Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/50EE231C417A11ECA13E0E44C4F9AE02.roa
File:                     50EE231C417A11ECA13E0E44C4F9AE02.roa (raw, json)
Hash identifier:          z+SGj/WMrUhIZwE+FS/ngKth4sp8+c+hJRE2xD/Buiw=
Subject key identifier:   22:3B:3D:4A:48:DF:02:CE:A9:56:81:51:16:89:B7:0A:E4:59:C5:31
Certificate issuer:       /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial:       034E
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/50EE231C417A11ECA13E0E44C4F9AE02.roa
Signing time:             Wed 02 Mar 2022 13:50:54 +0000
ROA not before:           Wed 02 Mar 2022 13:50:54 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     210542
IP address blocks:        2404:3d80:300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846 (0x34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
        Validity
            Not Before: Mar  2 13:50:54 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=621f763e-107f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:2b:66:74:3c:6c:4e:3a:54:03:58:9d:89:
                    a3:eb:8b:27:c7:c9:e6:73:16:34:f0:ef:4d:f3:59:
                    10:96:88:e2:81:75:00:7b:e3:61:b2:dc:75:0d:0d:
                    7b:35:90:c4:b9:2c:fe:fc:d2:12:d5:bc:f2:9e:f4:
                    6d:c6:ea:b5:58:5a:d6:9b:0d:a9:27:3c:ca:9c:f3:
                    5f:7b:03:98:28:b7:8f:17:eb:b5:61:32:73:81:7d:
                    a3:82:6c:5f:c1:16:03:01:fd:c5:ae:db:26:9f:4d:
                    ff:c1:9f:9e:a9:81:e9:fb:0c:a3:bb:ee:e7:9e:bd:
                    f5:07:d9:90:60:6c:5b:c8:61:53:cc:7e:a6:c6:b9:
                    bf:ba:45:64:2c:e2:8b:c6:70:67:ca:50:b3:20:51:
                    22:0e:c3:64:3f:41:12:f6:f7:0e:81:6e:f5:cc:3d:
                    02:17:d0:89:00:16:a9:31:cd:d2:51:7b:96:e5:24:
                    ba:a8:e7:a1:e5:91:8b:5e:17:56:ed:9a:2c:71:77:
                    1c:c9:e4:93:98:0d:ab:fe:1e:56:39:d4:e3:48:bc:
                    d5:6e:b3:ae:41:dd:5b:c9:8c:31:6f:30:bf:d2:35:
                    90:d1:f1:05:39:97:67:e3:89:7d:09:f3:95:b1:9b:
                    c7:cc:9d:22:c0:ac:e1:d0:1b:a5:b4:5b:c4:35:57:
                    77:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3B:3D:4A:48:DF:02:CE:A9:56:81:51:16:89:B7:0A:E4:59:C5:31
            X509v3 Authority Key Identifier:
                keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/50EE231C417A11ECA13E0E44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3d80:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:7b:4c:8c:2f:d8:1f:6b:29:4c:54:6c:d9:90:cf:97:6b:3c:
         c8:d5:45:48:e4:8c:a6:b1:d9:d8:63:2e:31:f6:8c:11:5e:40:
         c8:67:0e:f4:f0:3b:f0:af:3a:6b:8a:57:e6:68:c9:b9:71:e2:
         45:cc:b3:75:9f:95:87:1c:4f:4b:25:9c:84:1d:8a:c6:42:ee:
         c0:bd:71:22:66:22:c0:a0:b9:a9:29:cd:ce:99:ba:58:76:95:
         80:2c:da:35:61:c5:0f:c9:60:a5:1e:99:45:91:6d:d6:29:b2:
         80:f2:07:91:5d:32:d0:c8:33:7b:5f:2e:b7:66:c0:92:9f:60:
         a4:18:c7:8e:34:67:97:19:8b:6f:31:97:9f:10:5a:28:d6:72:
         29:64:03:6d:e3:21:8a:f1:b1:12:f5:e1:10:60:9b:b6:a3:14:
         cd:2c:54:fc:99:c9:4a:87:37:95:d1:00:38:a3:7f:b1:30:b1:
         c8:84:7a:fd:65:0e:e9:d2:bc:6f:fc:18:72:f3:66:ce:2b:2b:
         b0:11:5e:a0:a4:39:ae:de:bc:1d:67:d7:7b:5b:17:78:9d:5a:
         8c:b1:24:3a:60:56:5e:bc:14:1d:be:b5:bc:61:1c:73:67:69:
         8e:7a:ad:ea:a1:82:63:76:45:16:fc:62:dc:cf:37:f3:d5:9f:
         71:0e:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----