Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/eZYgDqo9yg0sqVwYN3WIGO4Mics.roa
File:                     eZYgDqo9yg0sqVwYN3WIGO4Mics.roa (raw, json)
Hash identifier:          EERNTqyuFMXNmqHKl2dwQOiT0Hz38t/Ma1NMpurJ2js=
Subject key identifier:   79:96:20:0E:AA:3D:CA:0D:2C:A9:5C:18:37:75:88:18:EE:0C:89:CB
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4597
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eZYgDqo9yg0sqVwYN3WIGO4Mics.roa
Signing time:             Thu 31 Mar 2022 00:30:08 +0000
ROA not before:           Thu 31 Mar 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17815 (0x4597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 31 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=7996200EAA3DCA0D2CA95C1837758818EE0C89CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:8f:11:c6:ef:2f:15:d8:8e:fc:6e:cc:3f:
                    74:e5:37:09:08:8d:c5:46:b4:c0:7b:07:fd:b6:7a:
                    ea:7d:b0:6b:3b:0b:79:d7:af:92:e0:3d:86:5a:d4:
                    a5:6f:21:dd:00:31:43:dd:e5:b5:6a:9b:e8:99:9a:
                    03:87:9f:bf:fa:26:63:ca:b6:36:83:a4:9c:aa:89:
                    9f:ea:35:a5:d0:f4:2d:42:9b:90:34:20:4e:19:07:
                    8b:95:4b:53:a9:ef:64:4a:3b:47:0c:c5:2d:c8:84:
                    81:3d:30:68:f7:38:ce:64:88:3b:5a:f3:f7:4b:55:
                    a4:28:e8:f1:09:f7:05:0c:62:4b:dc:ce:de:22:40:
                    21:0d:66:ce:27:64:f2:0a:bb:66:73:fe:37:42:4d:
                    7d:05:51:25:83:c2:14:6a:82:10:b2:27:ed:7a:51:
                    1b:1e:ea:3a:21:8a:88:ca:10:4e:2b:5d:da:53:36:
                    27:2f:86:7c:cd:2a:e0:d1:c6:53:d7:68:ca:27:9c:
                    bd:f0:63:9f:b5:fb:6a:8e:23:98:85:69:c8:84:12:
                    6b:57:41:c9:81:09:a7:e6:5a:96:99:1c:4c:e1:65:
                    9a:b2:dd:d3:26:af:d3:d7:dd:50:e6:f4:a0:8b:b2:
                    da:cd:90:c5:c8:1e:62:4a:1c:19:a8:f5:50:36:7f:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:96:20:0E:AA:3D:CA:0D:2C:A9:5C:18:37:75:88:18:EE:0C:89:CB
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/eZYgDqo9yg0sqVwYN3WIGO4Mics.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:d0:9d:0d:f9:30:97:77:92:0f:f4:0f:4a:2f:4d:88:85:
         5e:0b:8b:a7:78:23:20:5a:80:fb:1e:a7:fb:3c:45:4a:82:f2:
         8a:c9:91:70:c8:11:cd:bd:9c:2f:ac:59:92:2e:21:70:73:5b:
         11:73:68:9e:93:0e:58:b0:c7:45:6f:c5:ec:24:a9:60:c1:d2:
         93:12:f0:48:33:e0:11:e7:52:2a:39:97:63:83:b5:d9:53:1e:
         08:07:77:0b:fb:22:e9:9a:b6:3f:57:7c:9e:64:be:1b:b8:8a:
         40:e8:57:3e:04:6a:0c:e9:2d:08:99:a4:25:c5:16:0e:b4:b2:
         03:80:db:7b:d6:2a:c7:1a:b4:94:b9:50:36:6f:8e:15:39:c6:
         b2:69:16:03:de:17:d5:31:e9:1c:e1:d1:b6:fd:82:80:26:ed:
         ff:89:3a:d1:f0:f5:d0:53:2e:de:28:01:12:7c:0d:5d:7e:4d:
         c3:83:13:bb:30:f6:89:a6:ab:52:3b:ee:b6:2b:5f:e9:53:d2:
         a2:bc:8e:95:63:c0:fd:6c:58:8c:06:48:86:b7:26:ac:fc:92:
         de:f2:3d:16:e7:31:65:5a:42:4a:6e:73:0c:77:4d:ac:45:77:
         65:76:1d:64:2f:77:51:fd:d9:15:b3:04:e2:e7:c4:bb:e9:f6:
         5d:4d:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----