Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/091FEF54932B11ECA23DD427C4F9AE02.roa
File:                     091FEF54932B11ECA23DD427C4F9AE02.roa (raw, json)
Hash identifier:          gYztMomA4QakvRR4JORBgBnPv0Mmzee9oH4Q3G+IjOY=
Subject key identifier:   1B:F5:CB:92:80:26:C2:13:9A:67:78:FD:80:5D:F7:49:F7:61:B1:19
Certificate issuer:       /CN=A91B84CB/serialNumber=795F9167F267859F4D438B837F8394EBE283BCD8
Certificate serial:       050C
Authority key identifier: 79:5F:91:67:F2:67:85:9F:4D:43:8B:83:7F:83:94:EB:E2:83:BC:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eV-RZ_JnhZ9NQ4uDf4OU6-KDvNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/091FEF54932B11ECA23DD427C4F9AE02.roa
Signing time:             Mon 21 Feb 2022 15:29:19 +0000
ROA not before:           Mon 21 Feb 2022 15:29:19 +0000
ROA not after:            Mon 31 Oct 2022 00:00:00 +0000
asID:                     30277
IP address blocks:        103.68.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B84CB/serialNumber=795F9167F267859F4D438B837F8394EBE283BCD8
        Validity
            Not Before: Feb 21 15:29:19 2022 GMT
            Not After : Oct 31 00:00:00 2022 GMT
        Subject: CN=6213afcf-531d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:e1:29:56:05:5f:1f:52:6f:bf:b4:3e:a1:
                    1e:0a:a5:7b:32:b6:41:6b:c9:66:68:1c:1f:5f:b9:
                    ff:bc:c0:05:33:d4:c9:ee:fa:b4:66:ed:4f:6d:4f:
                    63:e3:35:25:96:0c:3a:8c:7a:0f:82:03:a0:db:ec:
                    17:b5:67:fe:d5:11:8f:b9:c2:f1:84:fa:d2:78:c4:
                    18:36:3f:6c:d2:5d:34:77:81:16:17:09:d8:79:6c:
                    14:32:c6:87:61:b2:7a:cf:60:8f:93:d8:2a:40:91:
                    18:ca:37:df:b3:19:10:2c:21:64:d4:14:05:14:63:
                    b5:c6:f3:fa:78:64:3c:fe:06:58:9f:7e:a7:fc:76:
                    02:21:80:2f:48:40:c4:6c:6e:03:0c:86:35:33:0a:
                    27:4f:79:03:16:68:a8:be:44:9f:be:4b:ed:bb:cc:
                    5c:30:b4:a3:f9:a8:41:92:46:51:b7:27:70:6e:40:
                    f7:57:73:e4:7b:0a:ac:7d:ce:43:64:8f:5d:b7:aa:
                    a7:c7:66:b7:51:4d:61:6b:b0:3b:51:9f:bc:b8:c4:
                    45:2a:2b:9c:37:6d:16:f2:d8:b7:8d:2b:f9:02:6b:
                    53:72:ad:1c:d1:c3:34:10:9f:7d:4a:84:d5:06:34:
                    22:5c:09:74:6c:ee:bc:38:98:10:8e:4f:5b:be:25:
                    e5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F5:CB:92:80:26:C2:13:9A:67:78:FD:80:5D:F7:49:F7:61:B1:19
            X509v3 Authority Key Identifier:
                keyid:79:5F:91:67:F2:67:85:9F:4D:43:8B:83:7F:83:94:EB:E2:83:BC:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/eV-RZ_JnhZ9NQ4uDf4OU6-KDvNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eV-RZ_JnhZ9NQ4uDf4OU6-KDvNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B84CB/F08A47D2B72611EAA50D1222C4F9AE02/091FEF54932B11ECA23DD427C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f6:80:13:10:4a:74:ca:9c:ef:bd:68:27:0a:69:91:c4:58:
         69:2b:97:d9:f0:1b:43:4f:7e:09:83:98:24:df:df:b9:03:11:
         52:d6:7d:94:af:9e:23:56:0e:a5:81:e8:ac:2a:12:3f:99:7a:
         5c:41:06:e4:7a:73:4a:59:47:11:1b:38:6f:d6:76:ce:40:2c:
         03:fb:46:9e:71:08:bd:85:f1:b4:9d:0a:cb:8e:8f:8b:9d:d1:
         c9:36:49:98:81:b5:ee:00:73:06:9f:8c:ad:af:be:74:50:f7:
         2a:6a:17:9a:62:02:62:f8:d8:d7:4d:56:40:77:f9:e0:e2:fe:
         b5:9d:68:47:46:3e:5a:53:80:db:fc:9f:cc:de:cd:f8:6b:c3:
         34:35:89:77:03:a9:6c:32:b8:a5:de:9f:bf:3d:09:7b:e6:7f:
         76:0e:a9:69:7d:60:4b:60:c4:79:31:ba:7c:fe:e0:b8:7d:2a:
         55:93:ed:e7:e8:41:58:d3:bc:65:82:f7:95:ff:33:6d:51:a0:
         27:12:a0:c6:ca:85:3a:7c:ec:9b:e0:2b:b4:01:79:44:03:09:
         a1:0d:28:7b:99:82:06:63:1c:16:fd:3f:a7:b1:16:65:3d:34:
         88:22:48:01:61:dc:e7:78:95:1f:e1:f8:cf:6d:b1:3c:18:d8:
         f0:b2:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----