Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cxUh-0PzcTxzyCoPQlbvQbFtZLM.roa
File:                     cxUh-0PzcTxzyCoPQlbvQbFtZLM.roa (raw, json)
Hash identifier:          YVyAiTd7QM64hMaxHTcIGviiI2Fb/HS4nH50k2b9VJY=
Subject key identifier:   73:15:21:FB:43:F3:71:3C:73:C8:2A:0F:42:56:EF:41:B1:6D:64:B3
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       436E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cxUh-0PzcTxzyCoPQlbvQbFtZLM.roa
Signing time:             Sat 19 Feb 2022 00:30:08 +0000
ROA not before:           Sat 19 Feb 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17262 (0x436e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 19 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=731521FB43F3713C73C82A0F4256EF41B16D64B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:1b:1a:89:2c:f9:cc:c0:aa:e1:76:f6:ba:
                    f6:2e:26:56:b1:35:cc:b7:87:6b:f5:4d:14:26:14:
                    a3:7b:e7:e6:62:d5:63:09:ee:60:b1:5f:34:2a:88:
                    5a:78:0d:cd:94:f9:b3:59:2f:71:e5:c3:62:81:11:
                    f6:35:ba:19:11:a1:e7:fe:42:c2:1e:f8:5f:51:00:
                    c4:57:18:f5:4c:74:88:74:2b:b0:b6:55:4d:77:b2:
                    3d:d2:41:af:89:0c:ca:d2:67:ed:a2:bc:fa:10:95:
                    4c:f5:08:5e:f1:fa:5e:7e:89:5e:38:41:c5:5d:e6:
                    c3:1d:6a:7c:66:ea:d6:11:b5:20:f3:c6:6b:e8:f2:
                    6e:0f:83:ee:b3:45:85:ae:82:43:6a:9b:8c:4a:01:
                    66:58:40:32:0d:db:5c:d8:87:f0:5f:52:d6:d9:7c:
                    80:86:a6:5c:d2:35:dd:ff:ee:0a:91:c3:af:4f:42:
                    41:4c:9a:a2:30:39:23:c5:f4:26:a8:78:88:65:97:
                    63:97:4f:8c:0f:24:a4:31:95:de:4e:1f:d0:36:b0:
                    79:b0:cc:ed:62:db:26:41:f7:14:47:73:f8:f5:b1:
                    34:d7:8e:35:e0:8a:95:32:47:e9:17:32:5f:1b:29:
                    c2:d8:6f:8d:d7:8a:65:80:c6:7b:24:8f:33:fb:a1:
                    dc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:21:FB:43:F3:71:3C:73:C8:2A:0F:42:56:EF:41:B1:6D:64:B3
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cxUh-0PzcTxzyCoPQlbvQbFtZLM.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:bd:4b:88:7b:10:7e:61:fd:1d:dc:c7:68:9d:6f:02:df:63:
         d0:30:99:4b:c7:3a:52:d2:92:7a:4c:6e:9d:92:87:4d:78:56:
         98:fc:9f:a0:1e:9b:09:43:2b:64:b0:64:da:a2:3e:1f:65:84:
         c9:8f:1e:6f:64:b6:c6:8f:f6:54:75:f4:de:67:31:d9:a9:39:
         dc:20:29:a0:41:51:87:67:88:ba:70:76:b3:08:80:68:2f:36:
         0f:6a:cb:5e:17:e4:bf:2d:e7:81:af:19:2d:ac:0d:0e:64:4d:
         e3:0c:53:f3:be:e6:94:5a:8a:6f:6a:84:fe:2d:a9:0a:f0:60:
         0e:2c:d9:4d:ae:26:fa:8a:1b:40:88:4a:ba:fe:f8:ed:aa:52:
         a2:7e:86:a5:63:6a:dd:e2:aa:1b:5f:06:5f:f7:a0:8b:b0:f9:
         db:88:02:cc:95:79:27:16:f1:0f:8b:1f:f0:f3:f9:00:68:a1:
         6a:25:e3:c6:ed:6f:9c:87:9d:8f:4b:f1:79:4c:0d:fd:fd:16:
         9a:4f:79:aa:1f:27:be:e6:42:50:eb:a5:b9:8b:f8:3d:b7:b0:
         22:ac:e7:1f:66:99:c0:e3:b7:56:7a:a5:6a:b4:8f:c0:95:fa:
         e5:3d:56:b7:0e:03:25:8c:b2:af:71:59:45:49:eb:3e:f2:28:
         ca:7a:62:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----