Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/2934DBA66E3711EC9BFD4670C4F9AE02.roa
File:                     2934DBA66E3711EC9BFD4670C4F9AE02.roa (raw, json)
Hash identifier:          Z9l1B691kVg0ZDCMGzsWXpV0nAZ1UZzVBZGsf+OccoU=
Subject key identifier:   06:6A:2E:20:A4:BA:58:86:46:0D:FC:BC:F9:B5:60:EF:D6:F6:F1:23
Certificate issuer:       /CN=A9136C21/serialNumber=2A274889C1BC366C7E1913DC3F7D8816887DC394
Certificate serial:       1CAF
Authority key identifier: 2A:27:48:89:C1:BC:36:6C:7E:19:13:DC:3F:7D:88:16:88:7D:C3:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KidIicG8Nmx-GRPcP32IFoh9w5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/2934DBA66E3711EC9BFD4670C4F9AE02.roa
Signing time:             Wed 05 Jan 2022 14:52:54 +0000
ROA not before:           Wed 05 Jan 2022 14:52:54 +0000
ROA not after:            Sun 01 May 2022 00:00:00 +0000
asID:                     142600
IP address blocks:        2001:df0:b600::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7343 (0x1caf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C21/serialNumber=2A274889C1BC366C7E1913DC3F7D8816887DC394
        Validity
            Not Before: Jan  5 14:52:54 2022 GMT
            Not After : May  1 00:00:00 2022 GMT
        Subject: CN=61d5b0c5-75da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:5b:2e:b2:74:38:bc:42:de:f8:50:7c:f9:
                    6e:f1:ff:7b:98:38:97:22:c6:89:3b:2e:3f:ef:3d:
                    ca:c5:30:32:ff:5a:29:cb:2a:3e:ff:12:7c:ae:37:
                    e6:4f:54:0e:1a:e1:c2:21:e4:ab:25:35:63:8c:24:
                    e4:f6:24:f7:ca:1a:bf:88:54:5c:43:87:4a:97:3a:
                    a6:74:05:f2:4e:a8:aa:b3:c6:f3:c1:43:de:98:bf:
                    13:b3:c3:20:6b:a2:ed:f4:c0:0f:00:e8:61:30:f6:
                    15:b2:94:7b:fc:d5:6b:fb:3f:ea:ed:9f:b6:b5:e5:
                    fb:d4:2b:01:f0:fa:10:7c:48:34:ca:3d:84:03:19:
                    b8:03:8a:ae:cd:9f:08:d2:71:48:3e:4b:89:01:66:
                    7b:1b:57:b3:94:2b:bd:15:4d:a6:fa:10:f1:b9:1d:
                    54:64:bc:1d:d6:17:ce:8f:c0:d3:f1:d4:9a:2d:7e:
                    0d:50:31:3a:6b:db:78:ce:ac:fc:b8:f8:66:97:e6:
                    d9:ba:a3:92:18:0e:58:79:bd:e8:85:08:01:b8:e8:
                    d7:5a:dc:ef:28:ad:f9:55:1d:3b:ae:63:bd:7d:78:
                    1f:6a:78:6d:42:bc:cc:1b:a2:32:43:5f:4c:f5:c1:
                    8c:28:54:d2:3e:1e:7a:1c:11:23:f0:4a:e5:46:f8:
                    67:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6A:2E:20:A4:BA:58:86:46:0D:FC:BC:F9:B5:60:EF:D6:F6:F1:23
            X509v3 Authority Key Identifier:
                keyid:2A:27:48:89:C1:BC:36:6C:7E:19:13:DC:3F:7D:88:16:88:7D:C3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/KidIicG8Nmx-GRPcP32IFoh9w5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KidIicG8Nmx-GRPcP32IFoh9w5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C21/6DB0A8B00DA711E69F9F364BC4F9AE02/2934DBA66E3711EC9BFD4670C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:b600::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:61:34:49:dc:99:47:f5:ef:4a:3c:e9:d1:a0:92:d3:d0:53:
         5c:fa:d1:4f:f8:db:e0:bd:06:d3:54:95:a6:45:99:9b:ac:fb:
         4e:1a:93:15:a5:c0:31:f5:14:63:92:95:cf:b2:e4:e8:b5:84:
         4a:19:60:1a:68:49:f1:b8:e1:61:4b:e6:9e:16:fa:b0:26:de:
         71:16:d6:92:bc:fe:83:73:5d:4a:c8:f8:84:94:4e:c5:fb:77:
         0d:05:fb:db:e0:32:d1:98:20:19:61:34:35:cd:89:11:be:ff:
         13:ec:a4:81:97:c2:0c:60:ff:19:02:79:f7:0a:e9:66:19:e8:
         92:d2:55:60:87:31:2d:29:6b:51:03:6f:eb:c0:0b:bd:90:02:
         ba:52:41:75:2b:09:65:8b:f4:f6:fb:92:ff:64:bc:55:d0:2f:
         75:9a:32:b1:01:2d:fe:49:ee:7f:57:f3:a6:b4:63:64:34:02:
         fe:b4:3b:0f:2f:32:c3:88:74:21:28:73:9d:85:4a:c9:d1:3c:
         cc:e4:2b:91:a0:01:83:69:c0:e6:19:6e:df:5e:55:47:f6:fe:
         4e:b3:a9:ae:1a:f6:e5:6e:e3:dd:b6:61:0c:fc:5d:d1:56:d8:
         ba:72:54:cd:93:6d:23:94:4e:70:d2:c8:f6:88:0e:fa:22:5a:
         68:22:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----