Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/c--uXmxG2e6r1L6p65TXkmKhTkg.roa
File:                     c--uXmxG2e6r1L6p65TXkmKhTkg.roa (raw, json)
Hash identifier:          B/+7wFExDKa/893q1fQT7XOzAxwKepiJV3ZCVE13v9E=
Subject key identifier:   73:EF:AE:5E:6C:46:D9:EE:AB:D4:BE:A9:EB:94:D7:92:62:A1:4E:48
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       427C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/c--uXmxG2e6r1L6p65TXkmKhTkg.roa
Signing time:             Wed 02 Feb 2022 00:30:06 +0000
ROA not before:           Wed 02 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17020 (0x427c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  2 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=73EFAE5E6C46D9EEABD4BEA9EB94D79262A14E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:61:3f:a0:3e:8a:70:93:78:04:90:95:96:
                    a6:e6:9e:b4:b2:c9:ee:75:3c:bf:d7:a6:86:3e:3b:
                    09:a7:06:bb:27:99:84:1a:ac:78:29:ec:6b:b4:71:
                    5c:e0:56:9b:42:40:b3:9b:75:05:6a:22:de:67:45:
                    c6:60:75:06:65:38:40:b3:20:22:91:2c:52:8c:ac:
                    d3:b1:49:39:7b:3e:d1:7f:71:4b:00:41:07:a7:f1:
                    01:61:9f:06:60:79:87:e4:5c:d6:34:67:30:e8:bc:
                    b0:03:cd:69:1e:6d:a3:c1:f4:d3:63:1c:3b:f2:9f:
                    bb:c8:7a:f3:1f:20:bb:b0:6e:43:67:94:83:89:ab:
                    d5:02:6e:0b:e4:ae:4a:18:e7:21:1b:2d:1d:57:e2:
                    cf:1b:22:3f:40:76:52:e1:62:9c:86:f5:a3:38:26:
                    e4:33:9f:ee:5e:d2:fa:ef:85:f8:d8:d1:99:d1:ca:
                    35:fb:75:24:70:d0:ae:eb:7c:89:8c:ad:bb:a1:47:
                    84:e4:b2:eb:da:5f:d9:2e:30:65:91:27:d0:30:19:
                    06:e8:f6:fb:eb:21:49:4e:88:34:1f:0c:fe:e8:b2:
                    b6:6e:68:fe:64:24:07:54:dd:2a:06:a3:47:bf:e4:
                    2b:37:c0:66:ae:13:11:ac:01:63:68:a9:37:5a:26:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EF:AE:5E:6C:46:D9:EE:AB:D4:BE:A9:EB:94:D7:92:62:A1:4E:48
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/c--uXmxG2e6r1L6p65TXkmKhTkg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e7:95:de:01:41:d5:fc:43:f8:a4:4b:b6:e2:eb:1c:8e:d6:
         67:33:96:9d:1d:50:24:9e:a5:2a:f0:47:f7:77:7a:c8:34:24:
         11:9e:e0:b7:98:bf:28:42:4c:d4:43:9f:64:08:2b:e0:89:86:
         10:d2:77:1e:26:67:53:a1:0e:22:93:9d:00:1e:1d:8e:bc:8d:
         ea:48:a1:5b:a4:f3:77:15:73:2e:de:19:49:d8:c9:3e:69:8a:
         30:1e:ba:31:a6:34:34:3d:7f:e6:3e:81:e6:ff:9e:c3:4c:2a:
         4d:51:a8:64:a3:19:0b:43:4c:a9:86:b1:f4:72:46:da:92:be:
         19:b0:41:cf:99:f1:5d:69:b1:c6:30:cb:69:84:59:e0:46:97:
         2c:c3:73:51:d0:97:37:4c:ab:b3:85:80:5e:c5:95:22:3a:ec:
         af:95:af:a8:4d:5b:83:64:35:2a:7b:97:c1:49:04:0c:fe:5e:
         70:73:bc:65:16:09:0a:63:94:b8:98:09:10:da:ba:fb:d6:85:
         89:6c:da:3a:ed:f4:fe:37:4c:ad:b1:1a:7f:61:d0:64:6a:9a:
         cc:42:f2:11:d5:9d:b6:20:de:67:3d:0c:20:9c:09:e0:51:22:
         e1:3b:d7:28:65:83:3b:9c:26:5e:33:e8:a8:2f:a6:29:3e:59:
         5e:0d:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----