Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/mA1kYnulh5ubcL1_s7IT9eYmOeg.roa
File:                     mA1kYnulh5ubcL1_s7IT9eYmOeg.roa (raw, json)
Hash identifier:          bSlfSHg4dk1OGtxwhPZNwzqOi4je8HgCpwcaExZ3F2E=
Subject key identifier:   98:0D:64:62:7B:A5:87:9B:9B:70:BD:7F:B3:B2:13:F5:E6:26:39:E8
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       465D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mA1kYnulh5ubcL1_s7IT9eYmOeg.roa
Signing time:             Thu 14 Apr 2022 00:30:12 +0000
ROA not before:           Thu 14 Apr 2022 00:30:12 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18013 (0x465d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr 14 00:30:12 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=980D64627BA5879B9B70BD7FB3B213F5E62639E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:16:a5:4b:0e:b6:50:3c:c1:fc:14:e4:4e:
                    aa:c4:9d:8d:01:3e:eb:5b:00:9d:db:b1:5c:1e:3d:
                    9b:10:cb:53:cb:1f:4f:d1:98:9b:2c:a6:06:e1:2b:
                    71:eb:92:98:17:33:2b:aa:cd:6e:2b:9a:6e:ab:16:
                    ea:2b:d8:e1:00:85:e3:12:59:99:01:25:dc:77:43:
                    37:49:02:2f:13:97:61:fc:07:d9:2b:db:90:4c:c8:
                    af:3a:0d:3e:30:73:dd:c1:04:89:52:1f:6c:8d:34:
                    c1:3e:d4:b9:39:d6:ec:b6:b5:4d:dc:11:81:5d:66:
                    ed:dd:4b:54:3c:ef:95:2f:79:1c:c9:fc:69:88:7d:
                    85:00:f8:d2:11:fd:51:aa:69:67:e7:b4:43:1f:86:
                    5a:9f:29:d2:62:9f:17:0e:3a:77:5d:cc:3c:87:cc:
                    96:c0:b4:6e:7a:ca:45:db:85:25:d0:4c:5b:86:07:
                    b4:44:ad:c9:32:5a:a9:aa:f8:8a:1a:a4:b0:38:a4:
                    09:61:f4:f1:25:84:0b:95:04:e4:ac:fb:0a:d8:45:
                    b4:2b:0f:26:81:b2:79:b2:fc:64:18:f8:21:2d:f5:
                    86:14:2e:5c:10:44:10:14:92:df:ec:30:41:0f:58:
                    12:1a:88:a9:00:32:68:32:d0:8f:1d:d3:0f:46:73:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0D:64:62:7B:A5:87:9B:9B:70:BD:7F:B3:B2:13:F5:E6:26:39:E8
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mA1kYnulh5ubcL1_s7IT9eYmOeg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:31:fb:02:37:4c:40:27:67:c7:5b:e5:a2:1f:ed:04:44:e0:
         90:5d:64:2b:ba:4f:0f:f5:fa:6d:45:56:3b:7a:47:33:34:ea:
         e5:ab:c8:84:1d:cf:e4:ef:b0:c1:a4:c4:62:81:ee:b1:1e:24:
         49:3d:5e:1e:2f:82:3e:8a:82:c7:07:5b:d9:f1:18:5d:d5:53:
         55:cc:a4:65:94:46:cb:0f:33:63:87:e0:36:22:ee:9a:83:55:
         70:29:ec:46:a7:de:de:d7:38:dd:99:27:b0:01:58:b1:ad:53:
         08:c3:29:9c:e4:bd:25:3b:bd:79:0b:40:ef:99:2f:56:a9:b4:
         65:8c:8b:1e:c5:c9:b9:89:ae:d7:03:53:de:bb:e1:5d:ce:a2:
         3f:eb:ad:48:1c:b5:ea:5b:3e:88:7e:26:2d:fa:4c:33:b4:6d:
         26:4f:99:fc:54:8f:0c:7f:44:5d:8a:b0:9a:2b:43:79:21:ab:
         51:9e:4c:23:19:96:8e:fc:e7:70:27:c1:86:95:0a:f4:4c:94:
         a6:24:27:17:3f:27:31:46:ce:a9:77:9c:bf:1f:86:95:aa:21:
         ea:68:fe:c1:cd:f0:a2:a5:bd:03:84:c8:92:e9:61:e4:de:ba:
         f2:de:a7:93:41:63:f0:86:5d:9c:09:0d:03:fc:e8:36:9a:14:
         d6:4e:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----