Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Wwk3LMXVWjfgbWcrmrSDoZimZJs.roa
File:                     Wwk3LMXVWjfgbWcrmrSDoZimZJs.roa (raw, json)
Hash identifier:          LzNBFQkGNp0bI9V7kUNVVxho2pu13PucJ/VMPe8HB+g=
Subject key identifier:   5B:09:37:2C:C5:D5:5A:37:E0:6D:67:2B:9A:B4:83:A1:98:A6:64:9B
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42DF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Wwk3LMXVWjfgbWcrmrSDoZimZJs.roa
Signing time:             Wed 09 Feb 2022 00:30:06 +0000
ROA not before:           Wed 09 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17119 (0x42df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  9 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=5B09372CC5D55A37E06D672B9AB483A198A6649B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:8f:a7:7f:cb:46:37:0c:cf:5b:34:bc:24:
                    54:47:40:d8:5a:d1:2a:14:a8:44:7a:47:02:2a:7e:
                    6e:ca:d7:54:1e:72:24:ad:55:74:b0:6e:81:bf:25:
                    4d:ec:f5:01:82:95:87:d0:45:0d:9d:0e:d8:3d:07:
                    da:81:e9:91:ff:bd:52:5b:7c:1f:f1:20:33:4f:30:
                    fc:cc:7e:1e:78:78:7c:da:9e:1f:f8:9f:24:1d:80:
                    13:5d:85:b9:e1:99:ec:41:68:e0:38:c6:7d:2c:19:
                    72:0f:92:89:92:5f:bc:ab:e7:50:f4:cd:2a:19:c2:
                    2a:7d:0b:b1:d8:0b:37:c4:24:05:7a:57:51:4a:02:
                    43:b7:2a:d5:df:20:36:88:cd:d0:5a:c7:38:96:ce:
                    9f:28:d8:4b:ec:62:6c:58:e0:56:6c:be:83:c4:31:
                    fb:63:bf:87:56:d9:67:3a:ed:11:75:18:8a:1b:2d:
                    3d:40:f9:45:09:3f:39:bd:ea:a2:70:f1:d5:47:26:
                    c9:03:47:d3:f9:b1:40:bb:fe:90:88:3e:d7:c9:4a:
                    10:74:cf:3d:f4:16:51:15:e4:d5:f1:0e:1b:0e:81:
                    a4:86:85:7a:d8:c1:61:f9:a9:88:8e:05:bd:d4:55:
                    2c:ac:c0:45:16:9a:3b:f4:6b:2c:a3:d2:02:11:08:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:09:37:2C:C5:D5:5A:37:E0:6D:67:2B:9A:B4:83:A1:98:A6:64:9B
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Wwk3LMXVWjfgbWcrmrSDoZimZJs.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:7b:94:79:85:82:88:99:a6:54:d7:a4:2f:63:7e:65:3c:1a:
         2d:33:d5:74:ca:68:61:ed:ce:da:72:e8:79:4e:c3:e4:84:44:
         38:1b:5b:b2:20:fd:de:d2:53:af:f6:5a:0e:12:44:b2:2d:58:
         a9:23:0b:bf:63:ed:91:5b:30:5e:e3:86:d6:49:77:7f:51:3c:
         13:63:c1:cd:8d:a1:3a:4a:41:1f:f3:5e:c2:3a:0a:95:63:ec:
         ba:67:7d:3a:28:5c:a0:d5:0c:c2:52:88:66:73:44:bd:cc:36:
         f5:a4:e7:a5:ac:e9:8e:05:26:07:32:36:d0:4b:65:12:d1:f5:
         90:eb:3a:6b:05:c3:95:b5:91:25:39:f9:6a:f3:67:89:ab:b5:
         e2:d1:5b:51:6e:c9:2a:ba:63:55:d7:dd:03:8f:5c:c6:20:f8:
         ba:01:79:d5:22:b8:d2:57:c8:83:76:12:18:8f:87:1a:da:ec:
         41:1b:0a:c1:79:2c:3d:d1:3b:d2:79:46:96:fb:7d:71:fa:a2:
         d1:3e:79:d9:07:d1:34:df:f7:85:26:d3:35:e1:b5:f8:46:c3:
         b8:4e:32:ad:58:30:2f:47:ad:da:8e:61:8a:18:95:53:7a:8f:
         03:de:17:ee:fc:b2:aa:ed:dd:18:6f:24:71:aa:3a:3f:07:fd:
         fe:2a:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----