Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ie0msZW2PNPtcFLYghEfJDZw1s8.roa
File:                     ie0msZW2PNPtcFLYghEfJDZw1s8.roa (raw, json)
Hash identifier:          vvuAyd+anqpZLaErQq94dErTG923t0Fd+MbPrC9Oscc=
Subject key identifier:   89:ED:26:B1:95:B6:3C:D3:ED:70:52:D8:82:11:1F:24:36:70:D6:CF
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42B5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ie0msZW2PNPtcFLYghEfJDZw1s8.roa
Signing time:             Sun 06 Feb 2022 00:30:06 +0000
ROA not before:           Sun 06 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17077 (0x42b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  6 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=89ED26B195B63CD3ED7052D882111F243670D6CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:35:05:cd:cf:3f:0f:ed:ef:94:60:18:dc:
                    89:b1:f6:8f:03:54:37:5f:97:36:33:be:36:16:8e:
                    50:08:c2:ad:6a:8e:3f:10:6d:03:6c:c0:59:8b:e5:
                    57:71:e9:9a:f0:e9:d4:b9:13:72:9a:d1:67:55:50:
                    d6:07:f7:79:fb:29:ff:64:a1:9f:26:30:7a:53:77:
                    c4:74:8c:cc:a6:c9:1b:3d:67:93:b6:fb:8e:cb:e5:
                    b6:be:e1:f5:2e:eb:19:3b:85:44:a8:d4:ba:3d:c1:
                    05:4a:b0:40:74:37:e8:a7:83:bd:da:79:72:79:f0:
                    af:ad:80:2f:0c:72:a1:eb:c0:cc:7b:ae:e4:d8:73:
                    eb:6d:fb:99:2e:4e:0d:5a:4c:f2:64:27:aa:1c:b8:
                    12:31:5e:13:19:36:15:6e:c0:54:1e:91:09:bf:58:
                    0c:0f:c5:87:b5:a0:8f:d5:a4:d3:1f:80:7a:fd:54:
                    78:55:b7:01:f6:86:e5:69:67:c9:d6:28:3d:a4:ce:
                    eb:5b:24:94:95:10:e5:3c:0a:cf:cc:7b:de:ba:85:
                    bc:5c:88:74:0a:9d:3f:18:7a:62:aa:22:07:72:b7:
                    ce:10:12:74:30:ab:93:ed:51:94:9b:b2:85:c1:d5:
                    d5:dd:9a:54:ae:7d:76:18:11:4a:e8:12:ca:31:a7:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:ED:26:B1:95:B6:3C:D3:ED:70:52:D8:82:11:1F:24:36:70:D6:CF
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ie0msZW2PNPtcFLYghEfJDZw1s8.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:7d:d8:ee:f1:2d:ce:3d:a7:94:40:01:31:49:dc:c4:f8:02:
         32:7b:1a:b3:d7:03:b9:8a:82:eb:76:e7:c0:ba:7d:16:98:34:
         07:76:5b:fb:48:3b:a6:7e:f3:5a:de:68:bb:6d:d4:83:4a:8c:
         92:a1:12:78:50:8c:5c:2e:a4:68:f6:1e:91:3c:f1:2f:a6:2d:
         cf:23:1d:7d:a6:2d:1c:ac:00:db:d5:39:b4:3e:c7:0b:6e:f1:
         9f:8d:66:a9:fa:60:02:5f:37:5c:15:bd:48:32:1e:33:62:ae:
         4f:e1:e6:72:31:d2:0f:fb:7b:4d:1c:30:2f:79:a7:3c:41:69:
         e9:b7:a8:78:1c:38:f3:a9:ef:e5:43:a0:7d:24:23:fe:81:6a:
         b9:a1:4a:f7:ec:fb:21:a5:56:d4:e3:66:e1:f8:2b:05:68:2e:
         4c:9d:46:b2:68:f4:a0:8d:99:c7:6e:04:b3:74:3e:61:ea:4c:
         73:90:71:69:80:63:ac:b9:f4:5e:c2:96:6f:3b:75:df:26:e8:
         8a:cc:d1:7b:3f:0e:2c:58:f7:be:ec:28:14:32:e7:05:19:7a:
         bc:c5:97:4f:e1:7e:4d:25:eb:fc:10:79:61:b9:27:35:27:df:
         be:5e:cb:a5:e7:17:10:6d:74:72:f3:6e:49:19:cf:ac:40:69:
         a1:b4:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----