Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1BD5/853135141FDB11EAB9A9421AC4F9AE02/32CB2C54C2BD11EB92B55F77C4F9AE02.roa
File:                     32CB2C54C2BD11EB92B55F77C4F9AE02.roa (raw, json)
Hash identifier:          KXwjg9Mc8ER5B2m+4knRcvJ23RDDtDNVaHHuaWFlidc=
Subject key identifier:   96:07:42:DA:0E:A9:61:15:77:D5:DA:7A:46:DB:E8:EC:8F:56:B2:FA
Certificate issuer:       /CN=A91F1BD5/serialNumber=AE1DAF753911D265AAC89F01C2EA0242DD552372
Certificate serial:       08AF
Authority key identifier: AE:1D:AF:75:39:11:D2:65:AA:C8:9F:01:C2:EA:02:42:DD:55:23:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rh2vdTkR0mWqyJ8BwuoCQt1VI3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1BD5/853135141FDB11EAB9A9421AC4F9AE02/32CB2C54C2BD11EB92B55F77C4F9AE02.roa
Signing time:             Tue 10 May 2022 08:47:14 +0000
ROA not before:           Tue 10 May 2022 08:47:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     135278
IP address blocks:        103.211.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1BD5/serialNumber=AE1DAF753911D265AAC89F01C2EA0242DD552372
        Validity
            Not Before: May 10 08:47:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=627a2692-3399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:cc:47:1a:0d:36:3f:9c:bb:34:e0:88:08:
                    20:36:81:c9:23:90:c9:4c:04:c2:b9:08:c1:c6:22:
                    d0:9f:54:ca:c2:9e:9e:4c:5f:fb:75:37:56:91:39:
                    dc:7e:e8:7a:60:e8:d2:8b:0c:3a:83:39:36:a2:fb:
                    fa:e8:f2:9a:39:9c:7d:6f:8c:39:fa:e6:31:bb:e5:
                    9c:98:a2:2b:ad:16:db:b0:e8:a9:d2:75:3c:a9:a7:
                    24:ff:67:81:bf:f9:05:89:af:5f:97:f5:58:90:60:
                    c6:b6:3a:ac:d6:8c:ee:2a:1e:a5:1f:68:b4:64:07:
                    60:62:a6:32:6d:ab:e7:b3:f7:4d:f2:69:6e:c8:03:
                    8d:16:c7:8b:dc:da:65:6b:da:63:44:86:a4:a0:ad:
                    70:1e:fa:45:0f:70:d4:e6:01:9c:6b:5c:b4:ad:02:
                    7f:50:55:fa:66:a3:48:54:9b:29:90:dc:b4:5d:b8:
                    f6:4b:04:59:70:8e:14:09:2b:1e:a6:96:42:92:44:
                    e5:71:d4:a3:6b:1d:07:ab:59:5e:f2:7c:ce:2c:d1:
                    5e:9f:d8:7d:b8:cc:e5:13:0f:65:fa:42:46:51:fc:
                    36:96:80:a0:31:e5:5e:47:39:4e:9e:bf:9a:67:6a:
                    b2:82:86:d6:7d:8b:a3:85:7b:c9:91:7c:1f:ae:5f:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:07:42:DA:0E:A9:61:15:77:D5:DA:7A:46:DB:E8:EC:8F:56:B2:FA
            X509v3 Authority Key Identifier:
