Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/pdsUPUa6UD9tVIphoqZR09AeDLU.roa
File:                     pdsUPUa6UD9tVIphoqZR09AeDLU.roa (raw, json)
Hash identifier:          QD2tK/ofoLXBQf/7QWgkwm54aEEvEDMRP7xDuD1DDeU=
Subject key identifier:   A5:DB:14:3D:46:BA:50:3F:6D:54:8A:61:A2:A6:51:D3:D0:1E:0C:B5
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4262
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pdsUPUa6UD9tVIphoqZR09AeDLU.roa
Signing time:             Mon 31 Jan 2022 00:45:07 +0000
ROA not before:           Mon 31 Jan 2022 00:45:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16994 (0x4262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jan 31 00:45:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=A5DB143D46BA503F6D548A61A2A651D3D01E0CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:82:6f:7c:26:5b:12:2b:fe:63:49:6b:70:d8:
                    a1:8e:d1:68:9c:13:12:7e:cb:5d:33:76:62:28:30:
                    4a:3b:12:94:13:fe:1b:d2:57:96:22:d3:04:7b:1d:
                    67:39:a1:19:3c:1f:87:9c:4a:65:7a:d2:58:ea:de:
                    f8:09:12:ed:4b:74:24:b7:7d:3d:16:42:7a:a3:8e:
                    dc:98:16:a5:ff:93:43:82:b6:05:c4:93:da:81:10:
                    37:43:69:99:06:d3:47:a6:7e:31:66:14:0a:62:92:
                    84:85:47:5c:32:d1:a4:64:34:4c:e7:5f:d5:4b:36:
                    c2:1e:2c:6f:a1:00:cf:73:86:d3:97:26:9b:59:72:
                    7a:1f:a0:7a:61:7b:fd:11:81:54:21:25:a2:05:9b:
                    7b:27:60:27:7b:d9:0d:fc:c4:25:a1:4b:52:73:70:
                    55:7f:8d:06:e2:49:8f:0b:a8:38:c3:d3:0b:85:4b:
                    4d:b0:e9:fa:c6:39:64:47:8b:f4:91:71:5c:63:1b:
                    18:af:82:23:81:e1:5c:05:53:0c:f3:3b:d2:7e:a5:
                    84:e1:19:57:18:16:0a:af:84:c4:a0:b5:0a:f6:2d:
                    75:92:56:b6:e5:94:cc:ac:cd:6c:2b:c0:46:1f:6c:
                    06:55:b2:43:3d:8b:ce:8e:ab:de:63:40:f6:47:eb:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:14:3D:46:BA:50:3F:6D:54:8A:61:A2:A6:51:D3:D0:1E:0C:B5
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/pdsUPUa6UD9tVIphoqZR09AeDLU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:91:86:e6:f3:6c:bd:7e:cd:db:d1:e5:b6:cb:3e:3a:b7:3a:
         fa:d6:92:2c:37:6f:3a:46:77:b0:95:da:5f:09:09:67:10:96:
         e6:dd:6e:40:09:52:c9:0c:83:3c:c1:21:55:43:39:14:a7:63:
         32:43:a6:35:15:9f:e0:18:49:6f:a5:0d:73:e6:16:26:47:ce:
         be:42:3f:34:c7:ef:1a:87:37:78:da:58:7a:be:b2:6a:e7:1e:
         49:62:98:4e:e9:7a:00:92:c8:a2:86:8e:16:85:af:61:70:fe:
         e0:a4:4a:e1:fd:a3:b1:1d:f2:60:f4:2e:7a:42:6b:8b:a4:ac:
         e2:0c:97:79:ae:df:a0:17:7d:ae:f0:a6:2a:0d:76:4b:a2:3a:
         10:6e:61:62:a8:2d:69:4e:f1:07:73:6d:41:7c:e9:2f:fc:08:
         45:58:c7:4e:e1:b0:b1:30:4f:96:96:60:b7:d4:0d:95:8d:76:
         39:82:c1:55:c5:56:26:6e:9c:08:8a:99:b4:c7:52:62:21:4d:
         7a:b7:e7:24:15:a0:c8:98:e1:d5:34:1c:88:a9:94:b5:ae:b7:
         a5:2d:b4:bc:b7:9d:57:27:53:8e:06:a4:82:f5:a4:c2:6f:55:
         f5:90:df:43:d7:13:6c:5d:4b:33:73:6c:42:de:09:87:13:95:
         fe:83:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----