Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/51574146A58C11ECB0E23511C4F9AE02.roa
File:                     51574146A58C11ECB0E23511C4F9AE02.roa (raw, json)
Hash identifier:          34xSbZuvDMVs6TeWYCOI+oqELAG0NmfqbnjY6R0tfO0=
Subject key identifier:   00:4E:CE:A4:2A:42:C4:44:13:D5:CC:93:99:E6:28:6D:15:DB:E9:C5
Certificate issuer:       /CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
Certificate serial:       0370
Authority key identifier: 50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/51574146A58C11ECB0E23511C4F9AE02.roa
Signing time:             Thu 17 Mar 2022 00:51:03 +0000
ROA not before:           Thu 17 Mar 2022 00:51:03 +0000
ROA not after:            Sun 28 May 2023 00:00:00 +0000
asID:                     48266
IP address blocks:        144.48.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111590/serialNumber=50229DE035B72572F4E0027472EB6826FDFE94AE
        Validity
            Not Before: Mar 17 00:51:03 2022 GMT
            Not After : May 28 00:00:00 2023 GMT
        Subject: CN=623285f6-a5c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:d5:5a:94:55:e5:96:9d:ce:53:81:2b:69:
                    69:87:2f:67:a6:66:1e:e7:ba:6f:48:4c:87:e2:e1:
                    27:d2:34:0f:90:09:b2:24:8e:a9:c0:7f:9d:74:33:
                    d2:c1:88:23:86:a5:32:3c:98:dd:a8:6c:f6:74:1b:
                    0f:a7:63:08:e6:8c:35:d3:a0:23:e7:e7:bc:1b:d2:
                    68:c7:19:17:09:4a:b3:b4:47:ae:4f:58:e1:da:3c:
                    dd:1d:4f:20:0b:b4:bc:00:6f:33:30:fa:ab:77:b9:
                    31:27:fc:fd:c8:c9:0d:90:49:f7:61:fb:f0:19:6c:
                    00:63:ac:58:7a:20:29:7c:e0:da:d2:2a:dc:4a:bd:
                    35:47:3b:4d:8d:ad:76:6e:9a:6e:af:e9:80:b4:bf:
                    54:99:2d:3a:84:cb:b6:27:1d:57:98:25:7a:d9:fc:
                    d5:df:27:f1:d7:10:18:03:de:89:5f:c3:38:0d:8c:
                    02:93:7f:88:42:92:27:65:07:e6:ad:de:27:42:e7:
                    e3:0e:fc:87:42:df:c4:1f:ee:84:17:c1:4c:de:b2:
                    7b:c6:32:74:a1:71:71:6f:b3:cf:9d:48:7f:5c:49:
                    9d:77:c0:4e:7f:31:d3:cd:65:04:2a:19:20:fd:94:
                    84:e4:a4:a4:0b:88:04:50:b2:ac:9c:b5:e7:00:28:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4E:CE:A4:2A:42:C4:44:13:D5:CC:93:99:E6:28:6D:15:DB:E9:C5
            X509v3 Authority Key Identifier:
                keyid:50:22:9D:E0:35:B7:25:72:F4:E0:02:74:72:EB:68:26:FD:FE:94:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/UCKd4DW3JXL04AJ0cutoJv3-lK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCKd4DW3JXL04AJ0cutoJv3-lK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111590/025CD2627A6E11EB81AF2E3FC4F9AE02/51574146A58C11ECB0E23511C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:5a:57:e1:22:6c:2c:e9:46:c8:d4:0e:b8:8a:e3:f6:f1:3f:
         2d:65:fc:86:36:ca:37:6a:e8:38:7c:d8:9b:1a:7f:4d:cf:17:
         79:08:cf:3e:de:3f:96:71:78:68:c2:b8:77:d0:2e:d3:f1:e3:
         c3:bd:c0:66:27:22:4a:dd:94:8a:17:80:a6:8e:40:9b:fb:c3:
         d2:40:5e:9f:f1:80:e9:71:69:94:60:f6:60:bc:1a:0c:9e:b1:
         73:9d:62:65:a3:c3:54:8a:ce:dd:cf:0c:b5:42:7b:bc:5c:94:
         a8:c1:6e:19:98:38:d6:59:71:46:63:37:59:d7:bf:0b:24:ec:
         60:b7:73:06:35:0b:a6:d5:84:8f:c6:e6:4f:c6:33:14:6a:ba:
         c4:b7:d8:ea:b2:e4:92:a6:a1:1b:b8:42:e8:7e:fb:b1:10:a6:
         0d:b4:50:f2:53:c2:92:f1:43:7d:4a:8e:2d:c3:0e:7f:69:f2:
         bd:6c:aa:5d:0d:a8:19:45:80:b3:48:31:62:43:e5:17:93:38:
         01:95:38:b3:bf:c5:e4:4d:1a:86:96:f7:eb:29:64:c9:fb:b4:
         79:ed:fe:1b:3f:84:a7:72:fe:a2:7e:db:b3:e1:8b:01:41:57:
         0f:a2:4a:ce:14:d2:d7:df:9e:d6:23:d0:0c:57:b4:4e:66:79:
         b7:3b:db:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----