Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/XK6Ykuba6OOga0y7fQcEvDhoO_g.roa
File:                     XK6Ykuba6OOga0y7fQcEvDhoO_g.roa (raw, json)
Hash identifier:          pYAT8dZ84yCoLkorxCrk92vIITIr6IUpiW/c0gScRks=
Subject key identifier:   5C:AE:98:92:E6:DA:E8:E3:A0:6B:4C:BB:7D:07:04:BC:38:68:3B:F8
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4534
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/XK6Ykuba6OOga0y7fQcEvDhoO_g.roa
Signing time:             Thu 24 Mar 2022 00:30:06 +0000
ROA not before:           Thu 24 Mar 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17716 (0x4534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 24 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=5CAE9892E6DAE8E3A06B4CBB7D0704BC38683BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:e9:60:19:d3:bd:c3:0e:6a:5b:df:0c:63:
                    18:c3:82:cb:c4:c4:2e:e5:a0:ab:a5:93:1f:90:26:
                    7d:ba:15:0e:e7:c1:60:1c:65:d0:e0:ff:4c:1c:e5:
                    8b:af:db:3a:78:30:88:66:4b:53:7d:4e:fe:eb:64:
                    0e:d7:e1:53:26:69:e6:11:74:7f:cb:a7:f1:3a:d5:
                    3d:9d:99:b5:24:28:7c:0c:77:d6:fd:0b:6d:ea:51:
                    6e:d5:33:2c:e3:6e:67:1c:8c:e6:11:5e:50:ea:c0:
                    92:bb:e2:b2:2b:e5:10:ef:34:1c:89:dc:c2:92:f3:
                    37:73:a9:23:31:72:07:b0:ff:16:24:41:7b:2e:e9:
                    06:62:73:d5:f7:9a:33:e9:6b:b7:ff:3c:6b:4a:18:
                    56:40:d4:2f:65:45:f4:31:30:bc:8c:65:25:c6:32:
                    68:c1:d7:4d:e7:14:8f:ca:bd:fb:a6:5a:f1:c6:62:
                    a1:c6:78:b6:e3:96:8a:04:ee:05:31:76:c6:cd:cf:
                    d4:97:1d:9c:ff:a2:13:c0:4f:bd:1a:19:39:ee:4a:
                    fc:cb:98:12:9f:1b:22:43:da:74:56:45:5d:b6:9a:
                    5c:09:ed:64:e9:22:94:71:43:19:28:e2:a3:23:88:
                    d7:3d:e8:84:0f:57:e3:2b:bf:9a:82:68:8f:a0:d2:
                    14:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AE:98:92:E6:DA:E8:E3:A0:6B:4C:BB:7D:07:04:BC:38:68:3B:F8
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/XK6Ykuba6OOga0y7fQcEvDhoO_g.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:05:2c:fc:b3:b3:e5:a2:7e:67:2d:4c:42:18:4e:35:1e:65:
         7e:11:18:e2:9f:5e:87:96:2f:74:83:78:f8:06:48:85:f9:f2:
         b0:69:f1:16:2f:73:74:be:07:c7:d5:fc:df:22:11:c7:d4:2a:
         b9:4e:0d:f7:81:09:a7:00:17:59:2a:a5:f7:e1:f1:d4:79:3e:
         3f:a6:d3:7e:13:14:02:20:26:26:1d:9f:27:43:6f:16:7b:d5:
         9e:1d:00:2b:96:a7:27:3d:cd:bd:b9:6c:c6:ba:62:42:fb:66:
         78:4d:ed:da:33:cc:f2:cd:77:63:fe:e1:b8:4b:9b:55:e7:be:
         ec:2e:ce:af:fb:c1:7c:7d:4a:f1:7d:04:43:df:fb:f0:73:02:
         ff:1b:4a:c2:85:cd:85:68:88:57:16:b2:6c:7d:77:31:f4:f0:
         39:71:f9:36:e1:ae:ae:a9:8d:e2:0d:83:56:8a:c1:f1:03:12:
         3b:ee:29:97:97:dd:b9:ed:8e:f5:d2:97:fe:c1:6f:f1:5a:8f:
         58:39:e5:fe:a6:cd:e2:85:0f:f5:66:2e:da:0d:0a:83:21:87:
         2d:a8:9e:7c:99:aa:f3:5c:6b:9f:97:99:4f:a9:da:10:82:f3:
         7f:87:7a:92:99:e6:ed:d1:1d:04:d5:19:dd:c1:26:83:7d:6d:
         d9:41:db:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----