Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/isPTc6P-vfgAppTaQyR-ZUEkKC0.roa
File:                     isPTc6P-vfgAppTaQyR-ZUEkKC0.roa (raw, json)
Hash identifier:          p88Q/5/aSVsCdgrc4xrLYAOYTs05QkSSqsOoyzfyoq0=
Subject key identifier:   8A:C3:D3:73:A3:FE:BD:F8:00:A6:94:DA:43:24:7E:65:41:24:28:2D
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4939
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/isPTc6P-vfgAppTaQyR-ZUEkKC0.roa
Signing time:             Fri 03 Jun 2022 00:30:13 +0000
ROA not before:           Fri 03 Jun 2022 00:30:13 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18745 (0x4939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  3 00:30:13 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=8AC3D373A3FEBDF800A694DA43247E654124282D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4f:96:06:13:71:70:2b:f6:62:0f:b3:b8:22:
                    a4:ad:81:5c:d9:2a:b7:b3:b0:00:1a:47:18:76:64:
                    79:f3:40:3f:0a:2f:b6:2f:cb:33:bf:c5:56:2f:b0:
                    c8:ea:d0:23:94:19:f3:f1:69:66:2e:3d:13:a5:d4:
                    65:6f:f3:e3:99:0f:50:08:59:ad:c0:fd:11:2f:e1:
                    dd:ba:b7:e9:91:ad:6e:76:d7:5e:91:bc:c9:a5:92:
                    61:ff:da:b2:82:48:02:49:bc:be:47:32:23:09:b9:
                    d0:b4:71:d1:a1:9d:bf:e7:04:9c:5a:40:ae:a1:0f:
                    27:ec:8b:4f:31:84:30:04:bf:2d:4a:ff:d8:ed:9f:
                    74:92:79:87:96:9d:20:2d:6d:7f:f7:0c:5d:56:f9:
                    92:83:82:d3:8a:12:d3:74:c2:3b:57:b0:c8:43:e6:
                    55:24:78:4d:74:b6:33:c2:5a:c0:9e:7d:c1:9a:04:
                    f6:c8:49:b2:dd:a5:87:72:94:95:83:57:40:9b:c0:
                    ff:24:22:e2:a5:1a:96:0f:df:e2:66:29:53:68:0c:
                    fb:1b:c5:84:b7:0a:cb:9b:f6:f8:c3:a1:8c:f6:f1:
                    a6:81:95:d8:5c:d8:0b:c9:96:6a:4d:28:00:c6:bc:
                    7d:a9:2e:eb:05:ed:85:6d:9d:6e:94:d6:a7:74:a0:
                    62:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C3:D3:73:A3:FE:BD:F8:00:A6:94:DA:43:24:7E:65:41:24:28:2D
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/isPTc6P-vfgAppTaQyR-ZUEkKC0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:95:c7:af:dc:42:77:ef:19:d3:e5:9d:c7:d4:ad:2f:ca:fd:
         23:b3:4d:55:7e:36:b3:37:80:e9:fb:07:cd:92:e7:c0:02:7e:
         db:34:b7:20:70:da:05:05:50:95:b9:9e:09:cd:cb:f2:3d:b1:
         d6:74:2d:ee:02:df:f1:c3:ec:66:52:99:31:e2:f5:b0:0a:aa:
         c7:94:fb:2f:71:f0:01:6a:36:99:63:b3:ca:61:ad:73:d7:64:
         91:8b:8a:e3:77:bd:28:bb:cd:b7:cb:bd:24:85:51:31:3c:3d:
         75:22:0e:06:34:53:a7:63:ca:c7:d3:0c:10:aa:18:bd:06:27:
         ae:f5:1c:a5:58:d2:61:dc:7b:39:6f:d2:b6:fe:cb:7c:bd:1c:
         3c:11:cf:c3:65:11:bd:ed:60:f6:96:a8:cc:5c:bc:07:b3:ff:
         3a:ed:55:ac:cd:08:65:29:a7:d7:9e:ec:a2:12:4d:60:ac:30:
         3f:53:df:38:ae:91:af:cb:94:ba:8c:fc:63:dd:f6:2b:42:bc:
         c1:c4:b3:c3:ee:6d:31:22:fa:41:7d:5d:2a:85:56:f4:ef:23:
         5b:fc:64:33:48:9a:01:f7:f9:74:2c:ac:6d:de:33:74:46:a0:
         fb:24:39:ba:a3:8c:66:7d:ca:46:e4:ee:22:b5:e9:59:6d:4b:
         b6:c6:b2:83
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSTkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA2MDMw
MDMwMTNaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKDhBQzNEMzczQTNGRUJE
RjgwMEE2OTREQTQzMjQ3RTY1NDEyNDI4MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwT5YGE3FwK/ZiD7O4IqStgVzZKrezsAAaRxh2ZHnzQD8KL7Yv
yzO/xVYvsMjq0COUGfPxaWYuPROl1GVv8+OZD1AIWa3A/REv4d26t+mRrW52116R
vMmlkmH/2rKCSAJJvL5HMiMJudC0cdGhnb/nBJxaQK6hDyfsi08xhDAEvy1K/9jt
n3SSeYeWnSAtbX/3DF1W+ZKDgtOKEtN0wjtXsMhD5lUkeE10tjPCWsCefcGaBPbI
SbLdpYdylJWDV0CbwP8kIuKlGpYP3+JmKVNoDPsbxYS3Csub9vjDoYz28aaBldhc
2AvJlmpNKADGvH2pLusF7YVtnW6U1qd0oGJlAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUisPTc6P+vfgAppTaQyR+ZUEkKC0wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9pc1BUYzZQLXZmZ0FwcFRhUXlSLVpVRWtLQzAucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL4wDQYJKoZIhvcNAQELBQADggEB
AESVx6/cQnfvGdPlncfUrS/K/SOzTVV+NrM3gOn7B82S58ACfts0tyBw2gUFUJW5
ngnNy/I9sdZ0Le4C3/HD7GZSmTHi9bAKqseU+y9x8AFqNpljs8phrXPXZJGLiuN3
vSi7zbfLvSSFUTE8PXUiDgY0U6djysfTDBCqGL0GJ671HKVY0mHcezlv0rb+y3y9
HDwRz8NlEb3tYPaWqMxcvAez/zrtVazNCGUpp9ee7KISTWCsMD9T3ziuka/LlLqM
/GPd9itCvMHEs8PubTEi+kF9XSqFVvTvI1v8ZDNImgH3+XQsrG3eM3RGoPskObqj
jGZ9ykbk7iK16VltS7bGsoM=
-----END CERTIFICATE-----