Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/re1sIy9Z1njRT59EP97rSp0tW8s.roa
File:                     re1sIy9Z1njRT59EP97rSp0tW8s.roa (raw, json)
Hash identifier:          CeShs3Ko0UJMf/UY67LOFl3UjawRWDHUJHRjIwf7I9c=
Subject key identifier:   AD:ED:6C:23:2F:59:D6:78:D1:4F:9F:44:3F:DE:EB:4A:9D:2D:5B:CB
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4316
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/re1sIy9Z1njRT59EP97rSp0tW8s.roa
Signing time:             Sun 13 Feb 2022 00:30:07 +0000
ROA not before:           Sun 13 Feb 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17174 (0x4316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 13 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=ADED6C232F59D678D14F9F443FDEEB4A9D2D5BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4d:3e:b3:47:1a:28:4d:84:7b:8c:ff:36:c3:
                    a7:f8:1c:ed:51:f8:a8:e8:9b:10:17:57:29:0e:58:
                    e2:fe:28:2d:6f:d5:bf:2b:45:6f:a1:92:a8:e5:21:
                    cb:26:75:a3:7a:d5:bb:7e:64:d9:67:b0:21:40:e2:
                    bb:ad:33:33:59:29:44:a1:57:db:7d:a4:c8:b9:49:
                    1e:d2:b9:89:5f:01:eb:6c:71:f2:70:b2:ea:92:fd:
                    59:f0:37:be:11:d1:8b:7d:c2:91:32:51:51:38:e3:
                    ad:1b:e9:75:13:bf:3f:a4:5b:e2:7a:bc:9e:87:39:
                    62:a3:8b:52:69:f8:13:2f:c7:a9:ec:1a:35:6d:dc:
                    47:2f:ba:52:58:c9:68:04:7e:e3:ec:00:89:cf:79:
                    8c:04:91:bb:1f:74:fa:35:2f:35:fd:db:5b:59:97:
                    01:ba:e0:e1:4d:54:00:7d:ee:84:14:94:7a:8c:3d:
                    32:4c:11:76:9a:42:1d:bc:ae:03:49:5e:28:56:7a:
                    db:b3:e4:18:cf:0e:2c:30:0d:da:2b:a6:bf:2c:91:
                    25:c2:8c:51:7a:a1:3e:ff:af:19:72:cd:34:53:48:
                    b5:97:31:0a:e9:34:f5:4b:12:8c:bd:cc:2a:94:45:
                    ee:fe:06:2b:31:91:c4:71:4e:d5:d7:bd:e3:e1:bc:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:ED:6C:23:2F:59:D6:78:D1:4F:9F:44:3F:DE:EB:4A:9D:2D:5B:CB
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/re1sIy9Z1njRT59EP97rSp0tW8s.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:64:bf:67:69:eb:52:ae:06:5c:a5:66:f9:b0:4c:58:26:c5:
         f9:02:2a:92:24:e1:56:6c:8b:8f:29:ad:8f:94:a7:c4:1c:a6:
         2a:41:be:a1:0a:e3:9d:1f:f4:e8:3f:50:9a:d5:40:b2:c4:a3:
         bc:57:0c:e8:f9:f9:db:dc:0e:0a:7c:ed:ae:c1:36:2c:06:63:
         d5:13:db:2e:94:45:25:0a:22:71:3f:b2:c5:da:6b:fb:1a:30:
         8f:02:d9:1b:9d:7e:e9:25:79:fc:60:23:7b:b7:9d:c2:52:9e:
         55:d6:17:17:e0:3b:ae:a0:4d:65:ee:1f:b5:82:c7:64:1b:02:
         ef:9e:27:dc:48:55:c9:a3:39:af:57:52:ec:87:c0:99:e5:10:
         67:9d:a2:cc:59:d3:91:7c:4e:79:18:90:ab:12:1d:0d:42:f5:
         b3:80:21:ca:06:df:34:c1:ee:f5:26:bf:ac:27:4c:4f:5e:36:
         00:9d:5c:f6:93:c2:10:55:5c:1a:c1:a7:28:2a:2f:8d:0b:d0:
         81:65:8e:b2:ae:14:44:3f:d1:8a:6a:9f:6b:54:3c:40:5d:80:
         71:e6:97:c1:61:29:f3:69:f3:22:19:99:81:54:53:67:fb:5b:
         1e:47:81:52:c4:6d:00:b2:a2:18:24:0f:ad:f3:71:95:6b:d1:
         fc:46:17:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----