Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/4A56BC3CEE8611EABD2CBE6DC4F9AE02.roa
File:                     4A56BC3CEE8611EABD2CBE6DC4F9AE02.roa (raw, json)
Hash identifier:          Czui+HDUTbCQHf1Z1UvG6M4J11XXIGg8duaMwz00CHs=
Subject key identifier:   31:28:B5:34:81:EE:10:99:7B:2F:D2:89:A5:0F:66:0B:87:DB:90:94
Certificate issuer:       /CN=A915B0ED/serialNumber=CD02985AF159C75D531A81DAB52C40E848DB0012
Certificate serial:       223F
Authority key identifier: CD:02:98:5A:F1:59:C7:5D:53:1A:81:DA:B5:2C:40:E8:48:DB:00:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQKYWvFZx11TGoHatSxA6EjbABI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/4A56BC3CEE8611EABD2CBE6DC4F9AE02.roa
Signing time:             Tue 16 Aug 2022 04:34:53 +0000
ROA not before:           Tue 16 Aug 2022 04:34:53 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     4788
IP address blocks:        27.146.0.0/16 maxlen: 24
                          58.139.0.0/16 maxlen: 24
                          103.4.140.0/22 maxlen: 24
                          114.133.0.0/16 maxlen: 24
                          202.171.192.0/20 maxlen: 24
                          202.178.0.0/19 maxlen: 19
                          202.178.32.0/19 maxlen: 24
                          202.178.64.0/20 maxlen: 24
                          2001:4470::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8767 (0x223f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0ED/serialNumber=CD02985AF159C75D531A81DAB52C40E848DB0012
        Validity
            Not Before: Aug 16 04:34:53 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=62fb1e6d-30ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:47:53:66:c7:c7:80:28:ab:25:bc:f1:32:
                    ca:a7:e3:f7:61:49:3a:60:1d:95:12:95:74:0e:34:
                    af:70:b7:a4:03:10:5e:9e:4c:cd:f8:64:d9:02:9c:
                    eb:f1:af:1c:e9:dc:c1:6b:fc:de:56:fd:0d:cd:6d:
                    7f:cb:a2:be:15:5d:f8:1d:74:30:cc:6b:be:57:3d:
                    79:74:33:9d:62:bf:81:6b:5d:9e:fa:a5:02:f2:10:
                    fc:04:3d:00:32:6a:a9:54:6e:f0:55:ac:f9:7b:9f:
                    12:b2:c0:d0:45:90:8f:23:50:66:e6:27:51:30:44:
                    92:60:c9:15:6f:c3:ab:4c:c3:a0:88:08:3f:f6:26:
                    07:2c:47:42:4d:61:60:18:85:a4:c2:c6:12:cb:f2:
                    92:4a:14:fa:52:d0:f8:80:0c:09:5f:6d:c5:53:6a:
                    ac:99:8c:81:29:71:23:cd:78:6c:ff:15:1d:0f:90:
                    0b:dc:8d:f4:31:d3:4b:f6:97:0d:a8:16:ba:ca:0c:
                    f9:10:d9:9c:ec:cb:92:7d:57:0f:09:df:1b:e2:aa:
                    3d:da:aa:f8:45:d9:5e:ff:bc:02:75:d3:42:90:5c:
                    ef:01:bb:71:23:6d:15:7b:08:1d:12:27:f6:13:65:
                    89:85:34:9f:a6:40:6d:58:8b:df:31:a7:b0:40:ba:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:28:B5:34:81:EE:10:99:7B:2F:D2:89:A5:0F:66:0B:87:DB:90:94
            X509v3 Authority Key Identifier:
                keyid:CD:02:98:5A:F1:59:C7:5D:53:1A:81:DA:B5:2C:40:E8:48:DB:00:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/zQKYWvFZx11TGoHatSxA6EjbABI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQKYWvFZx11TGoHatSxA6EjbABI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0ED/11C4D7DA47BC11E58F79E820C4F9AE02/4A56BC3CEE8611EABD2CBE6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.146.0.0/16
                  58.139.0.0/16
                  103.4.140.0/22
                  114.133.0.0/16
                  202.171.192.0/20
                  202.178.0.0-202.178.79.255
                IPv6:
                  2001:4470::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:d2:07:16:61:68:f3:db:24:8a:1d:c4:b5:65:2c:c1:5e:8c:
         a8:49:05:42:58:03:ea:b0:3d:e9:5f:a0:d2:35:c9:76:0b:8e:
         95:36:6f:11:f3:63:b0:be:4b:53:77:49:9c:e8:06:ff:c6:19:
         2e:f9:f5:56:10:de:cc:28:05:8e:bb:ab:ac:54:b4:c0:73:24:
         09:65:46:b4:f6:7e:5b:1b:6c:59:96:11:4b:fd:7b:88:60:0c:
         ad:04:7b:d9:05:4c:a1:1e:4b:0c:46:7b:ef:68:26:b0:42:8b:
         29:7e:05:51:81:ff:28:f5:96:ec:df:e3:55:f5:c7:e6:2b:87:
         43:b6:d3:dc:f8:5a:b3:6f:e5:fb:54:03:20:20:da:53:36:19:
         eb:bb:71:7b:40:79:9e:d8:46:0d:19:cf:46:1c:22:7e:7b:2e:
         59:6b:45:25:bb:73:52:fc:57:3a:ca:8c:69:96:ab:88:86:cd:
         27:60:f7:31:50:0d:bc:11:eb:b5:f7:f8:91:7e:00:58:91:b8:
         90:94:05:7c:34:41:72:bd:6e:55:04:5e:c5:57:a5:f2:85:47:
         ae:98:9e:67:fe:20:0a:be:9b:46:62:79:7e:01:93:7b:45:62:
         fc:56:1e:ef:62:d8:bc:6e:e2:19:33:4f:9f:0e:4a:de:04:db:
         00:b5:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----