Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/3BB3ABCCBD0311EA9C5CD255C4F9AE02.roa
File:                     3BB3ABCCBD0311EA9C5CD255C4F9AE02.roa (raw, json)
Hash identifier:          LVNYkx0UaDaHkOEUbT3kiCsMZT9Zk0/eb4EzxhKp98w=
Subject key identifier:   9D:14:04:05:52:17:03:3D:07:92:73:93:07:CA:A7:0F:BC:6A:54:BB
Certificate issuer:       /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial:       333B
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/3BB3ABCCBD0311EA9C5CD255C4F9AE02.roa
Signing time:             Tue 16 Aug 2022 02:30:31 +0000
ROA not before:           Tue 16 Aug 2022 02:30:31 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     9986
IP address blocks:        45.116.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13115 (0x333b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
        Validity
            Not Before: Aug 16 02:30:31 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=62fb0146-81d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2a:b1:b3:18:1b:0c:be:19:d6:0e:10:66:78:
                    6a:6c:9b:45:7b:c5:c8:27:d7:9a:6c:9a:48:9c:5a:
                    8d:b5:81:42:81:69:69:c3:8a:5b:be:36:9a:d7:46:
                    41:15:3d:c1:96:fe:e0:6e:07:0f:f2:56:69:2c:6d:
                    de:b7:9c:ff:55:fb:d3:ae:a5:50:d2:03:13:66:62:
                    a6:d1:ef:d6:e5:68:9e:c4:c5:8e:1c:c4:eb:6b:a1:
                    19:0f:9f:f6:f9:bd:16:74:08:21:21:96:70:da:39:
                    b4:cc:a2:08:1c:ae:fd:a3:1a:ac:46:9b:07:f5:4d:
                    3f:2b:3a:f0:f3:e9:07:0c:7a:25:1a:24:d7:b1:d6:
                    6d:9c:c3:37:5c:c1:13:d3:c6:b0:3d:9b:f7:df:b8:
                    1b:a5:32:76:3b:9c:5c:1d:cf:0e:b5:3b:80:b0:25:
                    de:11:99:55:71:75:40:25:7d:bf:5d:6c:9d:cf:d3:
                    67:22:40:23:dd:35:6c:a9:3f:3b:49:e1:eb:0e:e4:
                    47:11:68:0a:1d:ed:c4:a2:66:c4:22:4e:fc:fd:4f:
                    a5:da:18:86:40:c2:f0:ff:61:39:fa:26:05:06:ca:
                    b8:e6:7f:ff:15:47:35:11:2e:f5:71:2b:ce:de:03:
                    de:db:97:64:b7:fb:7e:11:69:65:3d:c1:4e:60:8f:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:14:04:05:52:17:03:3D:07:92:73:93:07:CA:A7:0F:BC:6A:54:BB
            X509v3 Authority Key Identifier:
                keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/3BB3ABCCBD0311EA9C5CD255C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:47:94:cb:ca:d6:65:20:5c:70:20:be:d6:82:5b:9f:f3:56:
         38:b8:c8:67:fe:15:ef:32:ca:07:d2:51:c2:d5:9f:d7:79:66:
         99:a2:56:b8:75:8e:9b:40:e5:20:5b:3a:09:c2:9a:f1:88:3f:
         90:57:1b:e2:f5:2e:eb:d3:3b:02:88:8e:6e:cc:aa:ad:95:7f:
         75:f5:26:cb:93:d8:07:98:76:28:6f:d7:40:c0:22:3d:76:70:
         6a:b3:b9:e1:b8:dd:ec:04:ac:b8:a0:c7:b0:42:c6:55:9a:4e:
         d4:e2:64:c9:a6:f8:c7:ed:ae:bb:fc:3f:f6:66:5f:3b:aa:04:
         8c:a9:bb:5a:e4:54:b7:21:68:da:55:77:de:27:ef:c4:75:98:
         da:e1:9f:b1:b1:f1:d2:26:65:09:2c:ad:bd:0c:71:32:67:7f:
         6e:64:40:37:56:2c:1c:c2:ce:83:bf:64:2b:fd:52:bb:45:1c:
         f4:89:3d:2c:d2:01:03:48:3e:e8:0d:14:1b:8d:60:5e:55:61:
         b9:b5:66:54:b9:de:fa:9a:df:31:30:e4:49:8a:17:ae:ba:82:
         2a:c9:63:6f:3a:4c:ac:fc:47:2d:f4:40:8e:e5:91:3f:6c:b8:
         5f:a3:1b:22:cd:e4:b4:2d:8b:bc:9a:25:dd:ac:cc:17:59:64:
         2a:ea:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----