Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/bx-suFAmDduogvSccdp63hxAvtU.roa
File:                     bx-suFAmDduogvSccdp63hxAvtU.roa (raw, json)
Hash identifier:          x78iASM5rCs/5fp+EszTTD7AIbu6yBoPqa/Ek54ySMk=
Subject key identifier:   6F:1F:AC:B8:50:26:0D:DB:A8:82:F4:9C:71:DA:7A:DE:1C:40:BE:D5
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       44A4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bx-suFAmDduogvSccdp63hxAvtU.roa
Signing time:             Mon 14 Mar 2022 00:30:08 +0000
ROA not before:           Mon 14 Mar 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17572 (0x44a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 14 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=6F1FACB850260DDBA882F49C71DA7ADE1C40BED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:59:91:49:6f:4a:57:4e:25:ee:5b:49:a2:
                    49:f7:44:a9:fb:80:8d:21:dc:d9:61:4e:ee:f8:02:
                    81:e6:99:91:96:2d:76:e3:c2:ab:9f:d7:78:b0:ee:
                    9f:b0:91:fc:a5:15:0b:0a:c0:f8:26:6c:36:82:37:
                    86:32:0c:86:2d:66:2e:78:dc:bd:2a:29:f9:67:ec:
                    ce:4b:c4:e5:5b:78:f6:28:de:55:e1:af:e0:3d:de:
                    89:c1:8d:8b:75:c5:cf:e7:88:24:fa:6a:af:c5:c8:
                    dd:74:52:91:0f:1d:f0:cd:72:29:07:b1:ea:d9:8c:
                    41:ef:42:7e:d8:cf:57:d1:29:4c:47:b9:ef:78:29:
                    e6:ce:1c:af:63:fe:5c:94:d6:e6:77:9a:0c:f1:fa:
                    71:94:00:21:79:bd:1b:a2:c5:bf:21:06:f6:c3:55:
                    42:a1:90:6e:ce:06:85:8c:71:8c:c8:62:aa:e6:f3:
                    e8:e5:17:7b:d9:08:48:43:9e:59:b2:7d:4b:72:53:
                    29:11:61:29:ba:0b:29:87:73:53:29:2d:a9:94:06:
                    1d:a6:e1:29:18:78:60:e0:05:0e:fa:19:0b:52:21:
                    ec:7e:1a:c4:e9:4a:6c:6a:ca:85:40:71:a3:cf:85:
                    bf:c5:4e:52:99:02:31:91:0f:e6:66:82:3b:a3:b7:
                    56:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1F:AC:B8:50:26:0D:DB:A8:82:F4:9C:71:DA:7A:DE:1C:40:BE:D5
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/bx-suFAmDduogvSccdp63hxAvtU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:0e:1c:10:42:8a:0e:03:1c:24:f9:18:c6:82:1d:7b:98:c6:
         b4:11:72:f9:31:50:95:3d:d1:a5:af:89:8d:3d:93:fa:af:de:
         63:dc:67:e7:3a:6c:61:40:77:89:59:eb:85:f2:81:93:e3:f3:
         4b:80:6c:6f:fb:76:25:9a:36:b2:64:79:70:7c:c9:ec:94:75:
         dd:96:4c:2e:96:da:16:50:30:fd:e0:21:06:80:b2:b5:fb:2e:
         da:de:6c:c2:2d:b7:3a:d6:09:7d:f2:3f:12:cb:67:85:87:44:
         fe:11:6d:4e:ee:62:ff:ab:98:43:bd:99:04:e4:f9:d1:78:a7:
         42:33:95:a5:12:c2:26:e5:f0:4c:c4:e2:71:04:ac:9f:2d:a0:
         74:f6:58:74:4d:ba:b3:69:cc:0a:9f:00:08:30:9e:61:9b:ab:
         39:0b:d7:26:f6:9b:99:fb:5e:df:52:c3:6a:6d:30:e4:c0:d6:
         bf:6e:11:ae:c6:f5:38:2c:48:43:1c:29:55:b4:86:69:0a:57:
         72:c0:f5:d7:d9:22:66:ce:75:e7:73:4a:bb:7d:12:6d:7c:e8:
         0b:ef:60:f5:3e:cb:f9:80:a6:64:ef:91:ea:cf:f0:ee:4f:64:
         a3:b0:ae:27:ad:fa:61:6e:88:bc:86:ee:d4:8a:04:a8:9a:0d:
         99:83:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----