Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/VpVfDMYobe4AnJ3EtU7KS5ugGFg.roa
File:                     VpVfDMYobe4AnJ3EtU7KS5ugGFg.roa (raw, json)
Hash identifier:          Q0dFwQcuuhyGvBGS3fhbLNvLC8KoCM7syH/qXMhKzAE=
Subject key identifier:   56:95:5F:0C:C6:28:6D:EE:00:9C:9D:C4:B5:4E:CA:4B:9B:A0:18:58
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4592
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VpVfDMYobe4AnJ3EtU7KS5ugGFg.roa
Signing time:             Thu 31 Mar 2022 00:30:06 +0000
ROA not before:           Thu 31 Mar 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17810 (0x4592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 31 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=56955F0CC6286DEE009C9DC4B54ECA4B9BA01858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cb:d8:11:cf:cf:13:7b:31:b4:1f:90:64:00:
                    5a:a7:6b:f4:54:d3:3c:90:65:50:72:e4:09:c3:ab:
                    be:02:52:ec:3a:38:8d:a3:77:75:06:a3:0c:27:45:
                    76:28:2b:41:4e:16:e6:83:49:bd:06:fd:be:50:3e:
                    eb:61:b8:3c:d7:e7:1c:b2:78:60:bb:05:58:b5:cf:
                    09:83:b9:db:43:a3:27:c8:ed:76:de:45:f4:2a:5b:
                    b6:04:2f:fa:27:f9:3e:97:35:2f:de:90:db:60:57:
                    ff:62:b6:a9:ca:b1:a4:b3:cf:7f:71:d1:c8:96:f7:
                    74:f8:c9:56:5c:22:8d:26:aa:d8:50:1f:16:9a:8e:
                    4e:f4:42:e6:4c:97:97:35:e9:45:58:94:2a:29:51:
                    cb:99:ef:74:be:59:57:a0:a7:59:c2:6c:7d:97:74:
                    f6:d3:b3:6d:d5:78:44:96:96:ce:51:da:d0:2a:cd:
                    63:19:61:18:b4:cc:ea:39:b3:d2:dd:17:bd:0c:19:
                    fb:d7:15:96:9a:4b:06:00:93:e9:81:89:38:5b:03:
                    f9:25:a4:3f:69:0c:27:87:86:92:7d:a5:55:4b:a3:
                    42:46:6c:52:7b:37:40:0d:b5:97:87:e1:bd:88:21:
                    90:cd:95:2f:bd:6c:21:83:5d:a8:09:99:f5:fa:30:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:95:5F:0C:C6:28:6D:EE:00:9C:9D:C4:B5:4E:CA:4B:9B:A0:18:58
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/VpVfDMYobe4AnJ3EtU7KS5ugGFg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:68:dd:eb:43:c4:d1:b3:98:de:54:f6:d2:98:af:8d:7e:1e:
         5f:c6:e9:eb:8a:dd:d6:d7:ee:eb:63:58:60:68:65:71:5c:a1:
         b9:9d:ce:34:37:f3:6a:48:98:25:fe:81:51:22:82:b4:9a:a1:
         ce:e7:50:9b:ba:01:9c:b6:25:03:69:11:ea:7a:63:a1:4a:cd:
         2c:1a:8d:fb:47:c2:04:f6:66:1e:66:89:4f:d9:71:3d:76:6a:
         5e:9d:72:ca:6d:ca:70:58:0c:e7:d7:c6:45:1e:29:48:20:71:
         ee:be:ea:e4:ab:b8:2c:43:f3:14:12:c5:60:02:84:fc:cd:eb:
         a7:fd:fe:1c:06:ad:b3:3d:b3:e8:a6:46:4c:49:ad:5f:1c:43:
         d9:c6:d1:27:a1:51:a9:72:37:82:f1:29:6c:f2:16:a0:37:c3:
         7f:9d:cb:60:b7:25:03:b6:d0:cf:3c:3e:2a:8b:77:ef:16:2d:
         08:f3:ef:06:03:8e:92:d9:d2:33:b2:f5:a7:69:55:c1:52:f2:
         74:20:f1:82:bd:e9:d3:52:58:c8:34:74:3c:0a:a5:7d:07:d8:
         4e:3c:39:a0:e7:0b:4b:55:96:6c:bf:2f:23:98:b1:ba:7e:e4:
         18:6a:fe:52:23:7a:35:8a:17:0a:4f:6f:d9:e6:55:a8:96:1b:
         57:11:ea:f4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRZIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMzEw
MDMwMDZaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKDU2OTU1RjBDQzYyODZE
RUUwMDlDOURDNEI1NEVDQTRCOUJBMDE4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYy9gRz88TezG0H5BkAFqna/RU0zyQZVBy5AnDq74CUuw6OI2j
d3UGowwnRXYoK0FOFuaDSb0G/b5QPuthuDzX5xyyeGC7BVi1zwmDudtDoyfI7Xbe
RfQqW7YEL/on+T6XNS/ekNtgV/9itqnKsaSzz39x0ciW93T4yVZcIo0mqthQHxaa
jk70QuZMl5c16UVYlCopUcuZ73S+WVegp1nCbH2XdPbTs23VeESWls5R2tAqzWMZ
YRi0zOo5s9LdF70MGfvXFZaaSwYAk+mBiThbA/klpD9pDCeHhpJ9pVVLo0JGbFJ7
N0ANtZeH4b2IIZDNlS+9bCGDXagJmfX6MNJfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUVpVfDMYobe4AnJ3EtU7KS5ugGFgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9WcFZmRE1Zb2JlNEFuSjNFdFU3S1M1dWdHRmcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA8wDQYJKoZIhvcNAQELBQADggEB
AFRo3etDxNGzmN5U9tKYr41+Hl/G6euK3dbX7utjWGBoZXFcobmdzjQ382pImCX+
gVEigrSaoc7nUJu6AZy2JQNpEep6Y6FKzSwajftHwgT2Zh5miU/ZcT12al6dcspt
ynBYDOfXxkUeKUggce6+6uSruCxD8xQSxWAChPzN66f9/hwGrbM9s+imRkxJrV8c
Q9nG0SehUalyN4LxKWzyFqA3w3+dy2C3JQO20M88PiqLd+8WLQjz7wYDjpLZ0jOy
9adpVcFS8nQg8YK96dNSWMg0dDwKpX0H2E48OaDnC0tVlmy/LyOYsbp+5Bhq/lIj
ejWKFwpPb9nmVaiWG1cR6vQ=
-----END CERTIFICATE-----