Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/CA928832C98C11E5915CA987C4F9AE02.roa
File:                     CA928832C98C11E5915CA987C4F9AE02.roa (raw, json)
Hash identifier:          QB5j+q4qRsl3BcxMLtVx7fEDcNvL19YIPEe7BiSGfA0=
Subject key identifier:   6A:9D:A2:D3:EA:BE:A1:87:07:AC:6E:00:EC:F7:40:01:EB:42:AE:0F
Certificate issuer:       /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial:       3339
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/CA928832C98C11E5915CA987C4F9AE02.roa
Signing time:             Tue 16 Aug 2022 02:30:28 +0000
ROA not before:           Tue 16 Aug 2022 02:30:28 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     65120
IP address blocks:        1.9.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13113 (0x3339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
        Validity
            Not Before: Aug 16 02:30:28 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=62fb0144-d44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:54:59:dc:47:34:4a:94:f4:5a:84:e0:29:33:
                    0a:94:48:93:0d:4a:2d:70:ea:3a:e7:47:6f:e9:11:
                    d0:5e:9d:a1:af:f8:0f:8c:fd:e2:3d:ae:cf:3a:e3:
                    8b:fa:79:3a:c0:cc:45:b9:90:b6:62:5d:d7:48:9c:
                    5b:d8:45:07:5f:da:0c:0a:fb:bd:b4:2d:f0:b1:1a:
                    60:43:ff:c3:09:5c:6a:e2:d3:bc:dc:d7:9c:17:db:
                    26:c6:0c:ff:37:63:0b:1f:65:30:a9:8e:ba:61:61:
                    f0:e8:5d:6b:dd:d1:b6:3d:8c:f3:eb:4b:40:63:fc:
                    6f:e8:2f:58:65:ed:74:f2:0d:4c:49:cc:91:0b:34:
                    67:4a:43:6f:9d:00:63:d9:83:ba:7c:f6:16:18:40:
                    fa:ef:c8:6d:4e:a1:bf:bb:16:f0:a5:ed:bd:66:08:
                    94:92:9b:98:0d:4e:5e:7e:5c:48:22:ef:cf:7f:71:
                    16:e3:8f:20:5e:e6:6e:0e:14:48:aa:c4:f7:22:56:
                    20:62:7b:61:42:19:0f:28:8e:9e:1d:1c:27:4e:8a:
                    f0:4a:19:99:0b:4d:aa:67:bd:8c:1d:69:d0:36:f3:
                    93:ff:4f:f7:c8:d0:19:cc:d9:14:f3:79:0c:a3:9f:
                    7d:98:45:f8:a0:d2:9f:82:fc:e1:1f:41:2c:7f:69:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9D:A2:D3:EA:BE:A1:87:07:AC:6E:00:EC:F7:40:01:EB:42:AE:0F
            X509v3 Authority Key Identifier:
                keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/CA928832C98C11E5915CA987C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.9.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ff:e5:e9:97:1c:38:bd:a9:fe:81:5a:45:62:7e:f3:77:b1:
         67:8a:a4:c3:07:91:8c:82:9d:31:ae:49:78:e3:74:3a:02:3f:
         2e:32:5b:3a:36:66:ab:b5:28:99:fe:b8:0a:fe:cc:a0:32:9b:
         0c:a5:ee:bb:a3:d0:6a:35:c8:9b:13:39:80:1e:6c:cf:a1:cd:
         95:f2:8f:16:1c:7d:e9:a3:9b:98:8c:42:e6:dd:bb:df:a9:57:
         23:fd:d5:57:ad:95:3c:f6:f0:52:75:ea:cd:12:44:d1:e3:5b:
         d6:bc:b9:a1:7d:80:ff:23:2b:e1:61:fa:77:d9:20:4f:b6:9a:
         69:44:09:5a:fe:d3:15:8c:1b:07:30:5c:24:61:51:ca:92:f8:
         87:c1:08:e9:d1:67:e7:12:e9:c1:f2:bb:79:6d:a4:01:8c:88:
         a9:80:bf:6c:c1:82:16:57:40:40:51:76:1c:63:8c:1f:ef:63:
         d2:a1:ae:68:9f:a6:02:52:74:5c:0f:50:a1:ac:63:d2:80:47:
         c7:e0:2d:94:48:e7:93:0a:43:15:c4:38:2a:6e:0e:c2:90:52:
         87:a1:e6:d9:50:50:44:29:6b:a1:a9:7a:47:64:a4:72:5c:f8:
         32:a8:65:a0:13:af:a7:a1:f9:ac:fb:5e:59:65:4d:a8:63:fc:
         0d:52:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----