Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/qMA-5IS5HeAXhbR1C7FISHHOSk8.roa
File:                     qMA-5IS5HeAXhbR1C7FISHHOSk8.roa (raw, json)
Hash identifier:          o+8SI/1nt7Abv7j6P8y18l1EchWykmi6dZVwRGTT1Q8=
Subject key identifier:   A8:C0:3E:E4:84:B9:1D:E0:17:85:B4:75:0B:B1:48:48:71:CE:4A:4F
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       496F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qMA-5IS5HeAXhbR1C7FISHHOSk8.roa
Signing time:             Mon 06 Jun 2022 00:30:09 +0000
ROA not before:           Mon 06 Jun 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18799 (0x496f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  6 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=A8C03EE484B91DE01785B4750BB1484871CE4A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:19:69:d1:ca:d8:d4:b7:02:e7:53:28:1d:
                    26:20:c9:6f:62:93:c6:7c:48:14:c5:45:79:0b:9a:
                    2e:89:f1:e9:b2:1f:84:a7:13:2d:2c:e7:8b:7e:2b:
                    16:d0:6a:66:4e:88:e6:40:45:00:a8:83:d6:57:af:
                    7b:1d:72:cf:10:d0:2c:58:eb:2b:79:9f:d3:00:d4:
                    5f:3c:47:7c:36:8a:b8:df:d7:56:4d:62:33:d8:03:
                    4e:31:6e:fe:85:42:45:ed:04:9b:34:77:e7:2b:a4:
                    c5:f7:56:b1:cf:04:8d:97:24:35:01:6b:63:46:0b:
                    e6:21:be:18:4e:5f:12:8b:eb:fc:40:88:2f:a9:95:
                    23:f0:75:e6:22:1c:ad:37:5d:a2:0b:42:e8:c4:27:
                    4d:02:b1:71:44:b1:c0:e3:da:b8:80:b6:66:22:cb:
                    51:e8:67:93:54:7f:af:d7:fb:9f:2f:41:2b:7a:b5:
                    03:fc:1c:47:ed:40:2a:4b:fc:8b:01:2c:5c:fb:41:
                    49:6b:b2:05:34:b2:f2:f5:92:3c:76:de:f6:f9:be:
                    7e:77:7c:26:7f:b5:2e:22:52:35:69:26:e0:9c:57:
                    c3:e3:a9:a6:0d:93:f8:1a:17:96:7e:9b:5b:b7:3b:
                    a7:70:3f:e2:65:db:e5:a6:61:f7:71:b1:1f:2d:63:
                    ce:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C0:3E:E4:84:B9:1D:E0:17:85:B4:75:0B:B1:48:48:71:CE:4A:4F
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qMA-5IS5HeAXhbR1C7FISHHOSk8.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:0a:9c:fb:bb:bf:1f:d7:25:83:d0:5b:75:bf:68:ab:5d:17:
         bf:0b:8f:45:fe:86:a4:03:bd:0c:99:e3:ca:f2:d6:26:2d:05:
         ae:50:97:be:2d:b0:fb:bc:f5:b8:da:60:08:20:99:1c:c6:7f:
         40:d8:71:95:50:83:d0:2d:9d:ec:c2:96:46:4d:6e:fa:a3:25:
         89:01:eb:56:10:a5:ec:f6:79:c1:90:35:5d:b9:38:fa:07:0b:
         3d:b8:4f:c7:1e:50:3f:3a:76:40:01:cd:a2:84:e1:64:87:5f:
         3c:9c:91:b3:47:55:72:df:9e:95:44:e7:5f:0d:74:1b:26:2f:
         7c:4b:a5:b2:24:40:53:2b:0d:f1:d8:5e:44:2c:23:30:43:c5:
         81:b2:4f:8e:11:2a:1d:aa:a7:2a:63:07:9d:6f:90:1c:56:6a:
         7f:36:4f:71:68:4d:c4:c7:c4:77:63:65:b1:60:2f:bc:24:f7:
         d0:8f:1a:12:c8:d2:00:d9:da:51:67:13:59:db:e8:8a:6e:7c:
         6a:75:39:1a:3b:e0:72:35:48:76:0b:42:17:ff:cc:29:d8:e7:
         37:67:5b:bb:1f:c1:53:8b:a3:46:65:4b:2e:48:a1:df:39:ba:
         b0:f4:3d:a9:b0:4d:39:7a:78:d4:53:fe:1b:b5:f3:0b:2d:60:
         79:4f:80:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----