Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64403F54E46E11EB96CA2246C4F9AE02.roa
File:                     64403F54E46E11EB96CA2246C4F9AE02.roa (raw, json)
Hash identifier:          ZfeX2CglyQjKuvzUO+im0k0MCSB0pH50HMpBPlPxoDg=
Subject key identifier:   1A:5F:6D:A9:FF:CB:16:D6:A9:0C:95:0D:70:F9:B4:7F:C9:06:5F:0C
Certificate issuer:       /CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
Certificate serial:       01EE
Authority key identifier: AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64403F54E46E11EB96CA2246C4F9AE02.roa
Signing time:             Mon 20 Dec 2021 02:20:49 +0000
ROA not before:           Mon 20 Dec 2021 02:20:49 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     19905
IP address blocks:        133.250.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C533/serialNumber=AF96D111008404FF1B14516F7FCF67E928CEF666
        Validity
            Not Before: Dec 20 02:20:49 2021 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=61bfe880-b343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:88:7f:8f:e9:65:64:ea:05:2d:ef:43:4e:
                    77:16:43:e0:ba:a7:52:20:2d:55:59:b1:21:ca:06:
                    be:40:d5:66:6d:5a:12:87:ef:35:98:0d:50:c1:ad:
                    10:03:53:1f:6c:31:a3:c4:92:bc:0d:84:ec:45:5f:
                    2a:63:ec:76:95:04:e0:f6:fa:29:20:ac:5a:7d:58:
                    8e:51:75:98:e5:1d:74:bb:67:fa:21:f6:c5:b7:53:
                    ea:35:31:f6:1b:02:b0:d1:13:2b:97:b9:45:e1:70:
                    22:d9:fc:9b:f0:73:4f:85:96:4e:d3:fb:ab:f1:71:
                    0c:7d:84:65:43:2e:a2:5b:82:87:94:ec:66:78:12:
                    3f:01:00:ad:7a:06:43:c5:b2:c3:42:12:89:f4:71:
                    f7:4a:20:d4:f0:dc:0f:11:60:bd:f8:d5:ac:09:3f:
                    9e:fe:8d:9a:c2:86:0c:55:43:54:5a:0b:bb:0e:84:
                    a7:da:e1:c9:e5:26:74:91:6a:08:43:8e:b9:f5:2e:
                    c7:c5:87:15:5b:c3:9d:3e:8c:45:4c:fe:db:7b:8a:
                    a7:7d:7e:21:e4:94:55:7a:df:a5:c6:ef:7a:e9:45:
                    f5:64:7f:e4:39:c6:01:6e:43:31:4e:d2:b0:0c:e3:
                    5c:8b:05:a6:1a:e6:89:7a:0a:ef:6a:e4:74:2a:b3:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5F:6D:A9:FF:CB:16:D6:A9:0C:95:0D:70:F9:B4:7F:C9:06:5F:0C
            X509v3 Authority Key Identifier:
                keyid:AF:96:D1:11:00:84:04:FF:1B:14:51:6F:7F:CF:67:E9:28:CE:F6:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/r5bREQCEBP8bFFFvf89n6SjO9mY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5bREQCEBP8bFFFvf89n6SjO9mY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C533/9CC43306A74911EBB0302F82C4F9AE02/64403F54E46E11EB96CA2246C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.250.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8d:40:83:3f:1a:10:68:2d:1c:ec:14:6a:22:11:c1:3c:51:e2:
         48:81:75:13:1b:03:6d:2f:a8:d9:c5:79:60:b4:9b:50:c5:ba:
         5a:70:db:cb:2c:a2:99:f7:bd:5f:0a:df:3e:ee:e2:e5:ed:1b:
         2d:36:80:b8:08:f8:4d:e4:f6:af:98:3b:63:d0:dc:c3:73:4f:
         6b:ef:fc:96:f0:d5:26:f0:21:a1:8f:81:81:98:b5:f0:03:3b:
         9d:03:7d:55:56:c1:a0:f3:89:23:e5:2e:5d:c3:d1:04:34:53:
         dc:b9:89:9a:29:22:2f:0f:0a:1e:c9:1f:20:86:25:41:d8:3e:
         ad:36:f6:be:42:52:85:2d:4c:e2:9f:f1:f1:43:37:d7:79:96:
         6e:fb:b6:66:3d:c4:5e:67:38:2c:3c:ef:f9:22:fd:3c:b8:e9:
         97:40:8f:0f:04:da:d1:a3:6c:f3:d6:d5:ad:5d:84:6e:99:94:
         3b:c7:fa:55:62:49:57:51:bd:58:ca:52:5a:f1:78:a1:77:14:
         e1:f4:e9:68:e2:3e:80:cf:fc:c2:89:fd:03:95:37:00:91:17:
         67:b5:4b:5f:d5:4c:b6:8e:fd:b2:fe:e7:ae:71:f7:71:34:39:
         a0:05:5e:78:c9:18:bb:5c:92:d1:e9:93:8f:ab:57:fa:4e:12:
         7f:06:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----