Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/s1Hg3zmJ60S3kg3jjhGBEpOE9NU.roa
File:                     s1Hg3zmJ60S3kg3jjhGBEpOE9NU.roa (raw, json)
Hash identifier:          hOKGiIZXmmJYMul8vlHLRIDPOF5A0L+3p4DhAiXWRb8=
Subject key identifier:   B3:51:E0:DF:39:89:EB:44:B7:92:0D:E3:8E:11:81:12:93:84:F4:D5
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       49B5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/s1Hg3zmJ60S3kg3jjhGBEpOE9NU.roa
Signing time:             Sat 11 Jun 2022 00:30:09 +0000
ROA not before:           Sat 11 Jun 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18869 (0x49b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun 11 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=B351E0DF3989EB44B7920DE38E1181129384F4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:d2:83:82:02:db:3f:0a:65:31:46:ce:47:
                    36:b7:83:71:87:6b:71:7d:73:87:7b:e6:af:02:9b:
                    90:9a:78:90:f1:8b:e0:26:55:ad:58:27:ce:7f:58:
                    6e:85:46:3d:79:85:0b:7e:3e:0b:25:eb:07:97:20:
                    b1:d8:57:47:40:29:c0:c2:c7:ec:0b:7d:f7:88:58:
                    b9:b9:13:3a:da:66:b0:91:69:30:78:db:90:36:6b:
                    70:ed:f9:4a:88:80:4a:e8:55:ed:1b:79:6b:a6:8c:
                    12:ef:18:1c:5f:22:cd:a5:c9:ee:3f:fc:97:77:c7:
                    c5:98:b2:ef:d2:5c:65:d6:9f:15:92:5f:a6:af:15:
                    96:51:9d:78:c7:89:2b:c0:7f:11:ec:44:22:08:b8:
                    21:75:4d:e6:70:6f:c0:24:3e:d2:81:76:bc:c9:92:
                    a0:a2:b0:4c:66:4d:77:80:b8:1a:38:70:13:d8:7e:
                    d8:53:76:67:3c:1a:d3:2b:06:62:78:dd:4a:e3:2e:
                    e0:cc:87:c6:98:90:02:87:d7:73:19:27:89:a5:0c:
                    ed:dc:e3:4c:3b:56:cb:52:27:7a:1d:76:6e:ac:4c:
                    2f:36:58:43:c8:25:15:b7:d7:02:6e:91:90:1b:fa:
                    20:2a:99:2a:85:c7:5d:09:1f:a3:1d:06:3d:40:ec:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:51:E0:DF:39:89:EB:44:B7:92:0D:E3:8E:11:81:12:93:84:F4:D5
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/s1Hg3zmJ60S3kg3jjhGBEpOE9NU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:98:6c:4d:ef:63:96:7a:42:82:15:e9:3f:6a:7b:f0:7a:95:
         0a:94:27:09:3f:c5:0f:49:a8:68:c1:90:47:01:cb:9a:9b:07:
         90:40:9e:c5:ba:f5:1e:e6:98:8e:2f:76:39:e0:bc:75:bc:87:
         e3:56:03:fd:7a:d5:53:e1:a1:ae:d2:bd:be:07:59:e6:a5:f0:
         fa:01:28:2a:f4:9d:9e:dd:c0:4c:8a:f8:f0:23:b2:89:69:c1:
         32:31:d8:02:e5:48:2c:b9:c6:8d:82:22:9b:59:bb:4e:8c:95:
         dd:83:9d:3f:cb:39:b5:b8:c3:60:92:c1:71:11:a6:fe:33:08:
         e2:a5:3a:ca:0c:6a:a9:66:c0:98:77:71:2a:2f:cd:d8:6e:98:
         3a:69:13:0b:e6:d1:9e:b8:50:92:5c:9a:9b:0d:b5:27:8d:40:
         67:25:2c:22:80:2a:3f:92:e5:96:4d:d9:90:16:b3:b5:ad:ed:
         24:01:d6:7a:f8:82:79:f0:3e:52:2c:6e:8b:e8:25:e9:44:b7:
         99:d2:3e:be:8a:57:2b:d8:7c:32:b6:f1:78:9d:33:97:ca:66:
         34:a9:84:43:70:97:72:92:1b:5c:ab:fa:b2:cc:2c:1c:16:d5:
         77:a0:90:b7:52:c6:db:7b:e3:4d:79:42:05:e9:fe:e9:28:58:
         f6:75:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----