Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/C8290E18C98C11E5915CA987C4F9AE02.roa
File:                     C8290E18C98C11E5915CA987C4F9AE02.roa (raw, json)
Hash identifier:          8dxI7l6ytAuSZHzjXkx9eyiPk1VC4dDvpJ/y7kPuNr8=
Subject key identifier:   4E:C4:99:49:38:8F:8A:D5:52:9B:73:C2:0F:38:5C:FC:88:A0:61:07
Certificate issuer:       /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial:       3337
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/C8290E18C98C11E5915CA987C4F9AE02.roa
Signing time:             Tue 16 Aug 2022 02:30:26 +0000
ROA not before:           Tue 16 Aug 2022 02:30:26 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     65077
IP address blocks:        1.9.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13111 (0x3337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
        Validity
            Not Before: Aug 16 02:30:26 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=62fb0142-d08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:91:85:15:2c:ab:b6:ab:34:9e:a6:b6:a6:
                    65:a2:59:1f:51:66:ee:73:32:f9:79:59:0e:03:bf:
                    a5:61:b8:97:a2:3a:a1:b1:60:16:d3:0b:1b:55:19:
                    5f:ef:06:0b:e1:15:b4:c0:20:35:4a:67:ec:d6:8d:
                    b3:f3:d5:75:5a:d4:06:ab:1a:66:d1:c5:e0:db:da:
                    84:3b:65:ed:71:41:93:27:65:f4:b0:5a:fe:c0:42:
                    46:82:fd:bf:2a:4c:ca:51:91:87:3c:93:f6:7f:e9:
                    5c:da:ce:86:04:da:9b:d1:74:45:86:e8:89:71:96:
                    9a:d8:e1:85:d6:56:72:bc:b2:66:c0:e4:22:ec:fc:
                    88:c5:af:a7:b7:53:50:e1:35:16:4f:05:ba:4c:46:
                    71:b2:cc:4a:5a:58:7e:85:2d:00:96:00:d2:95:1a:
                    69:51:39:75:d9:50:65:96:3b:2d:38:98:23:b1:f7:
                    9e:8b:83:56:0e:9d:f4:16:33:84:1a:f3:14:79:8e:
                    48:ca:d4:81:f5:b1:d3:4c:a4:cf:52:88:5f:e1:9e:
                    73:ef:ed:db:59:bd:8f:0b:dd:d1:30:c9:88:18:85:
                    d2:7b:81:27:6e:ad:3c:b4:84:b0:28:74:a8:57:99:
                    d4:0d:28:53:8e:5b:82:c2:2e:be:c1:3b:4a:16:0d:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C4:99:49:38:8F:8A:D5:52:9B:73:C2:0F:38:5C:FC:88:A0:61:07
            X509v3 Authority Key Identifier:
                keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/C8290E18C98C11E5915CA987C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.9.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:b2:bd:95:85:67:db:af:52:89:7f:97:d8:e5:f5:f6:bf:cc:
         b9:40:a5:b7:fb:3d:c7:bf:c5:77:23:ad:a4:8a:46:18:51:f2:
         c3:8a:84:25:a9:b5:3e:0b:60:ee:50:54:2e:13:16:87:48:b2:
         bf:e0:e9:41:63:da:7c:fa:cb:7e:d5:09:cd:22:b8:d0:ef:06:
         6e:63:55:bf:e7:ec:01:1b:62:39:e7:93:e9:cf:0f:86:0c:10:
         f2:ac:97:54:f6:2e:a7:57:bd:a5:a3:7a:02:da:cf:4b:ce:14:
         a8:4d:f9:83:ce:2a:f2:a1:d9:ef:ac:61:73:aa:cc:f6:4a:88:
         b6:e6:58:7a:cc:b9:e8:db:c2:04:77:c1:08:fc:50:a4:fe:88:
         97:8e:4b:a6:96:0d:9c:5f:26:23:dd:07:b8:23:1e:ca:9f:33:
         a8:fb:de:ab:af:8e:69:82:09:f6:6f:b3:23:fe:c1:52:b3:27:
         36:45:40:63:75:f1:cc:23:34:ec:1c:25:fa:3c:54:31:a7:b4:
         78:de:21:c2:bf:9c:e9:3b:e6:51:9d:e4:04:01:b1:ec:16:12:
         44:5a:bb:36:3e:0c:b5:5d:73:c5:90:91:5c:f6:0c:37:73:00:
         e0:b9:e8:ba:37:12:d0:19:b5:04:91:bb:c5:ab:cd:79:44:c2:
         fc:42:3b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----