Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A60DBEFC391211E99E31F655C4F9AE02.roa
File:                     A60DBEFC391211E99E31F655C4F9AE02.roa (raw, json)
Hash identifier:          TKX/N6Pez5RKTLQ7Ltsa60Vo6IlTunHvkry36fq1umk=
Subject key identifier:   58:35:4F:42:38:0F:08:6D:00:C0:2B:BC:6C:CD:CB:3D:B7:92:0A:AF
Certificate issuer:       /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial:       0ECB
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A60DBEFC391211E99E31F655C4F9AE02.roa
Signing time:             Sat 01 Oct 2022 18:55:30 +0000
ROA not before:           Sat 01 Oct 2022 18:55:30 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     43992
IP address blocks:        2403:5180:24::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3787 (0xecb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
        Validity
            Not Before: Oct  1 18:55:30 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=63388d22-1151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d2:3e:68:3f:98:43:7c:9c:3d:6f:40:ee:e3:
                    3a:10:5e:da:85:74:04:5c:a8:68:67:9e:d7:33:48:
                    ba:ec:95:7f:c6:36:c6:84:24:3f:6f:0d:5a:49:64:
                    a7:a6:b3:65:15:f2:f3:66:b3:78:d8:e9:59:fd:bf:
                    9c:bc:4d:07:1f:86:9f:91:c2:4c:4b:88:51:72:42:
                    5b:a8:13:4b:42:c2:95:50:2d:39:10:a1:ec:8c:5b:
                    47:0a:15:f5:41:11:99:78:95:65:f1:be:5e:ad:c5:
                    be:dc:e2:8f:59:fd:e5:cc:fa:c5:ab:56:0c:b3:fd:
                    03:8c:4d:00:33:70:1e:1f:29:c1:da:c4:13:a6:01:
                    0f:e6:2b:4a:0e:8c:99:c5:32:7e:4d:0f:85:33:ce:
                    92:9d:45:d1:97:6d:eb:6a:72:11:e8:f1:1c:a5:92:
                    4e:c7:9a:df:62:27:6a:f3:ed:92:d0:35:d4:1c:36:
                    c0:61:e0:59:42:48:93:3e:7f:ff:59:9e:5b:a2:5b:
                    be:b1:f7:3d:7f:03:c8:4c:47:dc:3c:ea:c5:6e:25:
                    db:d9:43:c1:f7:1f:fb:85:65:f9:f8:99:4a:20:ca:
                    6b:23:7c:48:67:7d:2b:55:e8:b8:2a:5b:f8:1a:d9:
                    68:8b:4f:d4:54:21:9d:3d:b6:78:23:a6:0e:71:f4:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:4F:42:38:0F:08:6D:00:C0:2B:BC:6C:CD:CB:3D:B7:92:0A:AF
            X509v3 Authority Key Identifier:
                keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/A60DBEFC391211E99E31F655C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:5180:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:4f:59:ab:1b:d1:46:ed:4a:aa:ef:e9:68:e5:14:df:f8:05:
         59:82:ba:91:e7:1f:67:88:40:86:b5:83:7d:e1:c6:4d:13:a3:
         b9:82:a4:21:75:96:71:fc:cd:97:4e:82:b6:fd:b6:b0:81:d9:
         b6:88:3e:20:cb:f7:21:2c:b7:ec:42:e9:54:c5:4d:68:55:17:
         e6:30:4d:87:d1:58:71:6b:b1:1e:ed:8f:e2:c5:96:e0:cd:14:
         06:31:14:73:45:03:a8:dd:89:c7:a4:1c:33:c6:a6:1d:86:ec:
         59:2d:55:f7:1e:96:f2:fb:69:5d:6f:b5:5e:2e:a7:64:d7:8c:
         25:07:e0:ef:2b:3e:ef:9d:f7:b3:3b:3d:3c:ec:47:35:7f:44:
         e7:5d:a7:79:4a:c8:bf:90:45:54:50:86:2b:49:fc:c8:ee:0a:
         95:9a:1f:a4:e2:bf:3e:e2:8f:14:05:da:32:c9:f9:9f:2b:4f:
         dd:bd:c0:ec:6f:51:ad:fa:d6:38:f8:5e:9d:e9:99:07:70:d6:
         5e:32:11:86:ff:1c:c4:5b:ef:8d:b5:e8:9d:d6:8d:3f:c6:13:
         ed:71:86:c0:77:8c:0e:39:41:7d:c2:58:a2:c6:91:b0:5b:72:
         3c:c9:f4:e4:e5:e3:8f:ba:5a:8a:7a:5b:28:5b:9a:fa:d4:12:
         c6:07:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----