Route Origin Authorization

$ rpki-client -vvf rpki.rand.apnic.net/repo/pubServerRand/0/3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa
File:                     3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (raw, json)
Hash identifier:          fwAVb3sGyLXcOz7jv6e2+seTay9cZHGY4GqGOGGY9Yo=
Subject key identifier:   8C:1C:5F:28:8E:2F:A0:56:0D:9A:18:B2:35:61:4B:E9:36:E5:E1:93
Certificate issuer:       /CN=A91872ED0000/serialNumber=8F34F1F953AD0365767E21EABE35AB46B55B3E58
Certificate serial:       413CF6D8F963C06D5AC52E55E060C89C523B52CA
Authority key identifier: 8F:34:F1:F9:53:AD:03:65:76:7E:21:EA:BE:35:AB:46:B5:5B:3E:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzTx-VOtA2V2fiHqvjWrRrVbPlg.cer
Subject info access:      rsync://rpki.rand.apnic.net/repo/pubServerRand/0/3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa
Signing time:             Sun 27 Mar 2022 15:00:00 +0000
ROA not before:           Sun 27 Mar 2022 14:55:00 +0000
ROA not after:            Mon 27 Mar 2023 15:00:00 +0000
asID:                     24021
IP address blocks:        203.147.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3c:f6:d8:f9:63:c0:6d:5a:c5:2e:55:e0:60:c8:9c:52:3b:52:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED0000/serialNumber=8F34F1F953AD0365767E21EABE35AB46B55B3E58
        Validity
            Not Before: Mar 27 14:55:00 2022 GMT
            Not After : Mar 27 15:00:00 2023 GMT
        Subject: CN=3082010A0282010100C4C3A7016B13BD914A2ABABB74E7F8F99B1E4D121455F02578091EA22A553566953B5561D712B859147B287DF9AAD9A517920B849A3068B345439868237349A539B1E7B54E8934BDD857CFA9D4A6313BCA2EAB4046120997CA164428FA855EF275247B4E8A26C7F63529D40DB5F46B1B2D31221209DD259070E4B7161E84CA28F85DA26CD26F6428544013C588D9082D50B433FAAA5A1B5E560ECAD98A948CCD25DEBF16D93E76886E845EFBAC1D839FC83E12F200B571EC1B9BCFC5E06E318893CD1433900CE96261ADD86C03ACF21701828AF208F5F8999555034CF56F06AD3DAD6F76A64E1C6B689E9283DB40EA84B1F63BAE62DD23A3345287F40E6B455D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:a7:01:6b:13:bd:91:4a:2a:ba:bb:74:e7:
                    f8:f9:9b:1e:4d:12:14:55:f0:25:78:09:1e:a2:2a:
                    55:35:66:95:3b:55:61:d7:12:b8:59:14:7b:28:7d:
                    f9:aa:d9:a5:17:92:0b:84:9a:30:68:b3:45:43:98:
                    68:23:73:49:a5:39:b1:e7:b5:4e:89:34:bd:d8:57:
                    cf:a9:d4:a6:31:3b:ca:2e:ab:40:46:12:09:97:ca:
                    16:44:28:fa:85:5e:f2:75:24:7b:4e:8a:26:c7:f6:
                    35:29:d4:0d:b5:f4:6b:1b:2d:31:22:12:09:dd:25:
                    90:70:e4:b7:16:1e:84:ca:28:f8:5d:a2:6c:d2:6f:
                    64:28:54:40:13:c5:88:d9:08:2d:50:b4:33:fa:aa:
                    5a:1b:5e:56:0e:ca:d9:8a:94:8c:cd:25:de:bf:16:
                    d9:3e:76:88:6e:84:5e:fb:ac:1d:83:9f:c8:3e:12:
                    f2:00:b5:71:ec:1b:9b:cf:c5:e0:6e:31:88:93:cd:
                    14:33:90:0c:e9:62:61:ad:d8:6c:03:ac:f2:17:01:
                    82:8a:f2:08:f5:f8:99:95:55:03:4c:f5:6f:06:ad:
                    3d:ad:6f:76:a6:4e:1c:6b:68:9e:92:83:db:40:ea:
                    84:b1:f6:3b:ae:62:dd:23:a3:34:52:87:f4:0e:6b:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1C:5F:28:8E:2F:A0:56:0D:9A:18:B2:35:61:4B:E9:36:E5:E1:93
            X509v3 Authority Key Identifier:
                keyid:8F:34:F1:F9:53:AD:03:65:76:7E:21:EA:BE:35:AB:46:B5:5B:3E:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.rand.apnic.net/repo/pubServerRand/0/8F34F1F953AD0365767E21EABE35AB46B55B3E58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzTx-VOtA2V2fiHqvjWrRrVbPlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.rand.apnic.net/repo/pubServerRand/0/3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.147.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:28:ac:5b:2f:98:7d:f0:07:22:c0:5d:7c:5d:0c:71:e2:14:
         72:9a:cb:90:52:c8:7f:03:f6:fa:6c:88:61:8e:aa:64:c3:8f:
         a9:41:e8:0f:87:6e:ab:d3:f2:89:9b:76:d5:8a:9d:ee:22:81:
         ba:bc:fa:4b:5c:6e:e1:ec:55:e6:3c:c5:7b:1e:16:d0:b7:c9:
         ef:b7:15:a1:31:e3:ea:83:5d:bd:42:c7:27:b6:fc:fa:6d:60:
         1b:d2:c5:d3:3c:bf:24:0f:fe:97:bd:f6:ef:e6:91:7b:e1:0a:
         7d:1e:c5:7a:c1:8f:06:01:72:d4:0a:47:4a:d5:6a:ad:19:1c:
         4a:c7:e8:91:d0:cb:52:3e:95:92:3e:43:64:ed:16:ce:c2:60:
         00:c1:e6:a3:b1:bd:56:a7:f0:7b:5d:c0:36:8a:c5:66:6c:ec:
         df:6a:cd:36:aa:03:df:0c:75:02:f3:ea:59:9a:0b:3d:d3:7e:
         74:91:27:10:58:0e:4d:ab:32:14:15:42:d1:02:72:69:8e:8c:
         20:36:ae:4f:d9:b7:dc:52:d8:b8:56:ea:a1:ba:ef:8a:4e:9b:
         e7:d0:b8:c5:e7:0a:a1:6a:fa:a8:14:07:d6:1d:4e:28:e7:60:
         3f:a7:73:f9:53:3f:a4:41:18:6f:e7:55:84:03:28:98:0a:da:
         16:55:83:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----