Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178CC3/E300BC7E7C6411EA951A404DC4F9AE02/4F56EDE87C6611EAA47D984FC4F9AE02.roa
File:                     4F56EDE87C6611EAA47D984FC4F9AE02.roa (raw, json)
Hash identifier:          +GvNx/pOvd79kjn9iOgk9kCEOARVNktSkKWmETPTgfc=
Subject key identifier:   1A:F2:B0:D7:BC:99:59:D6:00:94:41:03:33:F6:31:29:05:5A:0E:50
Certificate issuer:       /CN=A9178CC3/serialNumber=0EBCB71A5C37764D7B7C2520C3976D82F026722B
Certificate serial:       0851
Authority key identifier: 0E:BC:B7:1A:5C:37:76:4D:7B:7C:25:20:C3:97:6D:82:F0:26:72:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dry3Glw3dk17fCUgw5dtgvAmcis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178CC3/E300BC7E7C6411EA951A404DC4F9AE02/4F56EDE87C6611EAA47D984FC4F9AE02.roa
Signing time:             Fri 24 Mar 2023 00:08:53 +0000
ROA not before:           Fri 24 Mar 2023 00:08:53 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     137549
IP address blocks:        43.230.176.0/22 maxlen: 24
                          103.80.120.0/22 maxlen: 22
                          103.100.28.0/22 maxlen: 24
                          103.226.104.0/22 maxlen: 24
                          116.206.184.0/22 maxlen: 24
                          202.40.0.0/22 maxlen: 24
                          2401:b740::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129 (0x851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178CC3/serialNumber=0EBCB71A5C37764D7B7C2520C3976D82F026722B
        Validity
            Not Before: Mar 24 00:08:53 2023 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=641cea14-ec66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:22:5f:74:bb:06:f5:1f:1b:6f:d9:ee:72:d4:
                    ae:6d:e5:97:99:cd:0f:af:45:1d:83:f3:37:74:7f:
                    40:19:7f:7f:94:6e:0b:75:19:6f:95:c7:60:d2:3c:
                    0d:8f:4c:39:19:cd:e8:4a:83:bd:b6:aa:38:c8:fc:
                    a2:33:43:f1:65:6d:16:06:c7:ac:b0:eb:bf:61:1e:
                    da:7a:b0:1d:39:22:48:28:7b:ff:0d:9f:7b:4c:85:
                    2c:4e:b9:75:d1:04:1d:e0:e7:6f:9e:86:6f:8d:a9:
                    0b:78:19:f8:ba:17:3d:61:71:d9:45:41:8c:84:6b:
                    f4:16:dd:44:2a:cf:8f:3e:51:4c:f5:e9:e0:a5:9b:
                    8a:73:06:9a:f1:ca:53:4d:12:eb:c9:c0:15:16:fe:
                    e3:fe:a7:94:85:4c:50:77:6f:a1:9f:2c:fe:f2:98:
                    64:46:ee:86:b9:37:0e:56:50:26:3d:7f:37:a2:ab:
                    62:bf:f4:70:b9:98:b0:5e:6b:2f:8f:b1:15:00:fb:
                    51:c9:df:c1:f7:8c:7c:bb:83:4a:60:05:d3:68:87:
                    c8:36:a7:80:1f:c9:b0:f6:a6:9f:9c:89:15:2f:f5:
                    36:63:24:76:a8:0e:32:d9:2d:8f:b1:01:a2:c7:1a:
                    af:e0:43:63:9b:50:0c:31:31:de:c1:24:88:38:ae:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:B0:D7:BC:99:59:D6:00:94:41:03:33:F6:31:29:05:5A:0E:50
            X509v3 Authority Key Identifier:
                keyid:0E:BC:B7:1A:5C:37:76:4D:7B:7C:25:20:C3:97:6D:82:F0:26:72:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178CC3/E300BC7E7C6411EA951A404DC4F9AE02/Dry3Glw3dk17fCUgw5dtgvAmcis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dry3Glw3dk17fCUgw5dtgvAmcis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178CC3/E300BC7E7C6411EA951A404DC4F9AE02/4F56EDE87C6611EAA47D984FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.176.0/22
                  103.80.120.0/22
                  103.100.28.0/22
                  103.226.104.0/22
                  116.206.184.0/22
                  202.40.0.0/22
                IPv6:
                  2401:b740::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:07:07:68:76:64:d4:ed:14:c6:03:d9:7c:11:ab:66:f8:07:
         2f:c7:86:87:92:7f:11:48:8b:e1:73:d5:93:91:da:3c:75:e6:
         1b:d9:98:5c:2a:5f:45:f7:52:d5:bb:5c:91:5a:63:97:bb:6a:
         c6:99:c7:3c:6d:65:3d:94:c4:ad:f8:ac:bb:f8:6e:bd:00:42:
         5b:e0:24:e7:f0:5f:46:be:5c:a6:ec:c8:e2:5c:c3:5e:7c:82:
         bf:f5:4e:3b:a7:51:f1:de:e8:18:01:fc:b8:f7:b0:eb:0f:49:
         eb:e1:04:2e:5a:01:f8:3b:0d:7d:16:05:09:84:dc:8c:97:8b:
         51:7a:20:d8:01:b0:b1:51:9f:ed:e5:6d:1b:b8:7c:bc:e4:a4:
         a6:1d:cb:e6:5e:85:bf:92:a5:2e:07:8f:44:ed:17:31:05:10:
         e2:b3:99:97:df:7c:1e:b0:70:58:cf:6c:57:8f:41:30:df:c7:
         0a:a4:81:a7:35:e4:a3:bf:34:71:84:7d:70:c9:38:3d:2d:72:
         5c:89:e5:14:b9:65:d9:5f:64:1f:02:4c:d8:10:63:fc:98:c9:
         05:db:d7:29:3c:fc:b5:46:cc:82:61:63:87:02:53:84:4e:55:
         f2:3c:7a:d2:8f:d0:c9:f3:02:11:9b:b0:a6:5a:43:41:db:41:
         d2:c3:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----