Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/C23B7DE0138F11EBAE4D9C0FC4F9AE02.roa
File:                     C23B7DE0138F11EBAE4D9C0FC4F9AE02.roa (raw, json)
Hash identifier:          a91WeEaEZldwu+MF2ib/21HeN0qd00q8rTAZ7nLtBNg=
Subject key identifier:   F1:05:15:7C:48:5F:09:6F:B0:C3:F8:67:F7:F4:69:3D:38:A4:B4:4A
Certificate issuer:       /CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
Certificate serial:       0ECF
Authority key identifier: 33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/C23B7DE0138F11EBAE4D9C0FC4F9AE02.roa
Signing time:             Sat 01 Oct 2022 18:55:35 +0000
ROA not before:           Sat 01 Oct 2022 18:55:35 +0000
ROA not after:            Tue 31 Jan 2023 00:00:00 +0000
asID:                     9312
IP address blocks:        2403:5180:66::/48 maxlen: 48
                          2403:5180:6666::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3791 (0xecf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129AAC/serialNumber=3380B4CFEE3AF81F8CFDB96025D51088A129640B
        Validity
            Not Before: Oct  1 18:55:35 2022 GMT
            Not After : Jan 31 00:00:00 2023 GMT
        Subject: CN=63388d27-4d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:6b:3f:c5:36:6a:12:bb:ad:7b:c8:65:06:
                    2d:3d:3e:2b:49:a6:00:04:81:6f:1e:0a:c3:51:e0:
                    c9:df:a8:c1:e6:3a:49:19:42:b8:55:66:6e:df:80:
                    d4:c0:d4:e7:47:7e:93:ab:0b:d0:83:bd:c4:4d:b3:
                    60:7c:75:4c:b5:7c:4b:f8:a6:ea:80:23:4a:f2:0d:
                    83:42:2b:d9:3f:fb:7b:98:66:40:27:d8:dc:04:77:
                    db:fd:b0:ea:e5:7d:ad:20:c5:96:c4:4f:b5:b5:3b:
                    e1:7e:80:83:18:5b:00:6c:37:eb:7b:6e:a1:91:41:
                    fd:82:f4:99:f6:af:20:88:82:68:09:95:c0:94:d8:
                    4e:c1:f8:65:b2:a0:f5:60:ce:c7:f4:b0:d8:f4:59:
                    3b:ed:80:c9:3f:53:74:92:b6:3f:64:0b:26:fd:40:
                    ca:6f:c9:cd:81:d1:30:0b:45:87:65:b5:31:ac:ec:
                    8c:6e:95:1c:a0:ad:91:3b:1d:36:68:f3:5a:53:16:
                    a9:af:05:87:50:7d:7d:57:57:0c:31:d4:66:4d:e2:
                    dd:1f:1a:95:ba:54:9c:8f:d9:bc:a4:dd:9f:fa:ba:
                    89:58:42:39:75:f8:7c:68:30:90:fd:9f:49:ab:53:
                    88:2e:92:81:eb:38:1e:8c:9d:37:7a:ad:c0:f7:46:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:05:15:7C:48:5F:09:6F:B0:C3:F8:67:F7:F4:69:3D:38:A4:B4:4A
            X509v3 Authority Key Identifier:
                keyid:33:80:B4:CF:EE:3A:F8:1F:8C:FD:B9:60:25:D5:10:88:A1:29:64:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/M4C0z-46-B-M_blgJdUQiKEpZAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4C0z-46-B-M_blgJdUQiKEpZAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AAC/DB9101D0391011E9A0E25B52C4F9AE02/C23B7DE0138F11EBAE4D9C0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:5180:66::/48
