Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4466/06B2F4C8A8F311EBB2BA3E29C4F9AE02/9B38E614E28C11ED97125057C4F9AE02.roa
File:                     9B38E614E28C11ED97125057C4F9AE02.roa (raw, json)
Hash identifier:          tED5yMvvzoJYX4yzy5SPsbqK6b9d4eYmfigHsjCc4tc=
Subject key identifier:   83:76:03:B4:EF:5B:64:E7:7D:34:E0:4D:CE:04:C1:45:CF:A5:9A:FD
Certificate issuer:       /CN=A91F4466/serialNumber=C36DD2275F39C0761DFEA4AC619D330B65F403FE
Certificate serial:       048F
Authority key identifier: C3:6D:D2:27:5F:39:C0:76:1D:FE:A4:AC:61:9D:33:0B:65:F4:03:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w23SJ185wHYd_qSsYZ0zC2X0A_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4466/06B2F4C8A8F311EBB2BA3E29C4F9AE02/9B38E614E28C11ED97125057C4F9AE02.roa
Signing time:             Fri 12 May 2023 14:49:56 +0000
ROA not before:           Fri 12 May 2023 14:49:55 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     47869
IP address blocks:        103.102.44.0/24 maxlen: 24
                          103.102.45.0/24 maxlen: 24
                          103.102.47.0/24 maxlen: 24
                          2401:df40:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4466/serialNumber=C36DD2275F39C0761DFEA4AC619D330B65F403FE
        Validity
            Not Before: May 12 14:49:55 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=645e5213-1661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:f7:2d:7a:a0:34:ca:96:58:51:48:0d:ef:
                    10:0e:95:f4:4f:90:2b:55:cd:59:a9:85:df:37:33:
                    76:aa:cd:f0:2e:2f:68:4c:58:3b:ab:fb:0a:af:84:
                    95:72:c9:b1:02:e5:ce:60:8f:f4:c3:b5:65:fc:78:
                    94:e4:42:0c:db:75:60:d5:6b:dc:8d:cc:2f:da:e6:
                    64:7c:b5:87:64:ce:4b:60:91:a4:ed:ef:f1:26:aa:
                    c0:0c:1f:9a:6e:07:ba:3b:f5:9f:68:96:1e:fa:4f:
                    95:47:83:1a:3f:d6:76:09:b8:6b:a1:21:94:f5:17:
                    3b:ac:63:59:ae:34:89:f7:3a:08:35:68:3e:6f:9a:
                    33:69:71:d6:e7:20:16:4c:c0:1a:ae:f8:ad:a5:94:
                    42:fa:fb:43:5a:98:71:4e:e6:47:20:8a:3f:c9:a8:
                    b4:ef:bb:3a:4e:07:a4:30:b1:8f:04:aa:4e:e3:bf:
                    6d:04:16:c3:5a:49:de:10:39:25:4c:78:2c:58:76:
                    7c:02:34:74:4b:ae:a4:c6:78:5f:91:0e:d6:6f:83:
                    ee:b2:ad:9f:a0:34:bb:d6:31:82:12:23:d8:3c:1c:
                    6a:9f:db:27:34:d6:06:3d:d2:cb:f6:4a:c2:1a:11:
                    99:4c:a2:0f:7c:5b:0d:7d:b9:a8:47:bb:02:4d:82:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:76:03:B4:EF:5B:64:E7:7D:34:E0:4D:CE:04:C1:45:CF:A5:9A:FD
            X509v3 Authority Key Identifier:
                keyid:C3:6D:D2:27:5F:39:C0:76:1D:FE:A4:AC:61:9D:33:0B:65:F4:03:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4466/06B2F4C8A8F311EBB2BA3E29C4F9AE02/w23SJ185wHYd_qSsYZ0zC2X0A_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w23SJ185wHYd_qSsYZ0zC2X0A_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4466/06B2F4C8A8F311EBB2BA3E29C4F9AE02/9B38E614E28C11ED97125057C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.44.0/23
                  103.102.47.0/24
                IPv6:
                  2401:df40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:6c:94:ca:a7:58:9e:2b:cb:2e:86:49:bb:56:c4:c9:0e:24:
         32:b9:cb:91:19:0e:41:9b:c6:0a:7f:73:a9:5f:ed:62:f1:4a:
         0a:8d:da:07:42:24:19:48:74:78:83:04:93:fa:3f:b4:e6:de:
         48:80:93:75:0e:23:7a:39:36:f6:67:f9:9a:87:48:3f:c9:2c:
         32:3f:72:fc:76:d3:6d:80:35:9b:c9:e4:5f:1b:4e:fc:6a:be:
         3b:83:1c:a6:31:da:20:f5:45:3b:5f:31:34:f9:70:25:1b:86:
         7d:cb:3b:96:3d:eb:cb:7f:c3:40:0b:4f:f0:2f:b7:35:c6:53:
         16:4f:82:87:b8:c9:60:75:a4:dd:b7:f3:b1:81:91:d5:f5:47:
         a8:d6:15:3d:e5:23:97:80:82:03:7f:1e:73:58:4c:61:e0:34:
         29:75:b2:87:37:19:94:3c:21:f0:7b:6a:14:8d:07:1d:25:98:
         69:89:d3:8e:8d:3d:7e:48:c5:cb:fa:4d:5f:15:ba:a0:b1:68:
         70:69:50:69:07:1b:96:42:65:aa:11:20:93:41:7c:8d:8c:f3:
         a8:18:a0:e6:6f:6b:89:0b:92:e7:57:0b:24:dc:ff:9c:fe:95:
         43:05:40:2f:e3:46:16:de:a2:d4:d5:97:5d:7b:c5:70:4e:e9:
         34:50:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----