Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/C11765C46E6611EA884B350FC4F9AE02.roa
File:                     C11765C46E6611EA884B350FC4F9AE02.roa (raw, json)
Hash identifier:          E8kGAMlGSnG6FpX+LPam+exc2idqpSb7ntRbcgm9jPA=
Subject key identifier:   35:A7:DA:AE:55:30:F2:98:E3:B9:D3:3B:45:FF:D9:8B:FF:3B:61:93
Certificate issuer:       /CN=A91FFE3F/serialNumber=859F98591F512D5BD8EE3DDB3F570E883BFF0410
Certificate serial:       07DA
Authority key identifier: 85:9F:98:59:1F:51:2D:5B:D8:EE:3D:DB:3F:57:0E:88:3B:FF:04:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ-YWR9RLVvY7j3bP1cOiDv_BBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/C11765C46E6611EA884B350FC4F9AE02.roa
Signing time:             Sat 01 Jan 2022 08:36:27 +0000
ROA not before:           Sat 01 Jan 2022 08:36:27 +0000
ROA not after:            Thu 02 Mar 2023 00:00:00 +0000
asID:                     139734
IP address blocks:        2403:ac80:1e10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE3F/serialNumber=859F98591F512D5BD8EE3DDB3F570E883BFF0410
        Validity
            Not Before: Jan  1 08:36:27 2022 GMT
            Not After : Mar  2 00:00:00 2023 GMT
        Subject: CN=61d0128a-7fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:af:37:d9:ef:c1:ef:d3:d4:21:34:f6:02:
                    b9:49:10:59:8e:7e:60:3b:00:a8:06:ff:2e:3e:0a:
                    de:50:e2:b1:3a:bb:8b:2c:64:6f:c5:05:6f:37:bd:
                    08:04:18:9b:04:c8:be:3c:25:25:da:1f:40:79:4c:
                    b0:bb:19:52:d8:44:7a:d1:78:24:e8:e8:ce:55:88:
                    37:2c:8b:10:88:5d:cd:44:68:75:c0:72:a3:df:f8:
                    1f:20:12:7e:5b:65:8b:56:99:a7:8c:4f:eb:a5:71:
                    25:d9:cc:74:32:c2:2a:8f:22:8e:80:f0:34:24:e4:
                    c4:23:40:b2:64:75:b2:1f:33:8e:a8:cc:48:88:95:
                    e4:ab:e7:b5:28:cf:b2:e5:86:16:2c:b8:12:e4:1d:
                    b9:ad:e9:2e:4d:23:6e:4f:0f:76:40:1a:b6:7b:16:
                    37:b4:79:ce:32:c7:7a:15:f6:d8:0c:e7:51:04:e8:
                    f3:db:85:51:4d:0b:c9:f6:6f:09:71:82:56:7a:4a:
                    43:b6:b1:7d:94:3d:02:e8:f7:4b:dd:ca:f7:6a:2e:
                    03:30:6a:b1:e0:47:56:ae:bc:37:e2:d7:9f:77:81:
                    18:cd:55:0e:e7:88:b2:00:ba:d7:b6:da:25:e0:4b:
                    be:fe:34:7a:d8:60:2c:e9:68:fd:f9:41:9c:4c:b6:
                    cf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A7:DA:AE:55:30:F2:98:E3:B9:D3:3B:45:FF:D9:8B:FF:3B:61:93
            X509v3 Authority Key Identifier:
                keyid:85:9F:98:59:1F:51:2D:5B:D8:EE:3D:DB:3F:57:0E:88:3B:FF:04:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/hZ-YWR9RLVvY7j3bP1cOiDv_BBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ-YWR9RLVvY7j3bP1cOiDv_BBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE3F/4D794BD2176811EAA896FF79C4F9AE02/C11765C46E6611EA884B350FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ac80:1e10::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:92:62:56:e1:b4:ee:aa:04:e9:82:1b:23:d6:4a:a3:03:
         45:84:b0:b0:54:31:be:a9:40:fb:ff:3e:31:13:72:9e:17:b6:
         cd:56:f6:b7:2e:1f:de:18:77:70:78:26:d8:ec:6f:50:1a:40:
         ee:0e:36:92:03:35:87:81:a5:2d:91:7c:a4:27:0c:51:e4:18:
         8d:af:dc:9d:86:74:e9:72:68:47:98:eb:55:5c:98:f2:80:b9:
         23:65:e1:f2:d9:81:ef:cf:5a:ce:bf:1d:e7:50:f9:19:58:af:
         19:91:10:8d:e1:bd:37:7a:aa:9a:45:31:de:27:68:e1:d3:08:
         0e:71:26:e1:7c:41:bc:bb:8c:36:eb:68:c3:59:1b:5f:8b:b9:
         fc:5d:d1:fb:cd:1a:66:6e:fc:ee:d8:37:5f:17:98:33:4f:51:
         3e:25:2c:2c:68:c7:ad:72:fa:4e:4e:5c:db:81:29:de:39:44:
         b2:55:a4:2f:07:db:de:18:34:df:0a:c0:99:90:65:4e:78:05:
         2b:d2:a5:de:31:9c:00:1a:7a:2d:fb:65:63:6a:d3:69:bc:0d:
         c4:8b:22:6b:65:3f:7a:1e:98:cd:37:5e:06:71:73:09:d7:cb:
         8b:ad:44:11:e7:c6:0f:d5:3b:d4:fc:7d:c9:52:57:34:b3:dd:
         a8:7f:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----