                keyid:AE:1D:AF:75:39:11:D2:65:AA:C8:9F:01:C2:EA:02:42:DD:55:23:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1BD5/853135141FDB11EAB9A9421AC4F9AE02/rh2vdTkR0mWqyJ8BwuoCQt1VI3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rh2vdTkR0mWqyJ8BwuoCQt1VI3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1BD5/853135141FDB11EAB9A9421AC4F9AE02/32CB2C54C2BD11EB92B55F77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:8f:f0:26:d6:1f:06:75:a4:5d:65:0b:05:c5:36:0c:aa:d5:
         e6:65:73:f7:a5:6b:0b:9a:55:04:ef:6b:81:25:f0:f0:e2:c7:
         5e:e4:76:d0:c4:c8:8e:ff:a2:45:2c:31:30:56:a6:c8:ac:73:
         4e:10:6f:56:4a:cd:d9:95:92:6c:34:f8:9b:69:35:7f:c9:c2:
         58:4e:68:48:92:17:16:73:27:ad:1d:45:71:84:80:83:f7:a8:
         b3:f4:53:97:fb:3a:35:9b:72:66:d0:93:ed:60:8e:a6:f0:d5:
         69:2b:d0:f0:a3:c3:ba:65:22:73:91:59:cf:69:78:18:7c:7b:
         fc:f9:fd:e1:b8:c3:14:c9:bd:ff:a4:93:15:4a:9c:3b:08:d8:
         5b:3a:fb:b1:b6:89:28:d4:e9:50:04:09:3f:9d:0f:92:9a:1d:
         6f:d9:bf:79:b9:54:99:f1:55:90:92:81:c1:14:33:ad:23:bd:
         f6:fe:2c:53:a9:56:46:26:79:72:77:77:b1:82:35:7e:29:45:
         83:f3:6b:d9:0c:46:d6:7e:0a:95:a9:65:cb:34:05:86:d3:f2:
         f3:1e:86:e1:b0:2a:f9:cb:4a:0f:97:13:54:1a:04:57:f8:1d:
         b3:c8:b6:c6:6a:a3:74:4b:d5:13:66:28:6a:3e:48:da:07:82:
         6a:1f:65:1b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFCRDUxMTAvBgNVBAUTKEFFMURBRjc1MzkxMUQyNjVBQUM4OUYwMUMyRUEwMjQy
REQ1NTIzNzIwHhcNMjIwNTEwMDg0NzE0WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjdhMjY5Mi0zMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzW/MRxoNNj+cuzTgiAggNoHJI5DJTATCuQjBxiLQn1TKwp6eTF/7dTdWkTnc
fuh6YOjSiww6gzk2ovv66PKaOZx9b4w5+uYxu+WcmKIrrRbbsOip0nU8qack/2eB
v/kFia9fl/VYkGDGtjqs1ozuKh6lH2i0ZAdgYqYybavns/dN8mluyAONFseL3Npl
a9pjRIakoK1wHvpFD3DU5gGca1y0rQJ/UFX6ZqNIVJspkNy0Xbj2SwRZcI4UCSse
ppZCkkTlcdSjax0Hq1le8nzOLNFen9h9uMzlEw9l+kJGUfw2loCgMeVeRzlOnr+a
Z2qygobWfYujhXvJkXwfrl83JwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJYHQtoO
qWEVd9Xaekbb6OyPVrL6MB8GA1UdIwQYMBaAFK4dr3U5EdJlqsifAcLqAkLdVSNy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUJENS84NTMxMzUxNDFG
REIxMUVBQjlBOTQyMUFDNEY5QUUwMi9yaDJ2ZFRrUjBtV3F5SjhCd3VvQ1F0MVZJ
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JoMnZkVGtSMG1XcXlKOEJ3dW9DUXQxVkkzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjFCRDUvODUzMTM1MTQxRkRCMTFFQUI5QTk0MjFBQzRGOUFFMDIvMzJDQjJDNTRD
MkJEMTFFQjkyQjU1Rjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn00AwDQYJKoZIhvcNAQELBQADggEBAFOP8CbWHwZ1pF1l
CwXFNgyq1eZlc/elawuaVQTva4El8PDix17kdtDEyI7/okUsMTBWpsisc04Qb1ZK
zdmVkmw0+JtpNX/JwlhOaEiSFxZzJ60dRXGEgIP3qLP0U5f7OjWbcmbQk+1gjqbw
1Wkr0PCjw7plInORWc9peBh8e/z5/eG4wxTJvf+kkxVKnDsI2Fs6+7G2iSjU6VAE
CT+dD5KaHW/Zv3m5VJnxVZCSgcEUM60jvfb+LFOpVkYmeXJ3d7GCNX4pRYPza9kM
RtZ+CpWpZcs0BYbT8vMehuGwKvnLSg+XE1QaBFf4HbPItsZqo3RL1RNmKGo+SNoH
gmofZRs=
-----END CERTIFICATE-----