Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/yjWHuVrRLedq2fCtczpMl-QApWI.roa
File:                     yjWHuVrRLedq2fCtczpMl-QApWI.roa (raw, json)
Hash identifier:          Zt7cyk+KdeqhhHauJmao81P7nJ2aKRZg2lGFwTHXV3I=
Subject key identifier:   CA:35:87:B9:5A:D1:2D:E7:6A:D9:F0:AD:73:3A:4C:97:E4:00:A5:62
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4605
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yjWHuVrRLedq2fCtczpMl-QApWI.roa
Signing time:             Fri 08 Apr 2022 00:30:07 +0000
ROA not before:           Fri 08 Apr 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17925 (0x4605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  8 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=CA3587B95AD12DE76AD9F0AD733A4C97E400A562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:8a:68:f7:84:74:a8:82:be:dc:99:3c:a6:
                    e9:2a:13:ca:a2:af:79:ad:f4:82:0e:94:e8:2b:56:
                    5c:bb:0c:b9:e0:6e:fc:e3:14:62:d9:c9:df:bd:b8:
                    3c:1b:69:b4:31:b3:28:2d:29:02:96:d8:a6:0a:f5:
                    00:52:84:3c:9c:1e:b9:84:fa:d7:5a:a0:6b:27:4c:
                    17:dc:16:53:d6:89:cb:18:46:69:d5:0a:50:29:e8:
                    71:1e:b6:f2:0e:c7:ca:d1:61:97:18:d2:7d:40:32:
                    3e:f4:2a:49:16:81:41:0d:3f:42:25:38:43:7c:24:
                    59:ab:67:cb:2d:02:3c:3b:16:02:30:7f:0c:e3:6b:
                    f9:63:3c:22:5c:16:73:70:8c:b0:64:e6:db:02:f9:
                    ea:5d:58:8e:19:37:7c:bd:44:7b:93:8b:64:c6:85:
                    bd:6d:78:c0:ff:14:8f:91:8e:9c:7f:39:b7:cd:1c:
                    ce:bc:e7:cf:5f:c6:a2:93:75:04:7a:6a:9c:c2:e4:
                    74:6d:86:09:d2:12:4c:d5:2f:7a:ad:5f:5d:b3:db:
                    7b:f7:99:34:ca:29:3d:29:a6:97:d7:f9:72:9a:24:
                    38:4c:d9:a3:cb:7c:7f:02:28:b2:9f:7f:a9:99:5a:
                    cd:07:92:7f:02:89:02:68:b6:91:54:ec:9c:61:46:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:35:87:B9:5A:D1:2D:E7:6A:D9:F0:AD:73:3A:4C:97:E4:00:A5:62
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/yjWHuVrRLedq2fCtczpMl-QApWI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:26:b6:42:fb:5a:73:58:b8:dd:b9:34:e6:ea:85:42:5f:df:
         b7:b8:d8:ec:a8:b4:d0:71:a6:bc:e6:48:bf:7d:77:6d:c3:b7:
         07:76:6d:e9:f0:da:b2:88:91:76:c8:49:0d:b8:c4:e3:f2:47:
         af:f3:89:6e:e3:9c:3b:2b:c7:cd:7f:14:33:7c:93:d6:eb:92:
         d4:69:f8:be:1e:c9:05:ba:64:3a:ae:fc:fc:b3:6e:a1:ff:62:
         72:c9:5f:3f:f5:10:c6:0c:c4:7b:91:ec:41:c1:8a:80:3e:68:
         c5:a8:af:d1:df:f9:87:45:2d:e0:45:e5:a6:22:0d:9c:55:88:
         df:6a:de:01:62:73:c7:85:99:e2:eb:0f:e9:7e:0f:fc:6d:9a:
         9c:e7:6f:e9:a3:fb:92:b3:72:01:d1:89:de:6d:8d:9d:29:49:
         ab:a5:94:5e:c6:b5:97:4b:ea:e8:e4:8a:8f:f7:9e:71:c3:64:
         5c:ed:f1:51:2e:6c:c7:97:e6:58:8e:59:83:15:b8:96:08:55:
         98:1a:f4:4a:aa:a3:c2:f2:c8:8b:b4:52:c9:7e:92:4a:36:3c:
         af:ef:cc:dd:79:f9:63:74:db:24:65:3c:e8:b2:2d:91:8a:ad:
         ae:4d:cc:02:c2:0d:26:dd:7e:d3:59:f9:82:bb:78:66:4f:9f:
         9a:b7:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----