Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/UIGEdK7T6TPCpQ8zzu6IRQ7SUE4.roa
File:                     UIGEdK7T6TPCpQ8zzu6IRQ7SUE4.roa (raw, json)
Hash identifier:          CZGjaeD1dyyJZli/k10EToZciMNw+IrKp4K7XDYuGJc=
Subject key identifier:   50:81:84:74:AE:D3:E9:33:C2:A5:0F:33:CE:EE:88:45:0E:D2:50:4E
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       494A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UIGEdK7T6TPCpQ8zzu6IRQ7SUE4.roa
Signing time:             Sat 04 Jun 2022 00:30:07 +0000
ROA not before:           Sat 04 Jun 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18762 (0x494a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  4 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=50818474AED3E933C2A50F33CEEE88450ED2504E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ae:1b:32:5a:19:cb:46:a6:3f:87:84:95:f9:
                    34:ae:2e:fc:ff:cb:b3:ca:a5:3e:ae:cd:ca:df:c1:
                    a7:e4:eb:dc:1a:b1:be:43:00:52:7e:84:35:cc:d0:
                    67:8b:f1:ee:95:e3:da:c9:5c:14:5d:ba:c9:98:c4:
                    c4:89:3b:69:d4:f5:34:96:66:d9:82:63:1d:4d:28:
                    8e:ee:5e:65:0b:e8:49:39:36:be:d5:ed:bd:ab:2a:
                    ab:e1:2b:c0:c4:86:aa:7e:cf:ea:1e:2d:67:24:41:
                    d3:fb:ed:84:5c:9b:a5:14:2f:cc:6e:7d:9d:c1:fe:
                    ce:ff:37:aa:41:82:2b:64:96:e9:b3:c7:34:f1:6c:
                    28:20:1f:0b:42:e8:f3:d0:b0:ba:82:e4:10:e7:c8:
                    7b:ec:92:27:8d:5f:9f:ab:e2:9c:64:0b:6d:bd:16:
                    ae:f4:f5:a1:19:9e:39:8e:7f:ed:4c:48:67:84:60:
                    d6:69:c6:7f:c3:e0:ad:02:d0:3a:46:03:84:7e:48:
                    ca:93:6f:fd:e1:a2:31:22:38:7a:f8:f8:76:39:bc:
                    99:ee:16:06:5e:6a:ab:13:fa:aa:3b:e9:95:ce:a0:
                    5e:26:df:e8:86:cf:6f:ea:a8:2d:4d:49:cc:55:40:
                    6f:ac:90:20:ca:f6:89:64:cc:0e:fd:38:03:34:6d:
                    56:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:81:84:74:AE:D3:E9:33:C2:A5:0F:33:CE:EE:88:45:0E:D2:50:4E
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UIGEdK7T6TPCpQ8zzu6IRQ7SUE4.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:79:95:32:d8:d7:33:a3:6f:e2:db:73:09:b0:4b:5f:f9:59:
         4d:05:78:9b:95:24:35:2b:a9:d1:a0:fa:a4:f4:1d:aa:1d:c3:
         75:56:df:ca:1f:da:67:28:ae:5a:7f:66:b7:d0:4a:06:29:a1:
         e1:ed:fb:4e:c2:0a:7a:13:b4:a1:05:33:2b:11:b0:56:fb:cf:
         9f:47:d8:ab:ec:33:54:68:23:95:51:8a:50:ed:0c:91:c9:58:
         e4:84:03:b4:d2:94:c5:8d:c9:ca:4e:0e:55:9e:1f:74:4b:e3:
         86:99:a1:21:48:16:3c:55:39:14:a0:35:63:c4:d9:76:42:9e:
         42:06:9f:57:8b:5d:a7:93:07:71:8e:47:8e:49:5b:8b:bc:e7:
         53:28:f3:0d:7b:93:63:93:c4:c6:28:32:a4:fa:fd:15:70:4d:
         7b:ff:97:3b:3d:e2:a2:b8:60:29:01:a5:04:46:08:e3:f5:3d:
         32:0d:27:08:7f:c0:f8:0e:ff:76:1e:d6:0e:3c:fd:da:18:f4:
         7a:6c:f4:11:68:cb:2e:29:01:44:46:1f:f7:53:9e:c7:24:9d:
         cb:0d:cc:41:3c:91:0e:58:e7:cd:aa:1a:af:45:19:df:74:f9:
         27:56:46:f7:94:68:71:89:7b:68:f6:a9:52:da:8a:2a:60:c7:
         6c:21:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----