Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/4DEF875E7BF411EDB9E79331C4F9AE02.roa
File:                     4DEF875E7BF411EDB9E79331C4F9AE02.roa (raw, json)
Hash identifier:          QNnX/OINxBxUdelmBmY/Stv5Y9Teuh9xuyNLjK0WXQ0=
Subject key identifier:   79:FB:D8:3B:55:F6:7D:24:98:FF:C7:75:C7:BB:F5:3F:04:4A:5A:EC
Certificate issuer:       /CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
Certificate serial:       1332
Authority key identifier: 93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/4DEF875E7BF411EDB9E79331C4F9AE02.roa
Signing time:             Wed 14 Dec 2022 21:14:33 +0000
ROA not before:           Wed 14 Dec 2022 21:14:33 +0000
ROA not after:            Mon 01 May 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        2406:daa0:4044::/46 maxlen: 48
                          2406:daa0:4048::/46 maxlen: 48
                          2406:daa0:404c::/46 maxlen: 48
                          2406:daa0:4060::/46 maxlen: 48
                          2406:daa0:4064::/46 maxlen: 48
                          2406:daa0:4068::/46 maxlen: 48
                          2406:daa0:406c::/46 maxlen: 48
                          2406:daa0:4080::/46 maxlen: 48
                          2406:daa0:4084::/46 maxlen: 48
                          2406:daa0:4088::/46 maxlen: 48
                          2406:daa0:408c::/46 maxlen: 48
                          2406:daa0:6080::/46 maxlen: 48
                          2406:daa0:6084::/46 maxlen: 48
                          2406:daa0:6088::/46 maxlen: 48
                          2406:daa0:608c::/46 maxlen: 48
                          2406:daa0:8020::/46 maxlen: 48
                          2406:daa0:8024::/46 maxlen: 48
                          2406:daa0:8028::/46 maxlen: 48
                          2406:daa0:802c::/46 maxlen: 48
                          2406:daa0:8080::/46 maxlen: 48
                          2406:daa0:8084::/46 maxlen: 48
                          2406:daa0:8088::/46 maxlen: 48
                          2406:daa0:808c::/46 maxlen: 48
                          2406:daa0:80c0::/46 maxlen: 48
                          2406:daa0:80c4::/46 maxlen: 48
                          2406:daa0:80c8::/46 maxlen: 48
                          2406:daa0:80cc::/46 maxlen: 48
                          2406:daa0:a040::/46 maxlen: 48
                          2406:daa0:a044::/46 maxlen: 48
                          2406:daa0:a048::/46 maxlen: 48
                          2406:daa0:a04c::/46 maxlen: 48
                          2406:daa0:a080::/46 maxlen: 48
                          2406:daa0:a084::/46 maxlen: 48
                          2406:daa0:a088::/46 maxlen: 48
                          2406:daa0:a08c::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4914 (0x1332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F/serialNumber=936A0FAEF7A6FD83C26CEE1E5CFB3A42FF48E180
        Validity
            Not Before: Dec 14 21:14:33 2022 GMT
            Not After : May  1 00:00:00 2023 GMT
        Subject: CN=639a3cb9-90b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:8e:a8:7a:60:40:7a:03:5a:75:f5:bc:45:
                    41:b9:92:62:1d:b7:1f:e6:50:f3:45:c1:7f:e0:bc:
                    3a:01:5e:d6:32:b4:26:f2:ac:ab:cd:16:44:f5:8c:
                    f2:68:38:b0:45:0b:4d:e4:62:8a:4e:a0:32:a8:77:
                    ad:d8:ef:c5:a4:a1:bc:6a:09:a1:a2:78:43:fb:f8:
                    10:03:5e:18:25:27:84:83:78:46:ba:65:33:34:a1:
                    33:d9:5c:d0:d6:80:dc:19:25:d0:96:b1:0c:eb:b1:
                    85:8b:c6:6b:f7:ca:63:1e:1b:e4:e8:df:2f:0b:2d:
                    46:15:eb:2b:01:47:c2:d7:1e:7f:19:29:23:06:72:
                    c5:dd:8b:3a:29:04:40:d5:c5:c2:d3:59:d5:1e:57:
                    75:d7:44:93:ba:9e:bf:a0:b6:ea:d7:1b:a9:4a:3e:
                    fd:05:e5:de:21:eb:f9:d7:7a:15:16:da:5e:15:40:
                    ce:70:43:fc:fe:9d:5e:e4:c9:ca:44:44:4a:34:86:
                    80:a1:d5:c2:38:6a:d1:9f:bf:a2:0d:a3:bb:20:2f:
                    0b:de:2e:84:be:d2:b7:eb:42:86:f0:b2:0e:68:82:
                    ca:cc:57:70:c7:3c:4d:aa:c4:24:6a:07:23:70:5e:
                    a3:f8:30:15:e8:bc:5d:4b:38:08:08:3a:38:69:9d:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FB:D8:3B:55:F6:7D:24:98:FF:C7:75:C7:BB:F5:3F:04:4A:5A:EC
            X509v3 Authority Key Identifier:
                keyid:93:6A:0F:AE:F7:A6:FD:83:C2:6C:EE:1E:5C:FB:3A:42:FF:48:E1:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/k2oPrvem_YPCbO4eXPs6Qv9I4YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2oPrvem_YPCbO4eXPs6Qv9I4YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F635F/B87B64FC6F4811E8B1585164C4F9AE02/4DEF875E7BF411EDB9E79331C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daa0:4044::-2406:daa0:404f:ffff:ffff:ffff:ffff:ffff
                  2406:daa0:4060::/44
                  2406:daa0:4080::/44
                  2406:daa0:6080::/44
                  2406:daa0:8020::/44
                  2406:daa0:8080::/44
                  2406:daa0:80c0::/44
                  2406:daa0:a040::/44
                  2406:daa0:a080::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:8b:28:f0:eb:01:7d:d6:f6:ee:bd:1e:43:31:10:e0:d9:3f:
         d5:af:aa:57:a3:b5:35:0b:7d:0a:44:55:9f:9b:c7:58:fa:fb:
         84:c7:d3:40:3f:49:f8:c8:79:c7:74:22:cb:f2:e5:4b:7a:b9:
         6d:0d:0e:2e:c0:0d:2b:a0:36:f6:2c:99:12:6c:52:e6:bf:6a:
         9d:ad:84:31:86:db:cb:94:44:b0:5a:0b:d2:01:58:60:a9:42:
         6f:4d:40:18:95:dc:04:8c:33:3e:9e:7e:b9:8e:06:f9:4e:34:
         2b:9b:02:2a:34:0f:20:a1:6f:d1:cb:50:38:6d:de:b7:69:de:
         1b:87:b1:c3:63:e2:46:c7:65:1c:8d:a9:df:28:0f:f0:3a:62:
         1a:28:48:31:63:ed:de:96:75:ef:71:c8:3d:02:29:3a:2d:ae:
         ad:db:4e:89:b2:45:00:10:ef:d5:6d:bc:f4:31:72:b0:c1:05:
         1f:84:bb:d4:18:7c:66:9a:f2:f9:85:9c:46:03:3f:30:a7:2d:
         80:2e:d8:5d:03:15:c1:6f:a4:d2:3a:63:e5:91:ab:51:cc:1f:
         7b:a3:6a:e4:26:b6:e3:33:77:b2:5c:b3:9f:2e:8c:d6:4c:61:
         1e:c2:6f:94:34:cb:bc:3a:29:1b:53:34:ee:bc:0a:7c:21:ac:
         81:c3:6c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----