Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/k7slS6gMZC8Y9nlMhSYBr6uj1hA.roa
File:                     k7slS6gMZC8Y9nlMhSYBr6uj1hA.roa (raw, json)
Hash identifier:          AmPMv9gcHm7WB9W4rJjHaOtpJ0PoXJkVIsUwoLs+hSQ=
Subject key identifier:   93:BB:25:4B:A8:0C:64:2F:18:F6:79:4C:85:26:01:AF:AB:A3:D6:10
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4767
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k7slS6gMZC8Y9nlMhSYBr6uj1hA.roa
Signing time:             Tue 03 May 2022 00:30:09 +0000
ROA not before:           Tue 03 May 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18279 (0x4767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May  3 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=93BB254BA80C642F18F6794C852601AFABA3D610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:f1:10:41:f4:8f:98:4f:e2:e5:07:dd:e8:
                    56:cb:60:01:75:ce:62:e8:3c:8f:ac:08:91:66:2e:
                    24:fa:19:fe:ab:c1:ab:7f:86:0f:a2:d2:dc:f2:da:
                    da:b1:ed:f2:48:6b:0a:19:5d:a6:bf:12:5a:dd:f6:
                    9c:9b:de:7e:ec:fb:13:63:36:dd:2f:8d:39:a9:70:
                    86:8b:41:58:0e:ba:8d:4d:c2:d6:b0:c1:ce:31:ba:
                    7f:a5:94:ad:86:01:07:ea:f5:1f:3b:a5:51:ee:70:
                    0a:ff:be:dc:98:56:7d:ea:d8:74:8a:87:77:d1:49:
                    5c:32:16:94:34:e5:a9:f8:f2:c1:58:8c:b5:45:49:
                    b7:7d:05:7f:27:07:24:3f:56:1f:55:b2:67:a1:9b:
                    05:2b:0f:e0:73:5c:9e:7c:b6:3d:b9:da:ca:8d:7a:
                    14:dc:cf:ad:4d:87:9b:ef:1a:ba:a1:17:a0:b2:d5:
                    34:c0:57:ea:0c:f2:74:e9:8f:88:d4:f5:ed:75:f8:
                    a5:b2:56:d2:cb:6a:90:ee:87:cc:93:d2:f8:85:ae:
                    10:15:0b:78:14:6c:7e:21:34:77:e7:44:d9:e8:80:
                    44:92:99:78:b4:dc:5f:c9:b6:a1:77:52:3d:a0:a4:
                    74:0d:b3:88:e9:5a:78:3b:a2:a5:a0:e8:92:a4:f2:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BB:25:4B:A8:0C:64:2F:18:F6:79:4C:85:26:01:AF:AB:A3:D6:10
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/k7slS6gMZC8Y9nlMhSYBr6uj1hA.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:9a:7f:53:85:1a:4c:c8:90:fe:42:07:6e:b1:85:7f:27:b8:
         6d:c1:4c:77:b6:7b:e2:b7:61:6d:9f:1c:76:4d:c5:c1:98:15:
         90:6a:9d:2b:57:9a:0e:de:e1:0a:3e:b3:7e:7a:da:af:8f:2d:
         c4:af:62:dc:b2:70:1e:16:28:89:71:0b:54:50:06:84:b8:6a:
         df:56:ea:ee:60:35:16:07:17:60:b5:db:4c:2d:dd:6f:ab:23:
         d0:00:7c:a7:17:05:84:d4:4b:f4:25:10:fd:8f:4f:a2:f8:a0:
         4f:9b:26:f2:4b:53:7c:c2:b8:b9:89:a6:c6:2f:4a:15:04:d3:
         a5:1c:74:93:17:03:27:2a:43:0d:96:d2:49:9e:be:d2:c1:d3:
         c1:f8:cf:e9:d3:e9:fe:7f:19:ef:01:17:21:d4:b1:50:04:84:
         ea:e8:91:d0:90:bc:75:5d:0d:70:21:a8:57:32:8a:2a:60:29:
         91:7e:4b:03:3e:23:c3:fc:88:5d:00:e1:63:5a:10:d1:dd:ee:
         57:ff:0d:1d:8e:17:d3:bd:25:78:c3:e4:f9:30:a2:98:c1:cf:
         f6:b4:d2:95:d0:99:63:12:37:6f:55:1b:96:76:b7:d3:06:d7:
         4f:13:79:be:5c:65:10:52:20:5d:9b:de:6f:9f:75:0d:26:a0:
         8f:ac:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----