4c:4e:90:00:bf:cb:3b:64:
         d7:8c:39:f8:b6:f1:08:4f:ab:64:4d:f6:68:4d:5a:94:45:2e:
         80:06:0e:d8:88:5b:23:2d:a7:33:cb:80:83:9b:72:01:f3:f4:
         cf:c6:ae:ca:81:ca:4e:a0:12:a2:52:a5:73:d7:5f:2a:25:f1:
         dd:8d:c9:d6:86:52:6c:e0:d6:a0:07:c3:1c:70:3b:1b:d4:2e:
         77:75:3d:e3:d5:5c:96:f7:fa:c1:8e:63:7a:e6:5a:41:28:32:
         ca:a1:b6:ac
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDYw
MDMwMDhaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDRBREZCRDEwNUQ1QzY4
QjM0MDgwNUY1OUI2NDg1QTk3RkE3RUZGNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBsKJrwEL2tMbe645oOCg0Y8pcQhAtK2wFkcId2r77xAPBe0W2
nBXnnOUNyJuCNJl+J45mnqqZvWTuMwYKrn8vi+0ARSxEpkaUrDEoI0X2iRJEEuj2
asiO0pVlsimOcsmA16cTJkrLw97lLjh36SQ8Mz2c0h0lZZg3ZxNsGRP3Ww8eBowu
A/E9b+EejfIT0E4LtZxpBzHS19ZWQzLy+92JAIxP5yjslieRYZXZT6hSqrT1F/Bo
XK5Edir1Zpob4cWAea+2dGsMKj8s/qENhg21LmIctDJoKspc3u5SX72n/GDsnjtn
bvfUvQ7rTxH6wX+FBC4ziTdxfpnIeRL3eD2dAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUSt+9EF1caLNAgF9Ztkhal/p+/0kwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9TdC05RUYxY2FMTkFnRjladGtoYWxfcC1fMGsucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
AJHfL+bw9P5Z8Rc5rJU3kaGa4vj0cOEjfrH9jmNjoUr3EdpY3WlxyTkDnc47s63+
mFp/lzgqX4ifKReVHNKNbqY1G8VVpNrNIjztPOgHD/sr+nr64DfvKLTvDxKeyacl
LqEUMxiO2sxxYSJjE+hnx8q8VbJBtUmBuMTtm2/mqSmzHjz0l5uE+DCpUshZZ+Jm
mhfyFSvhyi7GI/dMTpAAv8s7ZNeMOfi28QhPq2RN9mhNWpRFLoAGDtiIWyMtpzPL
gIObcgHz9M/GrsqByk6gEqJSpXPXXyol8d2NydaGUmzg1qAHwxxwOxvULnd1PePV
XJb3+sGOY3rmWkEoMsqhtqw=
-----END CERTIFICATE-----