Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/UVaT7n6nYCHzcunUal0doN7vPGU.roa
File:                     UVaT7n6nYCHzcunUal0doN7vPGU.roa (raw, json)
Hash identifier:          pMP+wwUpSfrdr3SXTit+J12//oIsgwBnYE9QKkLKHeA=
Subject key identifier:   51:56:93:EE:7E:A7:60:21:F3:72:E9:D4:6A:5D:1D:A0:DE:EF:3C:65
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4251
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UVaT7n6nYCHzcunUal0doN7vPGU.roa
Signing time:             Sun 30 Jan 2022 00:30:06 +0000
ROA not before:           Sun 30 Jan 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16977 (0x4251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jan 30 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=515693EE7EA76021F372E9D46A5D1DA0DEEF3C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:9c:40:b1:6c:d5:d4:4a:55:18:e1:ff:36:
                    3a:f2:09:a7:b9:d7:5a:53:6a:47:e2:97:b8:65:5b:
                    f3:83:8b:9d:2b:88:a9:9b:a8:2a:dd:da:b7:cf:7c:
                    5e:c4:28:a7:f0:ac:51:24:48:c8:f7:f8:ad:34:f6:
                    de:9d:cd:a2:9b:ca:ab:db:27:2c:15:ec:73:2a:66:
                    69:45:7b:bc:51:77:07:c0:a2:2f:80:dd:74:36:20:
                    ed:5d:50:97:9f:88:b0:c0:f0:0a:b1:1a:e8:e7:26:
                    af:3d:84:e0:d1:ca:3d:3c:9d:bd:af:3d:94:2f:dd:
                    87:9f:a8:5a:ae:5c:e3:49:11:6d:3f:2c:9e:dd:13:
                    77:56:b3:e8:1d:f8:e3:33:d2:8b:84:92:64:b1:28:
                    2f:f5:57:f5:80:0f:a1:e2:27:0e:1b:e6:33:ee:ac:
                    02:a6:7c:96:c4:8b:92:56:ed:c8:86:0f:bb:a9:64:
                    c7:98:d8:63:94:53:1b:e2:3d:dd:b3:73:69:a6:f2:
                    8f:24:a4:39:cb:68:87:e7:a8:a9:9b:d2:b0:3a:fa:
                    f6:07:f0:e8:e9:e2:eb:ea:83:06:9b:02:a3:8e:13:
                    41:2a:7b:67:c3:5b:fd:c5:d8:06:7e:78:bb:db:55:
                    7f:1c:89:fb:92:26:5a:49:a9:26:8a:fa:e2:66:06:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:56:93:EE:7E:A7:60:21:F3:72:E9:D4:6A:5D:1D:A0:DE:EF:3C:65
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UVaT7n6nYCHzcunUal0doN7vPGU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:8c:bb:12:7e:6f:37:8c:81:55:21:5c:c2:ff:12:bb:cd:8d:
         25:6c:10:fe:65:03:f1:65:69:2b:68:b2:29:3d:ee:84:b7:59:
         a6:bb:67:8d:6c:4a:bb:26:a9:80:c4:9f:d7:4f:9a:1e:83:70:
         bd:b8:f5:e7:ed:33:36:4e:8c:78:02:88:34:dd:58:96:11:5d:
         48:68:e5:b2:6f:2f:23:f8:bd:c6:f0:a3:59:59:6e:95:9c:9f:
         a9:b4:71:d3:d9:84:73:bd:fe:1c:69:4c:f4:5b:36:45:43:04:
         36:3a:91:e5:95:b1:03:a3:9b:8f:0b:4d:6e:11:51:56:de:33:
         1e:19:7f:f1:3b:55:ec:4f:61:a5:00:d4:46:5f:7b:c8:28:ac:
         b8:29:69:b9:7c:08:ae:45:a5:97:21:8c:ff:89:1e:97:8d:96:
         f8:82:fa:ff:6b:61:41:61:b0:de:31:c7:25:78:85:52:0e:30:
         63:13:e6:87:bf:e2:a3:47:b5:80:ec:45:8b:f1:6a:82:33:fe:
         47:ed:e5:b6:5e:46:49:a6:75:8a:aa:49:c9:ad:3e:c7:1c:b5:
         ba:55:3a:39:2a:3a:53:84:e9:70:42:0b:f8:1d:0a:1d:56:f1:
         7b:8b:1f:9a:f5:c1:b0:cb:f4:b1:ef:0d:11:53:05:e6:db:a9:
         e1:33:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----