Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/x86wzxvm8F7Cvd1xMrfBX-MRQhU.roa
File:                     x86wzxvm8F7Cvd1xMrfBX-MRQhU.roa (raw, json)
Hash identifier:          fpwdx1CT6nnnFYi2rHqK/6fLL1CtHWMutqpX40muGJQ=
Subject key identifier:   C7:CE:B0:CF:1B:E6:F0:5E:C2:BD:DD:71:32:B7:C1:5F:E3:11:42:15
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4922
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/x86wzxvm8F7Cvd1xMrfBX-MRQhU.roa
Signing time:             Thu 02 Jun 2022 00:30:12 +0000
ROA not before:           Thu 02 Jun 2022 00:30:12 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18722 (0x4922)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  2 00:30:12 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=C7CEB0CF1BE6F05EC2BDDD7132B7C15FE3114215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:1f:d0:35:e5:cd:fc:e2:d5:36:d9:4a:d4:
                    48:76:80:03:95:2c:67:7a:d7:29:46:90:26:94:06:
                    6e:29:68:22:32:10:a9:38:6f:6a:d3:7f:26:37:63:
                    40:9b:ca:0a:e6:6e:c9:7c:d9:4a:1b:f3:4f:d9:99:
                    74:d9:f7:74:28:05:02:10:4f:7a:29:b2:bc:bd:f1:
                    d7:59:a1:43:57:f7:79:82:26:08:88:6a:74:c3:12:
                    42:66:d5:d2:d2:c8:3c:2a:ad:43:13:55:76:a9:56:
                    4d:53:75:3d:05:d2:8c:d4:41:bc:07:68:34:0b:ff:
                    7a:f9:1a:33:ed:c4:d5:b2:95:54:df:06:48:f5:e5:
                    80:fa:c2:62:1c:ec:3c:0f:ee:3e:ac:0b:fc:dd:16:
                    02:57:3c:2a:10:5d:3e:f3:6e:a1:cc:06:89:7f:b9:
                    57:37:d5:80:59:2b:3c:1c:bd:5c:ff:42:3a:3a:75:
                    35:9c:7a:ec:01:f2:5a:70:49:31:53:07:e4:af:22:
                    3d:8f:6b:3b:03:57:95:60:d7:12:2e:da:31:4a:1d:
                    2d:c5:e8:c7:b5:e5:d8:4f:ac:bc:50:47:e7:34:e0:
                    0c:2e:6b:89:4e:a0:40:21:4b:e9:31:db:01:df:f0:
                    c0:a8:d4:59:af:8e:04:6a:7b:1e:18:7e:13:72:d4:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CE:B0:CF:1B:E6:F0:5E:C2:BD:DD:71:32:B7:C1:5F:E3:11:42:15
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/x86wzxvm8F7Cvd1xMrfBX-MRQhU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:c1:03:ae:c9:39:7f:6b:68:68:12:bd:1b:8c:c6:af:b1:06:
         34:61:22:af:9e:87:b4:66:a5:91:63:86:7a:53:fa:23:fd:29:
         07:18:63:5b:ae:27:5d:54:6d:59:3f:75:36:3b:29:bb:33:9f:
         81:d9:62:81:60:54:53:c6:7e:f7:2d:a7:5a:2b:c1:47:ff:fe:
         c1:f5:96:86:e1:24:c1:da:53:3d:f9:cb:d2:f7:19:e2:5b:7e:
         02:d2:9d:eb:c6:ca:27:ff:dc:89:a6:49:36:b0:cd:f5:6c:e9:
         09:fd:df:84:2b:91:4e:99:ca:db:83:6c:e4:4a:4d:18:60:c4:
         3a:f8:5e:97:ba:b7:c9:18:8d:d6:1d:aa:c2:9f:87:d0:44:f0:
         35:e9:20:4a:53:f1:c0:fc:c4:21:5e:82:2a:65:42:8d:98:72:
         72:41:a3:2f:05:85:93:22:70:82:cc:dd:e4:6a:42:20:1f:73:
         40:8c:3a:ab:e0:71:aa:cc:d9:98:23:c4:42:c8:0c:da:e4:a7:
         c1:c5:84:08:54:7c:0e:57:d1:24:4a:17:80:80:d0:f9:52:89:
         41:f1:c1:f1:6f:f3:bb:9d:20:e4:a8:30:ea:f0:40:e5:8f:aa:
         af:b1:ba:85:5e:3d:96:83:58:47:39:16:a0:af:df:5b:b4:77:
         05:6a:f9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----