Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/m2d-WB4lAyH-JPrg3FFZv2XbrFI.roa
File:                     m2d-WB4lAyH-JPrg3FFZv2XbrFI.roa (raw, json)
Hash identifier:          JuTdUzcrvuXMYnKAAiiqlE0KyBzqVuxPQSfoIPdjWYM=
Subject key identifier:   9B:67:7E:58:1E:25:03:21:FE:24:FA:E0:DC:51:59:BF:65:DB:AC:52
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       470C
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/m2d-WB4lAyH-JPrg3FFZv2XbrFI.roa
Signing time:             Wed 27 Apr 2022 00:30:07 +0000
ROA not before:           Wed 27 Apr 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18188 (0x470c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 27 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=9B677E581E250321FE24FAE0DC5159BF65DBAC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c1:1a:0d:c4:43:06:c5:a0:13:e1:6a:56:7f:
                    e9:ce:1b:33:9c:39:6c:54:71:10:4b:ce:bb:e2:2d:
                    58:06:c1:43:60:cd:0a:77:51:d8:b9:b2:63:e7:fc:
                    af:91:69:98:4d:8c:06:9d:5a:ac:2a:be:c9:0c:a8:
                    bd:6c:ea:5f:61:e4:20:2a:ed:1c:51:ec:38:25:dd:
                    98:62:b1:e0:01:7a:9b:38:d4:f9:3f:df:b0:c2:9b:
                    18:8f:81:f0:77:1a:72:cc:e7:1c:98:6a:34:03:f6:
                    21:0f:ab:f9:b5:d2:ff:35:36:4b:1d:83:02:d4:ec:
                    51:9a:76:dd:54:46:6e:61:fa:6d:68:21:d6:a8:84:
                    47:4f:c6:24:a1:a0:7f:98:2e:bb:17:cc:c8:fa:9f:
                    3b:68:99:ad:27:80:6c:7c:f9:60:31:9c:19:c9:3b:
                    a4:ff:de:dd:13:a7:45:f5:48:13:6e:47:77:c3:9d:
                    5c:ee:c8:4b:7c:78:6f:90:b8:12:01:ec:4a:64:3d:
                    52:8e:95:a2:8b:7a:4f:be:43:17:ff:5a:b3:8e:2f:
                    7e:e0:60:88:55:0d:20:40:64:ee:72:cd:f7:83:b6:
                    14:66:7a:68:ae:20:17:07:69:ec:bf:12:e0:30:13:
                    3c:36:a2:e8:3e:f3:8d:09:84:1c:c0:85:70:55:a1:
                    3c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:67:7E:58:1E:25:03:21:FE:24:FA:E0:DC:51:59:BF:65:DB:AC:52
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/m2d-WB4lAyH-JPrg3FFZv2XbrFI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:1c:0f:f2:26:10:3a:4f:e2:b8:e7:b4:6a:bc:80:93:98:ea:
         f1:5a:4c:7c:6f:f0:73:d8:0c:74:4c:d5:28:83:77:46:7a:18:
         b2:c7:ce:79:0f:97:4c:fc:96:f8:1a:14:ec:ca:03:d9:8f:15:
         bf:06:2b:5e:f7:89:6a:b7:2b:ae:4e:93:62:a6:fa:b9:2b:25:
         74:82:0f:e7:6d:19:3b:b5:d1:87:2a:40:5d:4a:df:ad:95:d3:
         33:58:f8:36:b9:4c:17:fb:f5:e9:a8:9f:8b:10:01:55:b7:b0:
         90:7d:01:70:2f:72:f4:91:5b:1d:54:e7:f0:93:7f:9d:f2:46:
         bd:7d:a8:12:a0:51:b6:ec:e3:5c:cf:bc:3f:e7:0f:ca:0a:41:
         57:f3:5a:ef:83:6f:cd:d5:af:60:7a:0b:f7:e6:76:16:18:c0:
         98:08:be:26:a3:de:b7:dd:34:e0:ab:e6:99:aa:c4:17:69:7f:
         76:1c:38:ec:e2:c8:af:f0:b9:32:b4:95:1b:05:8c:6c:b5:50:
         73:16:21:d6:1e:1d:5c:2d:a6:64:b5:3f:a3:57:f7:0b:62:37:
         25:93:de:17:20:31:fc:77:dc:27:0a:d3:12:1c:ee:41:0d:68:
         27:31:a7:e1:a8:df:06:96:0b:69:4e:02:94:af:4b:59:a0:2b:
         4f:e2:98:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----