Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/WUfQuJhw5ikKa7KMTOfAr3ifbAA.roa
File:                     WUfQuJhw5ikKa7KMTOfAr3ifbAA.roa (raw, json)
Hash identifier:          CTvG8fBF9uLzGN0xzC96zmHRlG37QRtkHEX1HxUlrug=
Subject key identifier:   59:47:D0:B8:98:70:E6:29:0A:6B:B2:8C:4C:E7:C0:AF:78:9F:6C:00
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4687
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WUfQuJhw5ikKa7KMTOfAr3ifbAA.roa
Signing time:             Sun 17 Apr 2022 00:30:10 +0000
ROA not before:           Sun 17 Apr 2022 00:30:10 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18055 (0x4687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 17 00:30:10 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=5947D0B89870E6290A6BB28C4CE7C0AF789F6C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:19:00:8a:1d:70:dc:40:05:f9:32:d3:b4:
                    6f:a8:df:c6:d4:8e:0b:57:85:ce:1c:f5:3f:a5:e0:
                    db:90:2f:b2:32:c6:bd:db:93:a9:d8:3c:fa:18:aa:
                    51:87:db:3b:21:33:c6:ae:69:a5:78:28:60:c9:e4:
                    f5:99:7f:5d:5d:1a:cc:c8:28:37:ce:fb:50:09:7f:
                    2b:6c:63:af:64:09:e6:9f:ab:15:91:e3:80:95:ec:
                    0b:ba:15:91:af:aa:fb:c6:76:9b:23:3a:f0:b8:7a:
                    fc:00:57:32:2d:3f:7d:b7:5d:bc:e5:e9:e3:73:af:
                    a7:95:f9:0d:2d:27:87:85:17:85:ad:12:fd:83:af:
                    87:ec:c8:ca:1d:25:80:89:01:d1:d8:82:1c:69:0c:
                    f8:f9:81:69:c6:08:2d:71:0c:e0:89:2e:88:63:62:
                    f0:21:78:36:4b:8f:34:cf:58:d9:3b:9a:10:3c:14:
                    be:8d:ef:9c:d5:09:90:5e:a6:8c:77:c2:e6:d7:b9:
                    b1:7e:b5:bb:fb:b9:60:e6:7a:c8:99:e3:85:78:7b:
                    b5:7f:48:c9:d5:61:93:59:a6:6f:1c:34:25:b0:58:
                    4b:18:75:cf:3e:14:82:e0:25:3e:f9:fe:67:09:9e:
                    a8:89:5f:fd:20:d4:eb:bb:bc:7a:4e:43:b7:4d:11:
                    3d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:47:D0:B8:98:70:E6:29:0A:6B:B2:8C:4C:E7:C0:AF:78:9F:6C:00
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WUfQuJhw5ikKa7KMTOfAr3ifbAA.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:44:44:10:12:96:75:90:05:b3:23:46:b7:be:78:f8:c3:14:
         3c:95:3b:f2:38:8f:5b:d7:67:c3:a1:a9:da:bd:e9:a5:65:dd:
         6d:21:78:dd:0b:bf:6d:f3:07:fd:f1:29:99:68:9c:12:10:af:
         b8:1a:55:e9:f8:5a:46:0c:46:c1:f7:8d:79:26:5f:e1:ce:21:
         8a:94:d8:91:9a:17:8c:1f:80:1d:c6:c6:5b:c1:60:88:11:2b:
         4f:bf:c7:24:30:74:8e:e4:11:4a:8c:cc:34:92:14:39:6b:45:
         bf:73:85:d3:df:af:0f:8d:05:11:7e:ac:2b:d9:d1:c9:d9:74:
         7e:ff:b6:18:a1:c1:89:c0:10:6c:72:3d:bf:e6:99:af:6c:70:
         3f:54:39:54:96:f8:fc:ce:fb:98:66:c9:7c:6d:01:22:11:4f:
         4e:af:e0:0f:fe:33:70:9a:0d:70:2f:12:6f:ae:d2:f1:04:e4:
         42:e3:18:95:3e:dc:78:04:13:74:39:2a:1e:56:ba:5d:04:69:
         63:fd:d6:19:37:9b:11:3f:aa:71:1f:79:91:2f:5e:4c:f5:e0:
         0a:ad:bd:77:59:96:2d:aa:c4:0f:93:3d:8f:4e:97:5c:ad:f1:
         51:8d:1b:e3:14:56:eb:68:ee:77:47:ef:23:d7:1a:a7:3a:ee:
         8b:29:9c:8c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRocwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MTcw
MDMwMTBaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDU5NDdEMEI4OTg3MEU2
MjkwQTZCQjI4QzRDRTdDMEFGNzg5RjZDMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW1hkAih1w3EAF+TLTtG+o38bUjgtXhc4c9T+l4NuQL7Iyxr3b
k6nYPPoYqlGH2zshM8auaaV4KGDJ5PWZf11dGszIKDfO+1AJfytsY69kCeafqxWR
44CV7Au6FZGvqvvGdpsjOvC4evwAVzItP323Xbzl6eNzr6eV+Q0tJ4eFF4WtEv2D
r4fsyModJYCJAdHYghxpDPj5gWnGCC1xDOCJLohjYvAheDZLjzTPWNk7mhA8FL6N
75zVCZBepox3wubXubF+tbv7uWDmesiZ44V4e7V/SMnVYZNZpm8cNCWwWEsYdc8+
FILgJT75/mcJnqiJX/0g1Ou7vHpOQ7dNET2/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUWUfQuJhw5ikKa7KMTOfAr3ifbAAwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9XVWZRdUpodzVpa0thN0tNVE9mQXIzaWZiQUEucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAswDQYJKoZIhvcNAQELBQADggEB
AL9ERBASlnWQBbMjRre+ePjDFDyVO/I4j1vXZ8Ohqdq96aVl3W0heN0Lv23zB/3x
KZlonBIQr7gaVen4WkYMRsH3jXkmX+HOIYqU2JGaF4wfgB3GxlvBYIgRK0+/xyQw
dI7kEUqMzDSSFDlrRb9zhdPfrw+NBRF+rCvZ0cnZdH7/thihwYnAEGxyPb/mma9s
cD9UOVSW+PzO+5hmyXxtASIRT06v4A/+M3CaDXAvEm+u0vEE5ELjGJU+3HgEE3Q5
Kh5Wul0EaWP91hk3mxE/qnEfeZEvXkz14AqtvXdZli2qxA+TPY9Ol1yt8VGNG+MU
Vuto7ndH7yPXGqc67ospnIw=
-----END CERTIFICATE-----