Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/01E7D900F42E11EB8EFC4A13C4F9AE02.roa
File:                     01E7D900F42E11EB8EFC4A13C4F9AE02.roa (raw, json)
Hash identifier:          Y0xu9BXT+/duT8SJyIo/yzN4sqlSdSztZP45Mc7tfuk=
Subject key identifier:   04:09:0E:ED:73:10:5D:62:90:37:01:AF:89:F9:E9:0E:31:40:83:31
Certificate issuer:       /CN=A919813C/serialNumber=4B1AD1D45D1300A0AF216D9B719557E7B451B0F5
Certificate serial:       03EF
Authority key identifier: 4B:1A:D1:D4:5D:13:00:A0:AF:21:6D:9B:71:95:57:E7:B4:51:B0:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxrR1F0TAKCvIW2bcZVX57RRsPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/01E7D900F42E11EB8EFC4A13C4F9AE02.roa
Signing time:             Mon 15 Aug 2022 01:30:38 +0000
ROA not before:           Mon 15 Aug 2022 01:30:38 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     45768
IP address blocks:        180.95.0.0/24 maxlen: 24
                          180.95.64.0/19 maxlen: 19
                          180.95.96.0/20 maxlen: 20
                          180.95.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919813C/serialNumber=4B1AD1D45D1300A0AF216D9B719557E7B451B0F5
        Validity
            Not Before: Aug 15 01:30:38 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=62f9a1bd-be1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:56:a1:47:f0:7b:99:88:a4:cc:fc:24:c1:
                    e7:16:bb:8c:88:2a:cf:7a:b6:19:64:d7:4d:9a:ef:
                    3a:be:ca:8c:ae:a8:3a:9e:6c:34:5e:77:a3:b2:72:
                    1d:42:f2:9c:0e:f8:ac:27:3a:72:8a:b7:f6:88:64:
                    20:75:23:14:01:d7:d2:00:c1:9a:19:1e:eb:e3:0b:
                    4f:61:c6:50:29:3e:6f:8c:a1:d8:4c:1e:c5:1a:59:
                    fa:0b:91:54:32:fa:46:f0:30:5a:f1:49:66:ab:bf:
                    cc:fe:bf:27:55:f0:98:4f:48:d6:3f:e4:c8:2d:9e:
                    a2:d3:f9:cf:f2:1a:00:6e:fb:e8:68:92:1f:c5:ad:
                    2d:5e:34:f9:e7:8b:db:69:99:8b:4c:96:23:77:e3:
                    59:ed:68:d2:c6:fa:1b:c9:9d:6f:ce:49:53:6a:05:
                    10:76:6a:41:18:22:df:60:e5:79:f3:d9:03:54:f4:
                    cb:db:d2:f2:35:fc:e8:3b:41:ee:9c:42:ed:9d:cf:
                    90:b8:3f:81:be:89:ed:a7:b8:e0:3a:7a:07:3c:b3:
                    3f:99:22:09:50:bf:29:b4:04:94:0b:50:bd:6d:a3:
                    22:63:78:dd:d8:43:53:db:8f:10:0d:b2:1e:d5:6d:
                    35:43:0d:de:eb:aa:06:9a:8a:5b:f7:5b:3f:1b:67:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:09:0E:ED:73:10:5D:62:90:37:01:AF:89:F9:E9:0E:31:40:83:31
            X509v3 Authority Key Identifier:
                keyid:4B:1A:D1:D4:5D:13:00:A0:AF:21:6D:9B:71:95:57:E7:B4:51:B0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/SxrR1F0TAKCvIW2bcZVX57RRsPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxrR1F0TAKCvIW2bcZVX57RRsPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/01E7D900F42E11EB8EFC4A13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.95.0.0/24