                  2403:5180:6666::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:eb:91:8e:c5:3d:de:aa:8c:e6:bf:0d:49:fa:75:23:8c:cb:
         0a:71:b8:36:b2:d9:ed:66:53:bf:26:c7:a6:ee:3e:cf:11:e9:
         11:8c:bf:db:0a:d7:5c:6a:5f:05:97:de:38:ef:2d:92:3f:97:
         23:de:f4:94:de:42:dd:1b:25:20:3e:ac:3f:b7:86:90:44:e3:
         8c:29:f1:df:2b:57:6a:9d:8c:57:3c:79:58:bc:8a:52:70:82:
         60:ab:10:08:7e:e7:d5:b7:24:f4:07:39:aa:c3:ce:c8:69:f7:
         a2:3a:4e:06:3a:40:50:df:e0:a5:0d:2e:9e:9c:7c:29:44:54:
         db:e0:f2:34:af:e5:20:bb:55:a0:8b:6c:42:43:cd:06:2e:a3:
         42:80:27:dc:2a:fe:91:2c:43:f5:7e:db:cb:00:b6:7c:1c:f0:
         ff:bf:ff:59:95:c7:fd:b8:dc:03:4b:fb:34:35:98:e9:f1:4f:
         9b:58:76:83:82:f9:6f:2e:f2:f4:f8:4c:9f:7b:70:16:63:56:
         f1:22:bf:37:00:22:03:b7:5c:96:5b:b2:04:ba:b7:73:19:e2:
         ce:c2:2e:6d:c7:f7:70:dc:6e:a3:a3:8f:de:85:bb:a4:f2:d4:
         e6:90:ce:d7:44:81:e0:03:8d:c3:ce:f7:65:e8:c2:73:77:b0:
         5d:7b:73:49
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICDs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjlBQUMxMTAvBgNVBAUTKDMzODBCNENGRUUzQUY4MUY4Q0ZEQjk2MDI1RDUxMDg4
QTEyOTY0MEIwHhcNMjIxMDAxMTg1NTM1WhcNMjMwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzM4OGQyNy00ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1x5rP8U2ahK7rXvIZQYtPT4rSaYABIFvHgrDUeDJ36jB5jpJGUK4VWZu34DU
wNTnR36TqwvQg73ETbNgfHVMtXxL+KbqgCNK8g2DQivZP/t7mGZAJ9jcBHfb/bDq
5X2tIMWWxE+1tTvhfoCDGFsAbDfre26hkUH9gvSZ9q8giIJoCZXAlNhOwfhlsqD1
YM7H9LDY9Fk77YDJP1N0krY/ZAsm/UDKb8nNgdEwC0WHZbUxrOyMbpUcoK2ROx02
aPNaUxaprwWHUH19V1cMMdRmTeLdHxqVulScj9m8pN2f+rqJWEI5dfh8aDCQ/Z9J
q1OILpKB6zgejJ03eq3A90YkLwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPEFFXxI
XwlvsMP4Z/f0aT04pLRKMB8GA1UdIwQYMBaAFDOAtM/uOvgfjP25YCXVEIihKWQL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFBQy9EQjkxMDFEMDM5
MTAxMUU5QTBFMjVCNTJDNEY5QUUwMi9NNEMwei00Ni1CLU1fYmxnSmRVUWlLRXBa
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL000QzB6LTQ2LUItTV9ibGdKZFVRaUtFcFpBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjlBQUMvREI5MTAxRDAzOTEwMTFFOUEwRTI1QjUyQzRGOUFFMDIvQzIzQjdERTAx
MzhGMTFFQkFFNEQ5QzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgACMBIDBwAkA1GAAGYDBwAkA1GAZmYwDQYJKoZIhvcNAQELBQADggEB
AAPrkY7FPd6qjOa/DUn6dSOMywpxuDay2e1mU78mx6buPs8R6RGMv9sK11xqXwWX
3jjvLZI/lyPe9JTeQt0bJSA+rD+3hpBE44wp8d8rV2qdjFc8eVi8ilJwgmCrEAh+
59W3JPQHOarDzshp96I6TgY6QFDf4KUNLp6cfClEVNvg8jSv5SC7VaCLbEJDzQYu
o0KAJ9wq/pEsQ/V+28sAtnwc8P+//1mVx/243ANL+zQ1mOnxT5tYdoOC+W8u8vT4
TJ97cBZjVvEivzcAIgO3XJZbsgS6t3MZ4s7CLm3H93DcbqOjj96Fu6Ty1OaQztdE
geADjcPO92XownN3sF17c0k=
-----END CERTIFICATE-----