Route Origin Authorization

$ rpki-client -vvf rpki.rand.apnic.net/repo/pubServerRand/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
File:                     3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (raw, json)
Hash identifier:          RvNva7wbQxE5C2fqwsH9FbEB4zPEN8JOc5WH6ghIIdk=
Subject key identifier:   92:B0:ED:39:A3:E3:86:E8:FD:BF:0B:6F:42:0E:A4:6B:7B:FB:E0:56
Certificate issuer:       /CN=A91872ED0000/serialNumber=8F34F1F953AD0365767E21EABE35AB46B55B3E58
Certificate serial:       1E6ECA93EECEA73B8B554532F11FDF5AF49809E8
Authority key identifier: 8F:34:F1:F9:53:AD:03:65:76:7E:21:EA:BE:35:AB:46:B5:5B:3E:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzTx-VOtA2V2fiHqvjWrRrVbPlg.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/pubServerRand/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
Signing time:             Tue 08 Nov 2022 12:00:00 +0000
ROA not before:           Tue 08 Nov 2022 11:55:00 +0000
ROA not after:            Wed 08 Nov 2023 12:00:00 +0000
asID:                     45163
IP address blocks:        203.147.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6e:ca:93:ee:ce:a7:3b:8b:55:45:32:f1:1f:df:5a:f4:98:09:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0000/serialNumber=8F34F1F953AD0365767E21EABE35AB46B55B3E58
        Validity
            Not Before: Nov  8 11:55:00 2022 GMT
            Not After : Nov  8 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:9b:cc:c9:f4:e2:bb:f7:39:e9:a9:e7:2e:
                    44:15:e3:c2:d8:23:88:4d:4d:6f:d0:89:cc:88:97:
                    b7:d8:f2:99:9a:40:53:2e:1d:b8:09:93:e1:d3:4f:
                    ba:dc:bd:00:60:3d:19:08:99:03:87:50:bb:91:64:
                    98:70:4a:4f:c2:bc:77:bd:ef:2c:d7:ef:9d:33:77:
                    12:b1:7f:19:83:06:5a:04:fa:1d:b7:dd:55:53:c1:
                    af:d9:82:96:51:93:2f:a2:9a:e8:9e:a2:2a:84:b7:
                    4c:ee:2c:c5:24:f2:0e:32:5b:29:cd:14:bc:cd:4b:
                    11:26:4e:a6:bd:9f:21:f3:5a:79:ef:15:cd:fa:2c:
                    cd:ba:d2:45:9c:fb:fb:1f:18:d9:88:0d:6e:76:e7:
                    6f:6e:c4:c1:ac:c7:c5:c7:bc:6a:02:c5:02:b6:4f:
                    c2:fa:02:f3:3c:f8:0c:c7:7d:90:04:50:d6:96:9e:
                    6b:0b:01:ac:dc:2f:2c:04:20:01:eb:81:bc:4a:76:
                    b6:3e:f3:ff:e1:c0:3d:3f:ff:2d:b5:19:dd:1a:88:
                    65:29:ec:4c:e4:7c:a1:11:c0:4b:bf:26:4c:40:d6:
                    9b:bb:80:36:f0:78:87:2c:9e:2f:13:55:41:70:0f:
                    e9:20:00:e2:ff:44:f4:c6:14:f5:8e:82:ce:e7:9f:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B0:ED:39:A3:E3:86:E8:FD:BF:0B:6F:42:0E:A4:6B:7B:FB:E0:56
            X509v3 Authority Key Identifier:
                keyid:8F:34:F1:F9:53:AD:03:65:76:7E:21:EA:BE:35:AB:46:B5:5B:3E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/pubServerRand/0/8F34F1F953AD0365767E21EABE35AB46B55B3E58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzTx-VOtA2V2fiHqvjWrRrVbPlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/pubServerRand/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.147.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:e0:b8:a3:60:02:f4:a9:24:2f:3b:c8:77:a3:17:79:e0:18:
         44:6f:ca:07:43:63:13:3c:da:0a:aa:59:f5:6b:2a:b3:96:df:
         05:bc:cc:12:8f:68:31:39:fd:6a:0f:5e:67:71:69:fb:de:ec:
         e1:57:0d:ad:ad:54:69:a6:a5:1c:ff:b1:54:1e:46:28:37:7d:
         8c:9c:41:61:4b:88:e4:3c:73:31:63:fb:3b:70:7d:a3:3c:b8:
         5a:11:bd:fc:64:91:a3:11:d3:af:f0:8d:d4:db:e0:62:f9:1d:
         fd:1d:89:a4:0c:fb:ee:cf:df:06:dd:0e:03:28:f8:ec:3d:68:
         6c:1c:f3:74:b7:58:1d:85:07:18:55:13:c5:7e:f0:fd:8a:0d:
         71:b6:62:5c:47:8e:17:b5:77:5c:f0:92:df:7c:9e:9e:ed:d7:
         8f:cc:03:26:3c:e0:ff:a4:93:dd:a1:ab:b8:1a:eb:cf:2b:2a:
         cf:4d:03:26:6f:0e:97:a5:dc:59:53:44:af:32:51:e4:d7:63:
         c0:cf:0f:9d:9c:d4:d7:5b:51:4e:58:a4:97:51:f0:02:1a:72:
         bc:2e:3e:61:aa:66:16:1f:ee:15:b3:82:9d:76:75:b8:ea:48:
         8c:cb:69:fe:d6:10:c1:0b:ec:d2:54:2c:69:04:69:e9:8d:5a:
         c4:bf:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----