Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/T9IlS2f5RM-FFvFl6AGaqlDHxMM.roa
File:                     T9IlS2f5RM-FFvFl6AGaqlDHxMM.roa (raw, json)
Hash identifier:          i6YUgmWv4v1sF0ysP2k0orl7uQUOgSTjSTCcGIrUWzI=
Subject key identifier:   4F:D2:25:4B:67:F9:44:CF:85:16:F1:65:E8:01:9A:AA:50:C7:C4:C3
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       46AD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/T9IlS2f5RM-FFvFl6AGaqlDHxMM.roa
Signing time:             Wed 20 Apr 2022 00:30:06 +0000
ROA not before:           Wed 20 Apr 2022 00:30:06 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18093 (0x46ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 20 00:30:06 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=4FD2254B67F944CF8516F165E8019AAA50C7C4C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3d:05:00:f4:1f:57:5b:ec:7d:89:b6:bc:c7:
                    60:f7:f2:93:86:7f:f3:8e:3e:00:20:1b:69:88:c9:
                    9b:15:b0:0c:a9:6e:a7:e2:40:d9:b6:ef:ad:c7:1d:
                    ea:49:e1:4b:30:cd:51:4c:24:ed:73:95:12:4f:6c:
                    b3:e3:3b:8c:ef:59:79:b4:07:67:ec:c1:9a:44:00:
                    bd:a7:41:49:83:bf:68:a2:c4:32:88:e4:13:da:12:
                    7d:3e:fa:d6:aa:c1:4f:ba:4f:e3:89:db:50:fa:4d:
                    59:7a:e8:90:9c:8b:f2:89:46:a0:40:aa:bd:7f:50:
                    e9:37:f8:1e:f5:27:f6:41:e3:0f:38:28:68:e0:a8:
                    a3:32:b5:0f:66:3e:ad:c9:f9:61:27:35:c2:89:f5:
                    4b:a1:8c:5f:a5:36:c1:6c:1c:9d:03:84:3d:22:35:
                    04:9d:c1:d6:2d:46:40:64:ac:12:42:98:70:44:76:
                    5f:54:09:da:3d:d7:7e:91:05:eb:75:a0:fe:e4:9f:
                    46:44:49:2a:79:01:b0:e6:ce:87:66:71:1d:77:02:
                    9e:2f:ea:a1:96:6f:2c:e0:62:0c:49:71:9e:8b:56:
                    78:73:cd:8f:10:61:e2:7a:82:f7:c7:36:60:db:57:
                    c7:32:a3:81:95:83:81:0b:96:06:42:c0:b4:32:a4:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D2:25:4B:67:F9:44:CF:85:16:F1:65:E8:01:9A:AA:50:C7:C4:C3
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/T9IlS2f5RM-FFvFl6AGaqlDHxMM.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:2c:45:a3:d3:93:c9:67:bd:a7:94:80:ec:04:28:b3:07:8c:
         c7:b6:89:dd:5a:87:5e:8c:17:ba:03:b8:5f:a0:6e:1a:89:c9:
         fa:60:28:ac:3f:94:c2:c4:8e:0e:60:6e:7b:eb:20:80:b1:3c:
         9f:b2:27:b7:d8:dc:24:e2:64:18:51:c3:64:91:58:1d:33:5c:
         f9:33:25:f2:9b:19:94:45:7d:b1:58:aa:eb:48:b9:6d:4d:6f:
         03:a8:1e:f9:26:30:f2:e3:44:89:6a:42:91:6f:cc:52:44:43:
         2b:3e:58:66:2b:47:c0:50:0e:00:22:d2:cb:f8:20:e1:bf:5c:
         fc:36:73:61:bb:f4:27:61:a5:dd:ec:83:97:da:7b:e9:ec:4b:
         28:b4:9b:d4:fc:3b:fc:95:7d:18:72:58:14:fd:17:ca:5d:d8:
         3c:1f:e0:6b:0d:43:c9:77:31:33:e1:7d:bd:62:09:8a:ac:8e:
         62:ed:14:cb:88:3e:bd:21:f9:77:00:6a:ae:00:06:27:31:48:
         d0:0c:14:5f:13:ae:42:61:10:3a:c6:8c:9d:80:78:47:2a:ed:
         85:7d:44:3f:51:5f:e2:f0:66:0e:1b:5e:3e:b3:76:57:9b:7c:
         a1:2a:5f:2c:c3:75:40:b3:28:a9:62:bf:49:a6:99:30:9c:92:
         d5:ef:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----