Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/qx2Mf35XMXU52fFFFCAccod5ky0.roa
File:                     qx2Mf35XMXU52fFFFCAccod5ky0.roa (raw, json)
Hash identifier:          5iqyiNTHg8HQ5pBB73fbldxADOpFuspkQeFrCP5UHo4=
Subject key identifier:   AB:1D:8C:7F:7E:57:31:75:39:D9:F1:45:14:20:1C:72:87:79:93:2D
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4393
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qx2Mf35XMXU52fFFFCAccod5ky0.roa
Signing time:             Tue 22 Feb 2022 00:30:08 +0000
ROA not before:           Tue 22 Feb 2022 00:30:08 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17299 (0x4393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 22 00:30:08 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=AB1D8C7F7E57317539D9F14514201C728779932D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:cd:46:34:fb:11:42:19:3d:66:5b:09:86:
                    91:a3:2c:42:74:fa:a3:c1:79:c7:04:99:af:cf:1c:
                    c2:a4:21:d6:f8:75:eb:f5:4f:ac:e5:5d:18:f3:e5:
                    cf:36:ba:4c:1b:af:c3:a0:93:c4:a9:19:96:cc:56:
                    aa:9a:5f:27:88:c9:0c:15:d2:44:b9:f5:70:b7:69:
                    e6:cc:90:c4:a3:6d:0e:e9:3c:f4:e6:5d:73:55:2e:
                    fb:a5:50:55:02:de:a0:bf:ce:1e:b1:fe:35:4a:91:
                    0d:32:61:2c:5b:36:f7:ec:ff:37:b7:28:ec:b0:73:
                    72:9a:6d:5b:70:50:3b:39:a0:82:97:b2:41:75:24:
                    a0:47:b0:29:f4:c5:1a:35:53:cc:3f:61:cb:e3:ea:
                    8a:df:f9:a7:ac:2f:58:df:24:4c:33:75:76:0d:b5:
                    c1:22:b8:32:bc:60:ee:6d:b9:85:cd:39:91:e1:e0:
                    96:e0:af:67:2b:11:04:e4:8b:02:ac:54:95:e5:f3:
                    fc:3e:81:af:c9:55:1f:dc:d7:4d:6d:5b:a7:c1:e6:
                    97:cd:b0:f8:35:5b:d4:ab:ef:e9:52:c0:d8:c2:32:
                    9b:e5:23:c8:88:be:66:f3:48:32:e6:19:0c:9a:92:
                    48:f2:59:43:5a:5f:44:2b:ea:19:87:da:41:ee:ca:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1D:8C:7F:7E:57:31:75:39:D9:F1:45:14:20:1C:72:87:79:93:2D
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/qx2Mf35XMXU52fFFFCAccod5ky0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:54:30:59:ad:a4:bf:6a:6a:06:59:5b:f5:cc:41:55:8d:f5:
         c0:e9:15:d2:4a:f2:60:b5:12:46:c0:1a:d9:b4:b0:24:6b:7f:
         a2:13:bf:94:bb:8b:ea:c0:22:fe:47:94:02:db:16:e8:89:f9:
         2d:0b:05:d6:32:4e:86:4c:1f:9c:0d:9d:93:26:9b:24:6d:b3:
         9b:b2:79:90:70:a0:c9:23:23:14:32:b8:dc:64:30:33:b6:8b:
         79:ff:10:d0:21:0a:4a:43:37:a0:f9:bb:3a:fe:fc:c5:36:5b:
         9f:3e:ed:c2:10:c0:69:5d:32:5a:fb:93:67:7d:ec:16:14:ea:
         c4:e5:fa:c3:1b:b8:8a:11:a1:62:72:ee:a8:c0:57:e5:6a:b1:
         0a:15:9d:2d:2a:aa:db:20:29:db:26:ec:c4:66:28:91:8f:51:
         69:37:8f:59:ad:0c:8f:54:52:d8:1f:16:c3:8f:8e:98:2a:b7:
         e7:78:fa:0f:4c:0d:13:17:a3:65:bd:e2:a1:00:9e:68:36:e1:
         55:24:b4:87:49:d8:e1:f3:e9:a8:85:cf:04:66:df:3c:4d:f8:
         95:81:f9:5b:ab:12:55:e2:0f:1b:f6:67:ef:63:fd:e2:d0:58:
         04:3f:fc:9d:9e:89:36:b1:1e:aa:4b:5b:08:33:ff:0c:48:c9:
         27:e0:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----