Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Uh-y4kn37xx5_gKgaStWpfXU7So.roa
File:                     Uh-y4kn37xx5_gKgaStWpfXU7So.roa (raw, json)
Hash identifier:          IPd5fLJwS7N/BeHc6I6pY0r/E5soTLLwf6VVc03wHVQ=
Subject key identifier:   52:1F:B2:E2:49:F7:EF:1C:79:FE:02:A0:69:2B:56:A5:F5:D4:ED:2A
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4472
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Uh-y4kn37xx5_gKgaStWpfXU7So.roa
Signing time:             Thu 10 Mar 2022 00:36:52 +0000
ROA not before:           Thu 10 Mar 2022 00:36:52 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17522 (0x4472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 10 00:36:52 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=521FB2E249F7EF1C79FE02A0692B56A5F5D4ED2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:c1:c1:81:fc:15:e2:0a:69:98:5e:22:85:
                    97:52:3b:90:a0:42:2a:a7:d1:d3:4d:6c:1d:27:b7:
                    72:36:20:0b:65:bb:c8:5b:85:54:cc:9c:7d:e2:fb:
                    56:28:8b:fe:42:f1:1a:cc:b6:31:8b:f8:da:79:a4:
                    e2:1b:b3:57:bf:ae:91:fe:91:e5:ab:3d:42:54:48:
                    40:6e:74:ac:d3:d0:64:f9:37:26:7c:7b:26:6d:c2:
                    c1:ed:ee:6b:fb:bb:8a:86:e3:32:9c:94:11:74:de:
                    00:19:21:64:6b:d3:42:75:53:a5:42:35:78:5c:d1:
                    d7:d7:b7:e3:2e:47:1e:6f:44:7b:65:f7:cf:44:f7:
                    e6:22:24:6d:62:19:27:7f:b4:a0:c4:0a:c1:1c:95:
                    3d:38:9f:e8:6d:55:c4:92:cd:c6:fd:a4:86:88:41:
                    16:58:89:c5:9e:8f:6a:50:22:ee:21:ab:29:d4:48:
                    fb:d3:79:78:5d:26:e5:2e:a2:fe:9c:41:dc:bd:02:
                    c9:a4:c8:b2:37:2f:78:b6:79:93:49:90:cc:52:d2:
                    3e:df:e5:24:4c:e4:bd:cf:74:40:24:5d:ec:58:e8:
                    15:4a:89:d4:f4:b9:c0:00:3b:54:2f:ba:3c:c6:cd:
                    f0:9f:23:b9:3d:1b:fc:9e:32:c0:6c:05:24:61:59:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1F:B2:E2:49:F7:EF:1C:79:FE:02:A0:69:2B:56:A5:F5:D4:ED:2A
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Uh-y4kn37xx5_gKgaStWpfXU7So.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:21:43:d1:7c:25:b5:95:a2:e3:70:4d:5e:2e:46:0f:34:02:
         71:2c:f8:4b:9f:c7:41:4c:12:1b:7a:54:c3:42:f6:2f:45:1a:
         f6:37:ba:43:54:44:69:36:35:3b:77:52:fe:fc:fe:d8:0a:90:
         47:f0:7f:ca:dd:3b:7a:c5:e3:7e:6f:f7:04:ea:c3:58:36:7e:
         2b:8b:a6:42:c8:37:eb:00:5f:56:9d:3c:4b:e4:9d:30:fa:fb:
         53:d2:7a:bc:a2:cd:ec:4b:7e:92:01:10:62:2f:00:d9:3a:d0:
         56:0c:b9:d3:2e:05:1b:67:cb:eb:ff:3d:fe:6a:28:b7:fa:c1:
         33:dc:47:71:c1:f1:5c:91:91:57:32:1d:45:33:ce:ad:26:79:
         a1:9e:0f:b6:03:04:6e:c3:5f:4a:85:bd:59:b4:22:76:f3:8a:
         3c:0c:c1:80:c3:64:de:7d:70:93:75:9a:b6:31:7a:a1:a6:c9:
         02:07:3a:8b:bb:df:84:1d:db:71:f8:19:e8:b3:34:1a:a5:6f:
         9e:74:94:09:53:33:f7:3c:b6:45:7d:0e:fc:d0:95:e7:53:d8:
         e3:45:8e:6d:49:19:a4:9a:63:2c:94:5c:3d:7b:3b:3e:df:a7:
         ce:a9:f7:e3:41:39:4b:f2:c0:99:15:55:f3:38:80:fd:ad:f3:
         5d:cf:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----