Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/biQmqqvvfE2itleSffrlKsAThd4.roa
File:                     biQmqqvvfE2itleSffrlKsAThd4.roa (raw, json)
Hash identifier:          5YHqWbPhqXOGOWXE1wnrRbhGf+faQFmNYsBTJlZjK9Y=
Subject key identifier:   6E:24:26:AA:AB:EF:7C:4D:A2:B6:57:92:7D:FA:E5:2A:C0:13:85:DE
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       49BF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/biQmqqvvfE2itleSffrlKsAThd4.roa
Signing time:             Sun 12 Jun 2022 00:30:06 +0000
ROA not before:           Sun 12 Jun 2022 00:30:06 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18879 (0x49bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun 12 00:30:06 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=6E2426AAABEF7C4DA2B657927DFAE52AC01385DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:b9:f3:73:68:ba:04:ae:eb:52:9d:46:95:
                    0c:63:6c:4a:55:95:6c:95:a6:9d:16:2e:e0:78:d6:
                    ab:52:05:08:f9:ec:bb:f4:dd:d1:eb:16:88:1e:d7:
                    99:d7:e6:d7:4c:98:a3:db:63:9e:53:91:1a:51:30:
                    0a:0c:ab:7f:9d:eb:f2:28:4f:92:e8:7d:e8:8b:49:
                    3b:81:d9:ba:c9:00:31:0b:ca:54:5a:f9:8d:e8:1a:
                    64:78:ca:53:cd:dd:2a:45:be:a7:a1:44:0b:f4:ea:
                    51:88:0c:fc:6f:ae:fa:7c:74:64:27:07:a5:9d:d6:
                    1d:67:8c:81:0a:0a:78:04:e5:59:4d:e5:49:e8:fa:
                    e9:81:6e:0e:11:87:36:a6:43:1c:29:b1:2e:c1:3c:
                    55:b3:83:0b:fc:ce:67:9b:46:0a:a4:9d:be:9a:c1:
                    b2:14:86:d8:dd:ad:3f:d0:af:8d:09:1c:4c:33:36:
                    52:fe:ea:10:02:38:1a:0c:1d:e9:d8:d0:33:2a:bb:
                    00:d4:7d:6b:82:4b:15:90:49:0e:0d:a9:aa:7f:81:
                    a3:48:b6:24:98:96:27:c5:26:f2:90:8b:3d:36:2c:
                    36:20:58:e9:04:73:f2:62:2f:f2:34:15:31:23:5c:
                    f5:ee:a7:55:18:8d:78:f1:29:2d:dd:69:6b:5b:79:
                    53:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:24:26:AA:AB:EF:7C:4D:A2:B6:57:92:7D:FA:E5:2A:C0:13:85:DE
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/biQmqqvvfE2itleSffrlKsAThd4.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:67:e9:38:e1:a6:b5:41:b6:c8:b2:24:a4:36:b6:f7:ba:98:
         20:7a:58:41:0a:c5:e6:c7:2d:cb:37:f6:d5:14:a9:9c:7b:e6:
         b2:8c:a5:c1:84:77:d0:1b:6f:9b:97:5e:50:f4:ff:bb:9d:e2:
         58:74:e5:f3:0f:c6:b5:92:64:61:28:07:3d:f7:7d:2b:45:9c:
         7a:fe:3f:7b:c5:d5:a1:8e:23:15:93:6d:45:d3:40:ce:ca:4f:
         9b:eb:b6:73:99:4d:7e:64:11:1d:0b:f0:16:cf:81:af:03:fb:
         e5:3d:8b:89:b6:4d:d5:8f:20:e2:47:d0:2e:23:76:02:b4:30:
         b6:01:d7:8b:6d:98:1d:b5:be:48:9c:e0:d4:54:6a:76:c6:9c:
         13:45:98:a0:d3:ff:5c:2c:dc:c4:31:ee:20:24:9e:5a:1c:ce:
         5f:d9:d7:a1:13:0a:2b:e4:bf:62:d5:b5:9b:db:0f:6a:9b:4d:
         ae:ed:1c:40:f5:7d:bd:49:c9:6d:b7:e5:6b:42:4d:12:5c:93:
         e4:9a:b4:69:6b:34:5c:1f:0a:cb:ea:35:0c:f7:15:e1:45:83:
         06:58:e8:87:2e:86:41:51:ab:0c:9f:0d:a3:6a:be:64:b6:6f:
         a6:dc:f6:7f:e9:43:7d:4f:54:e6:76:11:da:c5:23:91:8c:e4:
         f6:32:34:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----