Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/0B800C7238C411ED97306D11C4F9AE02.roa
File:                     0B800C7238C411ED97306D11C4F9AE02.roa (raw, json)
Hash identifier:          ujWxUVSatSGqtM3TfBUmJSv99emvC6mY58TwJ7WNjEw=
Subject key identifier:   E0:1C:7C:B4:93:87:28:3D:D0:BF:7A:BF:E7:AC:40:65:E5:C0:CB:69
Certificate issuer:       /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial:       3386
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/0B800C7238C411ED97306D11C4F9AE02.roa
Signing time:             Tue 20 Sep 2022 09:10:18 +0000
ROA not before:           Tue 20 Sep 2022 09:10:18 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     54994
IP address blocks:        2001:e68:20db:10::/64 maxlen: 64
                          2001:e68:20db:11::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13190 (0x3386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
        Validity
            Not Before: Sep 20 09:10:18 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=63298379-8670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:0f:bd:6a:bd:0d:a8:0c:71:55:3e:f1:f2:
                    e0:ab:ae:34:34:51:8d:f1:41:fb:9a:03:c0:89:6c:
                    3d:73:11:9e:7b:b0:9f:45:53:0c:0b:8e:8a:29:e6:
                    9d:5a:76:40:f2:36:96:af:98:1d:db:c5:88:bd:e1:
                    05:c3:15:7b:e2:d9:39:45:af:85:2c:d7:a1:08:da:
                    04:37:50:77:23:ef:94:dc:1a:a9:f4:73:54:19:c3:
                    3a:d9:91:19:35:5b:9f:c6:8e:38:f3:80:c3:4d:e8:
                    d9:90:2b:a3:05:04:13:12:83:19:69:52:ce:37:46:
                    53:dc:b6:78:7a:b9:f5:1a:3f:6c:08:94:ba:88:7a:
                    7a:0a:62:f0:d7:f6:12:f9:35:89:06:cd:8f:8d:a1:
                    8a:04:3b:61:20:6a:41:5f:19:cc:aa:91:1f:9a:95:
                    1b:89:2b:9b:f4:4c:fe:d6:a0:70:37:c6:a5:2f:97:
                    0b:eb:9f:dc:88:56:77:65:e9:d8:5f:50:94:b0:de:
                    15:cd:ee:d0:25:f8:fb:c9:81:56:22:a9:c2:b7:4e:
                    fd:87:e9:ef:bb:ab:be:c7:11:b6:76:30:fb:18:a3:
                    eb:1d:21:a4:e5:3e:d6:25:0c:be:2b:6d:0b:c1:a7:
                    2d:ec:9d:c0:9c:bc:0f:c8:3d:d8:d5:45:0d:11:11:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1C:7C:B4:93:87:28:3D:D0:BF:7A:BF:E7:AC:40:65:E5:C0:CB:69
            X509v3 Authority Key Identifier:
                keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/0B800C7238C411ED97306D11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e68:20db:10::/63

    Signature Algorithm: sha256WithRSAEncryption
         60:f9:47:64:a4:61:a0:fd:56:c9:71:1c:a1:36:25:96:77:d3:
         5b:13:53:7c:3d:51:1d:35:ab:d4:2c:02:90:af:b8:95:61:4e:
         a4:d8:78:54:2e:6c:42:45:93:35:29:e4:6c:39:0a:71:90:18:
         9a:e6:fb:fc:fd:cf:5e:d9:67:8b:3d:a6:90:e2:e2:ba:17:f3:
         9b:65:18:db:ad:91:21:4d:30:c4:eb:f9:fd:a0:93:8d:45:44:
         07:32:6b:84:b5:0d:27:2b:a5:e1:8f:63:da:aa:33:e8:b8:47:
         5c:86:aa:86:24:18:db:05:8f:d5:02:73:84:51:fc:62:3f:df:
         49:41:46:7e:c6:cb:8f:26:19:e5:07:89:4f:e3:58:6f:82:47:
         ef:01:cf:ed:70:e6:ce:16:2a:b5:37:86:2f:27:ab:f4:ad:e6:
         d9:50:b9:a3:6f:b6:5d:a0:4e:de:71:78:0d:d0:34:0c:4c:9a:
         0d:1b:1f:ad:4e:d9:9e:6d:1f:74:db:5c:79:e4:6d:66:b0:36:
         ae:85:7f:66:c2:83:df:1b:84:0c:3e:17:e5:58:7a:f8:e8:53:
         98:5f:72:84:b3:20:ab:b5:f6:5e:a2:08:44:29:9a:4a:7a:8a:
         3c:09:c9:69:2b:10:14:25:a7:da:6a:88:66:0e:08:9f:a5:b9:
         39:20:af:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----