Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/er39PUnzWhEvZs3MQwIV3NMbVWg.roa
File:                     er39PUnzWhEvZs3MQwIV3NMbVWg.roa (raw, json)
Hash identifier:          N2JsfOOwtl+Tqazz7NMiVesTEFCTYYUX2xQMZxyMDy4=
Subject key identifier:   7A:BD:FD:3D:49:F3:5A:11:2F:66:CD:CC:43:02:15:DC:D3:1B:55:68
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       47C2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/er39PUnzWhEvZs3MQwIV3NMbVWg.roa
Signing time:             Tue 10 May 2022 00:30:06 +0000
ROA not before:           Tue 10 May 2022 00:30:06 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18370 (0x47c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 10 00:30:06 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=7ABDFD3D49F35A112F66CDCC430215DCD31B5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:49:7a:6c:85:e2:42:2b:88:6a:94:be:39:
                    d5:7b:1b:73:d2:b3:74:dc:60:eb:d5:5b:13:14:19:
                    d0:b8:5b:27:f3:2e:c6:6d:9c:28:18:c3:e2:cd:a2:
                    3d:e0:ec:24:e7:a0:36:37:ce:4d:fa:8d:a9:bc:ff:
                    68:37:91:39:4f:08:12:58:58:23:36:5e:47:c1:92:
                    49:25:5d:2a:2d:72:88:77:fe:87:5d:c4:24:b1:38:
                    fe:92:0b:1b:18:a2:55:c5:6e:21:54:89:98:15:55:
                    b2:d0:f5:33:99:ff:b2:2d:aa:62:d2:09:e0:cc:c9:
                    17:17:f4:1e:e6:ca:af:06:9f:43:df:2b:e4:66:66:
                    fb:6c:40:8c:ef:fd:cf:86:32:22:de:2e:14:d8:ea:
                    0f:a5:9d:4a:d2:bb:43:27:03:e3:db:f0:78:47:1c:
                    2f:ea:86:b8:2d:45:1e:a0:7f:65:18:39:02:d0:4d:
                    8f:d6:11:9e:56:15:a3:5c:c7:d6:5b:7b:04:7e:03:
                    cd:07:5a:1d:3a:89:53:f1:cc:3a:ef:08:01:81:0f:
                    e8:75:c4:6c:02:4e:26:57:f4:d8:a0:40:ed:22:2a:
                    ed:5c:cd:a7:a4:09:72:bb:d2:a2:6d:86:50:b1:17:
                    d2:d2:40:d7:fb:b4:d6:d3:bf:e7:80:38:a4:77:01:
                    a9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BD:FD:3D:49:F3:5A:11:2F:66:CD:CC:43:02:15:DC:D3:1B:55:68
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/er39PUnzWhEvZs3MQwIV3NMbVWg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:07:53:2d:06:9e:de:37:1d:39:7e:bb:89:a8:2f:1a:79:
         da:db:d7:ee:72:f9:fb:2f:ba:ac:3b:f1:d6:f9:c2:9a:07:ef:
         55:ac:56:7a:d2:9c:39:07:59:49:fd:d0:87:3f:b1:1d:fa:0a:
         17:5a:17:69:dc:48:86:79:2c:a8:2f:ff:44:95:cf:64:26:4d:
         cf:80:32:21:37:7a:d2:e2:75:36:2a:ac:4f:74:a0:09:ec:92:
         56:f8:94:2e:3e:12:37:09:6a:88:4f:06:07:82:5a:a2:ab:a7:
         b4:ba:bc:b7:1c:f0:eb:cd:0d:64:cb:a8:90:71:a1:2e:93:c0:
         48:6c:be:78:ae:4e:52:3d:85:ae:8e:c3:9b:53:fe:12:bf:08:
         e7:01:ae:1c:28:65:6b:f3:26:2b:56:49:32:8b:35:8d:87:eb:
         3b:e5:13:4f:bc:ac:d9:eb:60:89:ec:29:12:46:aa:28:d0:3c:
         23:1d:51:f6:25:2d:bd:c2:c1:60:d7:6e:a4:37:c8:95:09:11:
         a3:11:de:21:96:0f:da:db:4d:0d:16:a3:de:2f:20:0b:dd:1c:
         4d:f2:4c:e0:f5:3c:9e:b2:05:e8:1d:25:aa:b2:93:01:9d:4b:
         f1:91:cd:b4:1a:02:0c:66:9f:5a:d9:e0:85:b2:47:7f:ac:00:
         ec:a9:49:b1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTAw
MDMwMDZaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDdBQkRGRDNENDlGMzVB
MTEyRjY2Q0RDQzQzMDIxNURDRDMxQjU1NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEQEl6bIXiQiuIapS+OdV7G3PSs3TcYOvVWxMUGdC4WyfzLsZt
nCgYw+LNoj3g7CTnoDY3zk36jam8/2g3kTlPCBJYWCM2XkfBkkklXSotcoh3/odd
xCSxOP6SCxsYolXFbiFUiZgVVbLQ9TOZ/7ItqmLSCeDMyRcX9B7myq8Gn0PfK+Rm
ZvtsQIzv/c+GMiLeLhTY6g+lnUrSu0MnA+Pb8HhHHC/qhrgtRR6gf2UYOQLQTY/W
EZ5WFaNcx9ZbewR+A80HWh06iVPxzDrvCAGBD+h1xGwCTiZX9NigQO0iKu1czaek
CXK70qJthlCxF9LSQNf7tNbTv+eAOKR3AakVAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUer39PUnzWhEvZs3MQwIV3NMbVWgwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9lcjM5UFVueldoRXZaczNNUXdJVjNOTWJWV2cucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAUwDQYJKoZIhvcNAQELBQADggEB
AKRMB1MtBp7eNx05fruJqC8aedrb1+5y+fsvuqw78db5wpoH71WsVnrSnDkHWUn9
0Ic/sR36ChdaF2ncSIZ5LKgv/0SVz2QmTc+AMiE3etLidTYqrE90oAnsklb4lC4+
EjcJaohPBgeCWqKrp7S6vLcc8OvNDWTLqJBxoS6TwEhsvniuTlI9ha6Ow5tT/hK/
COcBrhwoZWvzJitWSTKLNY2H6zvlE0+8rNnrYInsKRJGqijQPCMdUfYlLb3CwWDX
bqQ3yJUJEaMR3iGWD9rbTQ0Wo94vIAvdHE3yTOD1PJ6yBegdJaqykwGdS/GRzbQa
Agxmn1rZ4IWyR3+sAOypSbE=
-----END CERTIFICATE-----