Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/UpV6bwF2xqf8DsHXnEf81XIcQDI.roa
File:                     UpV6bwF2xqf8DsHXnEf81XIcQDI.roa (raw, json)
Hash identifier:          GtYRzlQyEZ0X7Y/tdfzmdvX0LDZYSMJqT45kk/RSm4o=
Subject key identifier:   52:95:7A:6F:01:76:C6:A7:FC:0E:C1:D7:9C:47:FC:D5:72:1C:40:32
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4854
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UpV6bwF2xqf8DsHXnEf81XIcQDI.roa
Signing time:             Fri 20 May 2022 00:30:10 +0000
ROA not before:           Fri 20 May 2022 00:30:10 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18516 (0x4854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 20 00:30:10 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=52957A6F0176C6A7FC0EC1D79C47FCD5721C4032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:bc:fd:01:81:8a:5c:df:12:c8:76:d9:3b:
                    a6:97:35:e7:4e:bb:e9:a7:fd:50:58:58:97:98:c6:
                    3c:ee:70:6a:e1:b1:09:d1:18:42:97:25:3c:43:2f:
                    85:50:e2:44:23:ab:76:03:99:41:d8:56:34:6d:ac:
                    0d:db:80:dc:40:39:8b:18:0c:07:86:14:ef:28:2c:
                    20:39:39:5d:3e:84:c7:ad:3e:22:bd:80:72:e4:1c:
                    7d:e0:a0:fb:e0:3d:5b:71:f8:67:2f:6f:06:8c:10:
                    e5:03:61:8f:08:f7:26:93:4a:69:39:f3:70:f7:a7:
                    93:e4:54:6d:ce:41:62:67:6a:58:03:da:c9:fc:3e:
                    05:96:15:ff:b6:7e:b7:cf:94:41:aa:07:88:e2:f8:
                    49:f0:84:77:e8:c8:3f:43:c0:25:4c:6e:2f:60:90:
                    00:fb:a4:e6:4b:af:ab:0d:bf:4b:d3:a4:4c:4e:43:
                    cb:a1:7a:7b:e2:6a:86:d4:fb:19:71:f6:bb:99:e3:
                    42:bd:07:fa:3c:b6:79:76:65:ff:5f:2a:9e:b7:04:
                    21:82:99:28:b0:32:58:82:29:c2:b2:67:a4:8b:7e:
                    6b:35:7a:ee:10:27:a3:0d:58:12:e8:ba:be:8d:7c:
                    69:1b:74:b6:7b:88:26:46:2f:6b:f6:51:ae:78:0f:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:95:7A:6F:01:76:C6:A7:FC:0E:C1:D7:9C:47:FC:D5:72:1C:40:32
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UpV6bwF2xqf8DsHXnEf81XIcQDI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:02:3a:cb:7d:06:b8:fc:4a:55:c4:df:0e:83:9a:45:a6:
         ec:8a:c6:ed:4b:da:16:90:31:b1:a8:d2:c5:97:1d:00:15:ef:
         38:02:f5:f5:3d:0a:01:7a:e2:6b:9a:e6:19:7a:d3:b6:51:ae:
         81:1c:10:92:39:7d:81:77:c0:33:ff:95:53:b9:d7:42:53:58:
         cf:83:4d:98:5e:e0:40:02:a5:11:5a:fb:58:b0:60:6a:00:da:
         5f:51:2a:dd:05:a6:c7:b9:fb:83:55:52:e5:e3:e3:a5:eb:0c:
         b7:88:4d:55:d2:9f:7a:71:e7:14:0b:5a:d5:fb:17:f5:36:9d:
         9b:da:d6:09:9c:91:c1:9f:6f:a9:58:bb:ba:a3:eb:ba:91:36:
         99:4e:0a:c1:25:62:95:8a:66:5c:c8:b4:06:3c:51:59:5d:af:
         92:4d:fc:bf:e4:25:35:10:9d:ae:df:f9:58:f2:fe:fc:e6:40:
         88:81:a3:59:e4:5a:73:f6:5e:ff:af:a8:b5:0c:6f:83:ef:d0:
         ea:e7:d8:63:6b:42:f7:69:91:a2:de:6a:82:77:33:0b:05:3c:
         f6:0b:cb:fc:ee:30:ef:de:44:50:70:5a:21:5c:1e:b3:0a:99:
         a6:7f:c2:60:cb:08:36:9f:1c:4a:58:36:b4:38:a4:bd:7d:91:
         63:49:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----