Route Origin Authorization

$ rpki-client -vvf rpki.rand.apnic.net/repo/pubServerRand/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
File:                     3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (raw, json)
Hash identifier:          uBzKuH7uWvRpCte/3oQtrno+secca5A0D3oNpgooSRU=
Subject key identifier:   6E:95:2E:64:E1:2E:1B:E4:6B:7E:D2:21:20:41:8A:FC:7C:20:7B:B7
Certificate issuer:       /CN=A91872ED0000/serialNumber=8F34F1F953AD0365767E21EABE35AB46B55B3E58
Certificate serial:       1DEB35166D857DE2EDC7AD9717B4DE80F1AFAA30
Authority key identifier: 8F:34:F1:F9:53:AD:03:65:76:7E:21:EA:BE:35:AB:46:B5:5B:3E:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzTx-VOtA2V2fiHqvjWrRrVbPlg.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/pubServerRand/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
Signing time:             Mon 07 Nov 2022 00:00:02 +0000
ROA not before:           Sun 06 Nov 2022 23:55:02 +0000
ROA not after:            Tue 07 Nov 2023 00:00:02 +0000
asID:                     24021
IP address blocks:        203.147.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:eb:35:16:6d:85:7d:e2:ed:c7:ad:97:17:b4:de:80:f1:af:aa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0000/serialNumber=8F34F1F953AD0365767E21EABE35AB46B55B3E58
        Validity
            Not Before: Nov  6 23:55:02 2022 GMT
            Not After : Nov  7 00:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:57:4a:f6:dd:ba:c7:80:64:22:f7:75:a6:
                    a0:39:b5:f8:d1:80:55:9f:9c:70:ea:3a:c2:ff:f4:
                    98:f3:53:50:96:71:f2:05:92:33:a3:db:9a:50:92:
                    7c:74:22:39:e1:dd:fa:66:46:ff:5c:b3:a1:3a:75:
                    8f:56:56:08:18:a5:92:d7:b9:f3:a4:28:76:a2:35:
                    75:db:45:9c:71:9a:37:2d:8b:a2:63:a2:87:11:d6:
                    18:83:a5:10:60:cd:eb:98:8c:ad:5c:93:83:79:b9:
                    72:cf:b5:8c:f7:7b:5a:a3:62:7b:c0:10:53:1f:f5:
                    f1:9c:fe:8f:73:1d:db:38:e0:b4:13:6e:26:cd:a6:
                    07:30:9e:d0:ef:61:19:2b:8d:99:96:b2:5a:13:f4:
                    82:3c:d8:8f:64:94:72:d8:a1:55:3b:a8:49:30:ac:
                    8b:a3:39:33:6f:2c:2f:0e:3a:2d:04:34:96:5a:d7:
                    f6:bf:ef:d9:87:65:72:b1:7e:a5:74:59:ad:49:a0:
                    ee:75:ed:08:63:9c:f0:bf:9e:30:8c:b6:e0:cb:6d:
                    93:d9:4d:6a:ac:ba:e2:d1:58:b3:2c:84:8a:76:33:
                    b9:55:ce:66:f5:9d:48:a3:0a:7a:52:e6:74:ec:6c:
                    a6:71:5c:6d:6b:c3:64:3f:48:af:89:22:9e:82:72:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:95:2E:64:E1:2E:1B:E4:6B:7E:D2:21:20:41:8A:FC:7C:20:7B:B7
            X509v3 Authority Key Identifier:
                keyid:8F:34:F1:F9:53:AD:03:65:76:7E:21:EA:BE:35:AB:46:B5:5B:3E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/pubServerRand/0/8F34F1F953AD0365767E21EABE35AB46B55B3E58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzTx-VOtA2V2fiHqvjWrRrVbPlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/pubServerRand/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.147.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:1a:cc:92:ff:f5:47:5a:fe:66:32:1e:4e:63:f1:45:32:9f:
         63:39:42:3c:8c:63:24:c0:fb:fe:a5:71:76:93:db:4c:b3:4b:
         fc:dd:e5:13:03:9e:ee:3b:70:84:d3:f7:d5:0c:db:cd:d5:aa:
         ce:06:39:96:93:9f:20:5e:e6:62:a0:b7:79:df:2c:08:ef:3a:
         8f:33:d7:10:04:13:f4:85:bd:e4:f5:d6:16:2b:79:6f:f2:77:
         86:65:2d:56:b1:9c:58:9d:f8:24:6d:d3:03:17:c9:4e:dd:7f:
         cb:aa:6f:c4:ba:b0:f2:6b:5a:91:ef:36:e0:11:5c:5c:1d:6b:
         20:ba:03:65:73:eb:7f:73:09:16:77:8e:72:95:05:67:bc:22:
         ea:26:4b:40:eb:b4:5b:52:be:f1:3f:00:d9:ea:a8:53:1c:92:
         93:60:cd:a8:90:2d:0a:4c:b8:bf:4c:4c:78:ff:09:09:e4:d7:
         a4:ac:a2:6f:4b:6b:5f:d8:89:d1:af:1c:49:1d:b7:ce:3d:bf:
         03:9c:1c:23:42:3f:89:56:7a:38:6b:32:81:3a:a4:bf:1b:ea:
         a5:25:28:12:0d:64:71:a7:c6:4b:4b:03:fa:36:a3:63:fa:61:
         1d:dd:d9:48:82:87:03:82:4f:d6:50:a9:1f:2a:fe:14:53:a3:
         08:e9:0c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----