Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/w-BQBO7H7VKpmfYg5wDhZpgE9wU.roa
File:                     w-BQBO7H7VKpmfYg5wDhZpgE9wU.roa (raw, json)
Hash identifier:          l8RqNkBZy/k3Cmrpl2HstTM0xKnask5mQe3MER4Y6Zg=
Subject key identifier:   C3:E0:50:04:EE:C7:ED:52:A9:99:F6:20:E7:00:E1:66:98:04:F7:05
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       452F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/w-BQBO7H7VKpmfYg5wDhZpgE9wU.roa
Signing time:             Thu 24 Mar 2022 00:30:05 +0000
ROA not before:           Thu 24 Mar 2022 00:30:05 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17711 (0x452f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 24 00:30:05 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=C3E05004EEC7ED52A999F620E700E1669804F705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:af:f3:d7:db:cb:e1:8c:00:6c:43:fc:13:
                    3e:20:90:b3:47:05:5c:4f:ff:4b:a0:e9:e4:b5:ab:
                    5f:ea:8b:2c:93:8e:15:d2:81:a3:2f:0b:b4:ba:de:
                    f7:47:52:94:11:64:c6:ff:50:e1:54:10:53:b9:7f:
                    24:a0:a2:18:84:d8:ed:20:85:4e:74:b1:a7:94:4c:
                    d6:dd:d1:6b:2c:82:c8:8b:76:f6:77:3d:2e:ae:68:
                    5a:75:da:c8:ec:af:bf:0c:7c:63:42:27:3f:1a:06:
                    b4:d6:55:e7:bf:56:23:3e:3a:00:1e:ce:fb:cb:04:
                    ba:e8:be:14:9d:ca:58:7f:c0:19:a5:b3:f5:54:89:
                    0d:1d:e2:e8:75:3c:57:64:b2:e1:3b:db:b4:88:08:
                    08:43:5f:58:b7:6b:ec:70:c2:d4:9d:e7:5b:69:7b:
                    f8:2d:53:75:84:5f:43:ce:2b:c1:8d:55:ff:c7:e7:
                    da:b3:3d:e4:d5:d7:aa:ac:6c:f0:91:1d:11:36:4f:
                    0e:ed:86:fd:0d:3f:78:df:78:89:2f:19:4e:f1:83:
                    58:9d:a1:ef:70:80:03:64:da:98:d1:35:c5:12:84:
                    7d:e4:58:b9:8a:18:01:62:c8:75:51:8c:15:1c:ca:
                    d3:cb:48:41:98:9f:7b:f2:7b:b0:0e:4c:43:fe:e6:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E0:50:04:EE:C7:ED:52:A9:99:F6:20:E7:00:E1:66:98:04:F7:05
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/w-BQBO7H7VKpmfYg5wDhZpgE9wU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:a9:58:14:4e:e1:11:84:26:90:00:22:65:6e:f5:ad:88:5a:
         3b:df:9b:c3:3c:ea:3c:70:77:2a:64:61:ee:d0:e2:84:ea:70:
         97:62:38:d1:1c:62:5a:94:5a:63:67:98:43:b2:2f:7b:7e:79:
         8f:61:28:4c:a4:23:92:a3:97:a8:35:f9:36:7c:bc:11:f8:47:
         a0:17:4d:32:8e:a7:24:be:74:47:4c:1e:3f:ed:57:f7:13:3b:
         8f:13:a9:f0:bd:ae:8e:8b:04:b9:27:c2:38:e5:83:05:70:b5:
         d1:24:97:1e:05:99:f8:8c:c1:4c:af:40:a3:a9:9a:17:4e:a6:
         2e:70:90:2e:e3:d6:13:3c:d4:12:3b:a5:e4:da:2b:1b:03:ac:
         ad:8c:87:b4:2f:b3:be:f3:f2:f4:28:63:36:0e:93:0a:3b:29:
         d6:19:34:79:aa:8e:e4:5c:f5:45:fb:88:84:4e:95:d7:f8:76:
         a6:97:87:e5:7d:d1:58:8e:80:de:7a:07:d8:99:cf:e5:05:33:
         9f:5b:c9:25:03:84:80:64:48:03:31:68:91:a8:a0:e0:2d:a1:
         26:98:77:5b:07:ef:6b:18:c0:c0:22:13:56:b1:71:fe:45:aa:
         22:e9:f4:ea:ab:6a:38:15:fe:30:bc:be:bf:89:5e:b2:c5:99:
         c9:2d:cd:40
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRS8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAzMjQw
MDMwMDVaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEMzRTA1MDA0RUVDN0VE
NTJBOTk5RjYyMEU3MDBFMTY2OTgwNEY3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoR6/z19vL4YwAbEP8Ez4gkLNHBVxP/0ug6eS1q1/qiyyTjhXS
gaMvC7S63vdHUpQRZMb/UOFUEFO5fySgohiE2O0ghU50saeUTNbd0WssgsiLdvZ3
PS6uaFp12sjsr78MfGNCJz8aBrTWVee/ViM+OgAezvvLBLrovhSdylh/wBmls/VU
iQ0d4uh1PFdksuE727SICAhDX1i3a+xwwtSd51tpe/gtU3WEX0POK8GNVf/H59qz
PeTV16qsbPCRHRE2Tw7thv0NP3jfeIkvGU7xg1idoe9wgANk2pjRNcUShH3kWLmK
GAFiyHVRjBUcytPLSEGYn3vye7AOTEP+5hSdAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUw+BQBO7H7VKpmfYg5wDhZpgE9wUwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS93LUJRQk83SDdWS3BtZllnNXdEaFpwZ0U5d1Uucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHAUwDQYJKoZIhvcNAQELBQADggEB
AJypWBRO4RGEJpAAImVu9a2IWjvfm8M86jxwdypkYe7Q4oTqcJdiONEcYlqUWmNn
mEOyL3t+eY9hKEykI5Kjl6g1+TZ8vBH4R6AXTTKOpyS+dEdMHj/tV/cTO48TqfC9
ro6LBLknwjjlgwVwtdEklx4FmfiMwUyvQKOpmhdOpi5wkC7j1hM81BI7peTaKxsD
rK2Mh7Qvs77z8vQoYzYOkwo7KdYZNHmqjuRc9UX7iIROldf4dqaXh+V90ViOgN56
B9iZz+UFM59bySUDhIBkSAMxaJGooOAtoSaYd1sH72sYwMAiE1axcf5FqiLp9Oqr
ajgV/jC8vr+JXrLFmcktzUA=
-----END CERTIFICATE-----