Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VDJSmiXQ8eEqxrxEBGU6apYIiU0.roa
File:                     VDJSmiXQ8eEqxrxEBGU6apYIiU0.roa (raw, json)
Hash identifier:          m9w8ijL+aRfLOPJbCcqmzQfjK0fEv2woSVDYU1i5A/E=
Subject key identifier:   54:32:52:9A:25:D0:F1:E1:2A:C6:BC:44:04:65:3A:6A:96:08:89:4D
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4368
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VDJSmiXQ8eEqxrxEBGU6apYIiU0.roa
Signing time:             Sat 19 Feb 2022 00:30:05 +0000
ROA not before:           Sat 19 Feb 2022 00:30:05 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17256 (0x4368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 19 00:30:05 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=5432529A25D0F1E12AC6BC4404653A6A9608894D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:55:f3:60:12:52:e2:7e:77:6f:d6:31:1e:
                    f3:4b:22:87:3f:58:8e:14:d0:4f:a7:2b:78:48:e9:
                    71:bc:49:76:e9:ca:48:e9:85:33:ea:95:8d:e3:33:
                    5d:64:25:c9:c4:ac:48:4c:1d:2d:c0:09:14:ce:4b:
                    8d:d3:5d:33:bc:8e:85:1e:61:4d:d7:ea:92:ec:3a:
                    09:61:ab:ac:70:73:02:7d:a6:7f:fd:94:c6:43:1e:
                    82:31:a2:0b:8d:c1:69:aa:dd:bf:35:a1:4b:c9:c9:
                    f6:5d:68:f0:84:d7:13:d6:6d:82:a4:8e:81:0b:82:
                    d6:f2:7b:54:42:00:e2:65:89:90:e3:88:f2:8d:07:
                    6e:90:ec:ee:dc:68:30:d8:52:4c:5b:b4:f8:86:03:
                    67:86:af:1b:f4:a3:9d:63:12:91:c1:ab:8d:70:99:
                    ae:7a:2b:fd:69:d4:d6:ad:98:e5:5c:1a:0a:ca:ed:
                    0c:c7:00:4b:22:ce:8a:c2:4b:d9:43:67:1d:fa:73:
                    4a:13:7f:86:a0:ea:10:97:4c:b0:f9:f5:42:fc:b4:
                    b2:88:71:e2:20:01:59:01:e0:56:3d:aa:88:f6:3a:
                    81:ba:2f:84:97:db:2c:d2:66:a2:10:78:4f:f5:1f:
                    a6:56:2f:16:56:07:29:14:c5:12:5c:69:6e:01:db:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:32:52:9A:25:D0:F1:E1:2A:C6:BC:44:04:65:3A:6A:96:08:89:4D
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VDJSmiXQ8eEqxrxEBGU6apYIiU0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:fb:96:73:0b:4b:eb:1f:28:7f:03:f1:3f:76:c9:26:d2:3d:
         2c:88:78:fd:17:45:da:3e:0d:08:79:08:9b:df:a1:1e:5b:31:
         4d:f0:3c:f4:62:c6:aa:bc:52:b4:98:39:ac:96:e7:f5:fc:6d:
         ea:df:81:30:98:01:cf:14:74:ba:6e:73:02:a7:f7:ff:31:f3:
         e3:27:b6:32:bb:6a:19:bd:3e:77:80:87:37:ad:d5:b0:19:aa:
         39:a8:74:01:91:0c:d7:91:5c:90:6d:56:f0:bc:9e:cd:f6:39:
         d6:c2:52:03:97:04:6e:f0:23:ae:e9:62:33:9a:f1:9f:99:b5:
         fa:0c:f8:6f:8e:c5:60:c2:a8:b8:83:55:3e:fb:02:2e:13:24:
         d3:84:0b:4d:97:7d:0e:0e:68:0d:87:18:f7:99:89:b7:73:54:
         9b:46:49:ae:c2:0f:33:17:9e:e0:3c:72:f0:d2:a5:a1:73:5e:
         13:d6:ac:9c:a5:a0:bf:84:38:e0:8d:65:23:75:51:60:6f:74:
         ba:b4:c3:a0:3d:b4:bf:f8:64:7e:54:4a:cf:3c:31:d6:6a:34:
         f3:79:53:ba:db:70:12:0a:09:90:70:e2:0f:d8:e9:77:28:45:
         30:01:c6:e1:68:fd:4f:dd:0e:c7:8c:89:aa:1c:7f:fa:84:7d:
         59:02:3e:3b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ2gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMTkw
MDMwMDVaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDU0MzI1MjlBMjVEMEYx
RTEyQUM2QkM0NDA0NjUzQTZBOTYwODg5NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3vFXzYBJS4n53b9YxHvNLIoc/WI4U0E+nK3hI6XG8SXbpykjp
hTPqlY3jM11kJcnErEhMHS3ACRTOS43TXTO8joUeYU3X6pLsOglhq6xwcwJ9pn/9
lMZDHoIxoguNwWmq3b81oUvJyfZdaPCE1xPWbYKkjoELgtbye1RCAOJliZDjiPKN
B26Q7O7caDDYUkxbtPiGA2eGrxv0o51jEpHBq41wma56K/1p1NatmOVcGgrK7QzH
AEsizorCS9lDZx36c0oTf4ag6hCXTLD59UL8tLKIceIgAVkB4FY9qoj2OoG6L4SX
2yzSZqIQeE/1H6ZWLxZWBykUxRJcaW4B2zGvAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUVDJSmiXQ8eEqxrxEBGU6apYIiU0wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9WREpTbWlYUThlRXF4cnhFQkdVNmFwWUlpVTAucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
ADv7lnMLS+sfKH8D8T92ySbSPSyIeP0XRdo+DQh5CJvfoR5bMU3wPPRixqq8UrSY
OayW5/X8berfgTCYAc8UdLpucwKn9/8x8+MntjK7ahm9PneAhzet1bAZqjmodAGR
DNeRXJBtVvC8ns32OdbCUgOXBG7wI67pYjOa8Z+ZtfoM+G+OxWDCqLiDVT77Ai4T
JNOEC02XfQ4OaA2HGPeZibdzVJtGSa7CDzMXnuA8cvDSpaFzXhPWrJyloL+EOOCN
ZSN1UWBvdLq0w6A9tL/4ZH5USs88MdZqNPN5U7rbcBIKCZBw4g/Y6XcoRTABxuFo
/U/dDseMiaocf/qEfVkCPjs=
-----END CERTIFICATE-----