Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VCP4aOgZjIKOz1kZS96WiitL9bs.roa
File:                     VCP4aOgZjIKOz1kZS96WiitL9bs.roa (raw, json)
Hash identifier:          gCPrUQ/CpVYisTMXiVO08YYic8Qkk7Bf2FJNlNBbRFA=
Subject key identifier:   54:23:F8:68:E8:19:8C:82:8E:CF:59:19:4B:DE:96:8A:2B:4B:F5:BB
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       478E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VCP4aOgZjIKOz1kZS96WiitL9bs.roa
Signing time:             Fri 06 May 2022 00:30:07 +0000
ROA not before:           Fri 06 May 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18318 (0x478e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May  6 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=5423F868E8198C828ECF59194BDE968A2B4BF5BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:36:5e:e6:3c:d8:57:cd:09:35:85:46:b7:30:
                    5c:05:dc:fe:04:93:fc:23:41:3b:46:de:f2:d5:c4:
                    82:dc:fd:97:a7:8c:7e:e2:87:5f:d5:5a:b2:83:91:
                    8c:14:c8:41:d5:ca:d4:39:e2:26:51:bc:6c:84:a0:
                    a6:59:68:bd:29:4a:ef:40:7c:e2:55:0f:4e:f7:33:
                    e4:de:60:75:15:24:3c:e7:dc:5c:6e:f9:ad:cf:0a:
                    ee:ac:1a:5d:0d:fd:2e:2f:8f:ad:5e:77:ba:9b:ba:
                    b7:3c:6a:88:ab:76:b1:a9:9e:d0:98:4e:cc:d8:5f:
                    b8:26:2a:f3:12:b6:c1:7a:ba:8f:8f:b7:8a:61:fe:
                    12:fd:95:cf:47:94:eb:17:09:54:40:dc:4a:9c:a5:
                    01:bc:b4:6b:5e:9e:02:6c:3e:11:47:8c:2e:a9:3b:
                    d6:9f:86:a4:6f:b2:71:9e:f5:55:c4:2a:45:e8:35:
                    18:77:5c:6c:09:01:aa:9a:a5:b4:f8:6f:85:04:91:
                    9a:44:32:d0:f1:40:6c:a3:bc:39:a8:a2:db:5a:98:
                    94:6c:67:fd:ac:7a:82:7c:f4:1b:74:c7:97:da:c1:
                    99:25:04:4d:04:d5:17:ff:49:85:b0:a9:60:9a:0f:
                    63:bf:5f:64:65:3d:71:72:d5:65:7b:65:5b:58:df:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:23:F8:68:E8:19:8C:82:8E:CF:59:19:4B:DE:96:8A:2B:4B:F5:BB
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VCP4aOgZjIKOz1kZS96WiitL9bs.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d4:c9:6f:fb:dd:9c:aa:91:b1:d2:e4:f4:e1:6c:44:5a:66:
         82:ab:62:9f:e3:33:75:db:0d:92:3d:94:44:2b:0c:23:1d:19:
         72:f4:55:cb:55:7d:8c:a7:85:80:6a:db:c1:96:ab:88:bb:9e:
         97:09:60:1e:19:92:47:d3:a1:74:2f:4f:b5:bc:3d:76:c0:fc:
         af:f8:21:74:c5:03:64:ac:da:95:ef:42:72:0a:8b:07:43:fe:
         32:d8:bb:a6:94:c9:a7:b0:f7:a0:bc:92:11:8f:30:b7:fa:14:
         a7:cb:04:05:18:a7:2a:ce:1e:52:d4:33:e4:cd:3f:0b:b7:0b:
         ef:42:06:7c:39:e3:ea:16:de:9e:ad:31:d1:d6:b3:c5:e7:f1:
         52:90:6b:d3:27:54:27:af:75:e7:d5:d1:f4:7a:ab:2a:81:32:
         d0:f6:f3:17:ef:7d:3b:94:f3:6b:97:7b:7c:6f:0e:da:34:a3:
         f8:00:f4:db:06:1c:2f:11:ea:51:c1:ea:9d:63:2f:e8:1c:89:
         d0:03:63:12:46:b4:29:4b:4c:be:f3:e2:bc:0e:2e:d1:41:53:
         3b:bb:ae:79:77:84:bd:9d:99:7d:f8:6f:88:4b:4d:de:72:d5:
         82:e7:3f:c3:58:3c:2a:ea:3b:5f:4e:13:85:5d:aa:ac:3b:aa:
         5f:57:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----