Route Origin Authorization

$ rpki-client -vvf rpki.rand.apnic.net/repo/pubServerRand/0/3130332e302e302e302f31362d3136203d3e2034363038.roa
File:                     3130332e302e302e302f31362d3136203d3e2034363038.roa (raw, json)
Hash identifier:          C0grZ7GBPDDJBeOLO38sDOT4ugY851nZrb9eAX999YU=
Subject key identifier:   1C:68:6E:CF:C1:83:82:90:E9:7D:3C:0A:DA:11:07:64:35:E2:36:F1
Certificate issuer:       /CN=A91872ED0000/serialNumber=8F34F1F953AD0365767E21EABE35AB46B55B3E58
Certificate serial:       0DE28E6ECB9CD2EAA1127D312ACE9447FD6684DE
Authority key identifier: 8F:34:F1:F9:53:AD:03:65:76:7E:21:EA:BE:35:AB:46:B5:5B:3E:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzTx-VOtA2V2fiHqvjWrRrVbPlg.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/pubServerRand/0/3130332e302e302e302f31362d3136203d3e2034363038.roa
Signing time:             Thu 31 Mar 2022 10:00:00 +0000
ROA not before:           Thu 31 Mar 2022 09:55:00 +0000
ROA not after:            Fri 31 Mar 2023 10:00:00 +0000
asID:                     4608
IP address blocks:        103.0.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e2:8e:6e:cb:9c:d2:ea:a1:12:7d:31:2a:ce:94:47:fd:66:84:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0000/serialNumber=8F34F1F953AD0365767E21EABE35AB46B55B3E58
        Validity
            Not Before: Mar 31 09:55:00 2022 GMT
            Not After : Mar 31 10:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:7d:be:a2:8c:e5:25:0a:79:fe:3f:44:0e:
                    d8:d8:32:29:da:06:2e:0f:f1:88:93:05:06:6f:bb:
                    74:b2:12:e1:04:a4:6a:12:9e:5c:0c:87:0e:bf:aa:
                    01:bf:63:b9:f6:20:e4:91:70:29:32:28:dc:25:e9:
                    0d:38:c0:11:80:40:66:e8:ce:d1:64:79:76:ba:f9:
                    bd:e6:ee:6d:8d:91:7e:b5:cb:c2:2e:64:18:f7:2f:
                    10:6a:ea:3a:20:3e:ee:89:91:70:2a:60:df:db:b9:
                    2f:3f:7e:44:70:14:cd:91:95:b0:f6:22:8e:99:c1:
                    ac:35:4f:cc:cc:7c:a0:5c:fe:70:0f:95:5d:a1:64:
                    99:9a:f6:6b:4d:1b:79:c1:84:0d:a9:06:4c:b0:7b:
                    2a:1e:5b:88:c2:f6:bf:b0:e0:d5:3f:16:a8:d3:eb:
                    d4:6f:45:64:be:22:b8:a0:80:da:98:3d:bf:89:c9:
                    f3:3c:59:2b:59:6e:75:ff:5d:c6:cc:ea:31:f9:e3:
                    89:c4:00:e2:e0:27:3e:57:e6:cc:e5:c1:83:7b:f9:
                    ba:00:1d:75:1d:54:db:7f:e0:ba:2f:9e:2a:43:b7:
                    d7:da:50:22:b1:47:ef:91:cb:74:97:b4:f6:60:a0:
                    87:03:07:c7:f7:c9:23:bd:43:53:a0:5d:69:b5:05:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:68:6E:CF:C1:83:82:90:E9:7D:3C:0A:DA:11:07:64:35:E2:36:F1
            X509v3 Authority Key Identifier:
                keyid:8F:34:F1:F9:53:AD:03:65:76:7E:21:EA:BE:35:AB:46:B5:5B:3E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/pubServerRand/0/8F34F1F953AD0365767E21EABE35AB46B55B3E58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzTx-VOtA2V2fiHqvjWrRrVbPlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/pubServerRand/0/3130332e302e302e302f31362d3136203d3e2034363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:11:61:15:f3:c6:a6:67:04:02:69:e0:f7:67:a1:97:e6:e2:
         f8:b0:82:67:68:98:23:ac:da:70:40:29:8d:36:c9:b3:ab:c1:
         0d:80:35:4d:96:64:c8:5a:14:42:d7:b0:64:d4:7a:95:9b:65:
         77:f4:fd:53:f4:2f:bf:58:d3:4d:77:a0:30:84:b8:1d:f9:70:
         42:75:ee:d3:34:54:85:92:e2:fb:2d:44:fe:65:83:55:7d:e6:
         a0:f6:27:d5:27:68:45:c6:3f:de:b9:ce:9f:b9:7e:a5:94:3d:
         91:99:1a:62:e1:d1:38:28:04:b0:2f:d6:8a:99:f7:29:7e:e2:
         5c:76:81:36:71:5d:47:e0:11:51:96:65:2f:13:e5:1a:96:4c:
         f7:a6:56:0f:a9:9b:d0:a4:cd:39:77:15:25:db:d5:e3:7e:61:
         e1:34:ab:b8:1a:53:f9:b3:dc:77:33:6a:bf:03:30:eb:56:0a:
         40:13:b5:68:56:41:90:19:3d:eb:75:51:59:ee:f4:e5:d3:29:
         0b:25:08:b6:3d:73:0a:de:35:0a:0f:01:cc:b2:ef:bc:a2:63:
         43:4f:0b:c0:ac:d2:c6:bf:a3:00:9e:b4:eb:46:1e:d3:7b:a8:
         6e:15:86:40:a1:4e:d2:20:01:b6:5f:f6:9e:0b:58:0a:34:1e:
         d3:14:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----