                  180.95.64.0-180.95.119.255

    Signature Algorithm: sha256WithRSAEncryption
         15:3d:b2:9c:a5:43:de:0a:5f:94:fe:fb:54:bc:63:b1:52:5f:
         62:2c:8d:5f:d3:07:ab:65:10:ed:d4:11:11:1c:dd:ef:e4:a3:
         8e:d6:39:9b:c3:95:37:dd:ff:ef:51:e1:01:f0:28:93:f3:6f:
         bf:7d:fe:0e:45:c6:d6:18:6e:bc:c5:f9:4a:5f:a1:dd:dd:f8:
         1d:f6:c5:f6:ab:4f:ea:20:b4:35:37:2f:5d:87:1d:3b:06:8e:
         90:37:bf:5e:2d:11:8f:2d:f6:54:1b:28:78:b6:5d:5d:66:9b:
         b5:f6:01:29:b2:bc:16:37:59:a8:59:78:9d:ef:9c:0f:e4:b6:
         53:5f:77:e8:f6:d4:6a:41:01:63:4b:2f:b7:14:fd:2c:88:1f:
         4e:3b:b1:70:57:13:48:f0:1d:8e:8b:36:c4:07:af:f0:2d:7e:
         4c:09:be:a7:3d:0c:05:2f:a0:ea:51:71:cb:f1:d2:6e:76:0b:
         fc:9b:90:5a:1d:85:3d:39:93:b6:7a:fd:52:96:5e:98:94:8b:
         48:75:8b:ba:64:83:12:12:99:c0:6c:83:50:21:58:79:67:5e:
         34:93:6c:ee:bd:43:47:7a:ed:82:af:6e:4d:2f:58:df:17:b0:
         d7:b3:66:bd:bf:4d:27:96:40:d2:0d:d7:db:e8:33:c1:14:9d:
         49:cf:77:84
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgxM0MxMTAvBgNVBAUTKDRCMUFEMUQ0NUQxMzAwQTBBRjIxNkQ5QjcxOTU1N0U3
QjQ1MUIwRjUwHhcNMjIwODE1MDEzMDM4WhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmY5YTFiZC1iZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqDVWoUfwe5mIpMz8JMHnFruMiCrPerYZZNdNmu86vsqMrqg6nmw0XnejsnId
QvKcDvisJzpyirf2iGQgdSMUAdfSAMGaGR7r4wtPYcZQKT5vjKHYTB7FGln6C5FU
MvpG8DBa8Ulmq7/M/r8nVfCYT0jWP+TILZ6i0/nP8hoAbvvoaJIfxa0tXjT554vb
aZmLTJYjd+NZ7WjSxvobyZ1vzklTagUQdmpBGCLfYOV589kDVPTL29LyNfzoO0Hu
nELtnc+QuD+Bvontp7jgOnoHPLM/mSIJUL8ptASUC1C9baMiY3jd2ENT248QDbIe
1W01Qw3e66oGmopb91s/G2eWvwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFAQJDu1z
EF1ikDcBr4n56Q4xQIMxMB8GA1UdIwQYMBaAFEsa0dRdEwCgryFtm3GVV+e0UbD1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODEzQy81MTA4Nzc1Mjkx
M0IxMUVCOTU5OUI5NzRDNEY5QUUwMi9TeHJSMUYwVEFLQ3ZJVzJiY1pWWDU3UlJz
UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1N4clIxRjBUQUtDdklXMmJjWlZYNTdSUnNQVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTgxM0MvNTEwODc3NTI5MTNCMTFFQjk1OTlCOTc0QzRGOUFFMDIvMDFFN0Q5MDBG
NDJFMTFFQjhFRkM0QTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQDBAC0XwAwDAMEBrRfQAMEA7RfcDANBgkqhkiG9w0BAQsFAAOC
AQEAFT2ynKVD3gpflP77VLxjsVJfYiyNX9MHq2UQ7dQRERzd7+SjjtY5m8OVN93/
71HhAfAok/Nvv33+DkXG1hhuvMX5Sl+h3d34HfbF9qtP6iC0NTcvXYcdOwaOkDe/
Xi0Rjy32VBsoeLZdXWabtfYBKbK8FjdZqFl4ne+cD+S2U1936PbUakEBY0svtxT9
LIgfTjuxcFcTSPAdjos2xAev8C1+TAm+pz0MBS+g6lFxy/HSbnYL/JuQWh2FPTmT
tnr9UpZemJSLSHWLumSDEhKZwGyDUCFYeWdeNJNs7r1DR3rtgq9uTS9Y3xew17Nm
vb9NJ5ZA0g3X2+gzwRSdSc93hA==
-----END CERTIFICATE-----