Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/hUfxoS8hNd_V0ZZrjYbR6ADThmI.roa
File:                     hUfxoS8hNd_V0ZZrjYbR6ADThmI.roa (raw, json)
Hash identifier:          jI4JnCWL5swx/LE7Scd1gArXb1Iv9lMunmAPlDbAdGY=
Subject key identifier:   85:47:F1:A1:2F:21:35:DF:D5:D1:96:6B:8D:86:D1:E8:00:D3:86:62
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4463
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hUfxoS8hNd_V0ZZrjYbR6ADThmI.roa
Signing time:             Wed 09 Mar 2022 00:36:48 +0000
ROA not before:           Wed 09 Mar 2022 00:36:48 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17507 (0x4463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar  9 00:36:48 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=8547F1A12F2135DFD5D1966B8D86D1E800D38662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:fb:41:79:3b:25:9f:39:9c:03:76:bf:fb:
                    20:ee:8f:44:cb:b2:ee:98:90:a6:d5:a3:0b:66:e3:
                    5d:68:32:b2:0c:de:44:19:84:94:93:f1:19:78:3e:
                    1c:94:bd:13:07:1c:05:b0:a7:6f:8e:f0:97:e8:04:
                    d0:1b:56:05:7b:ee:4f:52:e2:3c:f0:8f:2d:6b:7e:
                    3c:b6:b1:2d:55:e5:e1:93:fc:46:8d:c7:51:bf:9c:
                    fb:05:ba:ee:d2:9f:f8:76:eb:35:c8:bd:54:f5:ab:
                    22:bd:78:53:d1:19:f4:4e:47:69:e3:88:1e:3b:ec:
                    ad:bb:a2:14:43:65:a8:48:97:f7:f7:e0:b4:56:88:
                    86:e3:0a:8f:e9:ff:75:1c:2c:c3:91:a4:16:d6:05:
                    19:96:af:a0:64:33:b6:37:46:a1:41:4f:25:88:ee:
                    e7:97:05:28:a3:42:b5:7b:53:30:f5:42:3b:3a:3c:
                    4d:cd:a0:1d:b7:56:52:b4:e3:3c:47:70:3a:5f:8d:
                    ac:e1:14:0f:5a:24:78:a9:24:6a:98:83:e0:b6:58:
                    a0:48:6b:65:88:aa:45:52:d7:94:b4:33:44:49:ca:
                    04:c2:1c:8f:ca:5a:85:62:61:6c:15:2f:55:26:37:
                    b1:14:0b:40:a9:a5:61:38:0e:36:b8:8a:da:05:1e:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:47:F1:A1:2F:21:35:DF:D5:D1:96:6B:8D:86:D1:E8:00:D3:86:62
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/hUfxoS8hNd_V0ZZrjYbR6ADThmI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:1f:a7:a8:33:a9:65:f7:d9:ab:24:19:c5:d5:a2:23:5e:ce:
         25:d1:fe:6c:ed:24:db:0d:27:e3:bf:a6:70:0d:f4:bc:b7:ea:
         62:65:0d:d8:ae:4b:b6:24:87:8d:a4:01:9f:ee:f6:3a:1c:49:
         bd:bb:d8:3e:2a:a3:b1:42:3c:d2:77:e5:b6:88:ff:37:b1:7f:
         8c:25:a8:f8:49:59:9d:85:cd:f4:af:5c:9b:cb:df:8e:89:b4:
         ff:23:95:a1:eb:7b:29:46:b9:66:00:cf:33:a8:ee:87:c3:3a:
         06:b2:46:d2:aa:bf:ce:e0:02:d2:35:f7:4b:5d:67:8e:75:cd:
         51:93:4b:59:48:49:b7:11:09:02:0f:16:ac:1f:40:35:8a:f8:
         8f:d3:74:f7:de:aa:e0:a5:44:28:d2:d0:06:a4:d5:3b:b3:1d:
         9a:a5:e0:30:01:a8:ba:11:3b:70:79:1c:62:40:68:53:bb:36:
         87:85:d0:52:2f:94:25:0c:72:b1:fe:58:b5:da:01:64:26:c3:
         f8:85:d4:e8:5a:b4:42:40:c9:0a:eb:b2:bc:10:a4:1a:dd:8f:
         bb:dc:06:12:0c:f2:6d:e5:82:2b:b4:ac:62:f1:f5:71:d8:31:
         ad:86:24:d2:76:ab:ef:74:c5:63:58:b3:17:ee:81:6b:f9:36:
         4c:b6:6d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----