Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ZgRFrtYcXw05CQfCxXvi4AcdqPI.roa
File:                     ZgRFrtYcXw05CQfCxXvi4AcdqPI.roa (raw, json)
Hash identifier:          EAZ6m7ZHzXwdVJvI/mGEzoQjbOv86e4azhcE9Obj5OY=
Subject key identifier:   66:04:45:AE:D6:1C:5F:0D:39:09:07:C2:C5:7B:E2:E0:07:1D:A8:F2
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4824
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZgRFrtYcXw05CQfCxXvi4AcdqPI.roa
Signing time:             Tue 17 May 2022 00:30:06 +0000
ROA not before:           Tue 17 May 2022 00:30:06 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18468 (0x4824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 17 00:30:06 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=660445AED61C5F0D390907C2C57BE2E0071DA8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:c4:12:8f:47:96:0b:27:87:f8:92:5e:29:
                    2c:88:c6:a7:7c:b7:c5:0f:4a:f4:5d:2c:b4:1a:54:
                    59:9c:cd:24:3e:e6:a5:dc:9a:86:76:ca:f9:7d:fd:
                    5b:ab:5b:ee:72:9a:d4:38:9d:b6:ea:16:cb:61:c0:
                    21:a4:48:38:a9:ff:1d:7a:06:aa:4d:db:bc:a0:2f:
                    d2:e2:4d:d5:37:4c:d9:45:69:e9:2a:1b:95:01:6d:
                    8f:42:17:e8:0a:0e:2b:89:c7:e6:bb:4d:61:0d:d7:
                    f0:b5:f3:47:86:c5:f2:da:4a:8d:03:ce:b8:c1:32:
                    40:3a:cd:23:9f:58:ee:84:2b:f6:26:df:b3:b5:04:
                    e8:3b:6b:e9:5c:d4:2b:4a:89:2a:59:1c:bb:46:77:
                    d8:e2:62:17:9d:b3:9f:f2:59:7a:a3:6f:bd:56:2a:
                    96:5e:26:d8:68:95:ae:ff:a5:f9:40:72:d9:67:4a:
                    46:d2:87:2b:e8:8f:bd:bb:d9:e5:7c:5c:82:d5:f2:
                    53:a1:e7:f8:75:09:b1:fd:09:94:85:b6:c5:95:35:
                    a0:40:e3:6c:67:ab:3e:d8:4f:01:6d:96:86:0f:e6:
                    12:94:2a:d8:75:bb:a6:c7:c0:f5:09:17:cf:c6:23:
                    d9:f6:c2:34:4d:30:18:3a:73:b3:cd:02:76:4a:f1:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:04:45:AE:D6:1C:5F:0D:39:09:07:C2:C5:7B:E2:E0:07:1D:A8:F2
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ZgRFrtYcXw05CQfCxXvi4AcdqPI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:bc:65:6e:5f:a5:b5:ba:fb:9b:ec:9c:4a:98:c5:ef:66:b3:
         34:13:92:9e:b1:ff:dd:5d:92:9b:88:c7:68:4a:d7:b9:0a:45:
         04:af:be:f9:3f:e8:77:eb:e2:28:2b:75:c1:85:a2:8c:85:dd:
         36:e9:2d:eb:f0:96:11:3b:23:11:94:33:e6:61:ae:29:f7:f1:
         1f:94:8a:1e:6a:0b:5d:5f:29:20:b1:b5:70:d7:80:63:f9:c4:
         4f:02:10:42:d4:38:58:1e:54:76:90:63:40:50:fd:a1:15:bf:
         6f:bc:65:ac:57:00:b0:61:99:36:28:54:80:cd:4e:68:78:a4:
         42:01:a2:5e:41:b7:2d:1c:45:a8:90:45:a8:63:f6:3f:8a:f3:
         40:3e:6e:ea:b2:f1:d2:12:bd:d5:5c:04:46:9e:90:09:8e:cf:
         dc:86:2f:f9:63:dc:71:18:44:74:57:0b:00:ed:18:c9:b9:66:
         22:4d:0e:c5:a6:5d:9d:22:a1:5f:bf:a2:99:5e:79:61:6b:45:
         fb:90:c8:d7:a0:14:1c:02:d5:7f:d9:ea:31:61:32:97:38:15:
         67:1a:d2:68:e1:a5:a9:c5:f1:3b:a1:97:ad:c3:36:7c:c5:4b:
         ab:3d:f9:08:ee:a2:6d:16:11:ed:67:3b:8b:a6:b0:65:b2:59:
         4d:61:e1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----