Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jr9zouVNo1quXfIx1ZxiNUQpK_w.roa
File:                     jr9zouVNo1quXfIx1ZxiNUQpK_w.roa (raw, json)
Hash identifier:          52KngJXq3Ay/KOtOtrBUr/r9m+L3Y/xZ8cxbHDdfi4Q=
Subject key identifier:   8E:BF:73:A2:E5:4D:A3:5A:AE:5D:F2:31:D5:9C:62:35:44:29:2B:FC
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4495
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jr9zouVNo1quXfIx1ZxiNUQpK_w.roa
Signing time:             Sun 13 Mar 2022 00:30:07 +0000
ROA not before:           Sun 13 Mar 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17557 (0x4495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 13 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=8EBF73A2E54DA35AAE5DF231D59C623544292BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f6:36:c9:ab:e5:ab:ed:77:73:2a:2a:70:e3:
                    82:43:18:07:a9:fa:f1:cf:83:15:34:bc:6c:f3:ff:
                    2c:40:1a:72:70:26:04:95:a3:41:37:b3:1e:d4:41:
                    ec:8c:21:16:02:9b:d9:8d:b5:19:db:e3:9c:3c:61:
                    9b:14:5e:a2:90:29:6f:67:07:27:67:34:07:a9:89:
                    15:7b:55:89:9b:e0:00:42:d2:aa:69:80:86:d8:81:
                    c1:aa:59:30:03:7a:9c:e8:a1:55:c2:54:6c:ad:55:
                    6f:7c:e4:33:e1:18:e8:a2:bf:3e:16:11:05:44:b8:
                    92:41:6d:c0:97:47:b6:4a:78:a8:cc:67:9f:3c:57:
                    18:55:55:e1:53:1b:28:68:32:a7:9d:b8:8d:f1:92:
                    8c:e5:d5:2c:bc:4a:d8:6d:a0:a4:d8:0d:4f:ee:27:
                    0f:c0:f5:98:e3:60:62:bd:eb:e8:53:67:57:1b:27:
                    f6:56:f3:98:a1:26:6d:ac:55:1b:97:a3:42:3d:2e:
                    04:e6:66:6a:ed:96:30:68:d5:bf:11:87:e9:2d:9a:
                    63:20:f9:9e:99:a9:9c:f4:bf:d2:ca:a0:13:b6:f7:
                    b3:fc:d8:fe:83:6a:ae:84:17:70:ad:66:09:52:1b:
                    70:13:bc:53:df:e6:9e:d7:ce:78:d7:bf:86:17:6e:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BF:73:A2:E5:4D:A3:5A:AE:5D:F2:31:D5:9C:62:35:44:29:2B:FC
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jr9zouVNo1quXfIx1ZxiNUQpK_w.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:f3:9e:ba:fc:cf:5d:82:c5:e2:fa:5c:a4:88:84:e9:73:
         a9:c4:03:52:21:ca:9c:af:72:b1:26:df:c4:36:2f:ab:7f:24:
         4e:6a:4f:ee:a9:9a:de:ac:75:3b:62:31:d5:5f:af:75:ff:33:
         81:1b:7b:e6:e4:9e:b1:79:9e:b1:45:bd:71:60:b9:7e:fa:06:
         e2:96:52:5b:7f:71:3f:29:d1:8b:bf:04:58:9c:11:ba:ac:49:
         bf:96:65:8b:9d:6a:71:b6:d3:3f:9b:82:58:11:84:7f:0c:ec:
         d6:d3:2d:55:3f:c2:e4:57:07:3d:b9:ea:7f:b6:ee:aa:4d:35:
         4d:f7:b3:f1:32:0c:0d:67:c3:d7:ec:87:0e:0a:4d:24:8f:3d:
         3f:28:07:42:94:a7:db:f0:29:cc:cf:48:58:1a:63:03:a5:3d:
         2d:97:65:1e:b2:db:87:b1:fb:0c:7f:3d:e3:ef:4f:a6:55:af:
         61:e8:8a:87:f8:fc:9a:bf:c9:f8:f2:8a:a8:9c:93:62:68:30:
         65:cb:0a:b8:f4:97:88:d7:1c:13:f1:57:62:da:3b:65:99:1e:
         ea:e6:62:e0:21:fa:76:27:3d:44:f4:36:a5:ad:a0:fa:44:4f:
         81:a5:78:24:fb:e0:1b:5c:13:20:c3:52:03:8a:15:2b:f0:28:
         0e:e1:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----