Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/1/3136372e3136322e302e302f31372d3137203d3e2030.roa
File:                     3136372e3136322e302e302f31372d3137203d3e2030.roa (raw, json)
Hash identifier:          itbzEdt91lP3bsJcvmtFWKkbl9GREG5/z0aLe4b0VsU=
Subject key identifier:   41:AE:29:08:17:9C:2E:25:7A:62:F7:50:A1:44:EB:05:D5:B1:44:9A
Certificate issuer:       /CN=A9139F080000/serialNumber=4A19DB1BBDB332C4EC1079728213C2E58ED7DE56
Certificate serial:       72407BE4F73A3E7DA0BC787D4FAA9A7328373338
Authority key identifier: 4A:19:DB:1B:BD:B3:32:C4:EC:10:79:72:82:13:C2:E5:8E:D7:DE:56
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ShnbG72zMsTsEHlyghPC5Y7X3lY.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/1/3136372e3136322e302e302f31372d3137203d3e2030.roa
Signing time:             Sat 17 Sep 2022 01:09:28 +0000
ROA not before:           Sat 17 Sep 2022 01:04:28 +0000
ROA not after:            Sat 16 Sep 2023 01:09:28 +0000
asID:                     0
IP address blocks:        167.162.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:40:7b:e4:f7:3a:3e:7d:a0:bc:78:7d:4f:aa:9a:73:28:37:33:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139F080000/serialNumber=4A19DB1BBDB332C4EC1079728213C2E58ED7DE56
        Validity
            Not Before: Sep 17 01:04:28 2022 GMT
            Not After : Sep 16 01:09:28 2023 GMT
        Subject: CN=41AE2908179C2E257A62F750A144EB05D5B1449A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dc:33:7b:27:20:57:4a:fc:8c:84:69:c9:40:
                    41:6c:e5:38:72:a1:04:ce:c2:60:5a:f3:2b:e8:1b:
                    f0:08:a0:e5:7d:2c:b8:ed:0b:bf:9f:f6:c3:cf:03:
                    74:97:2e:f1:8e:a5:bd:77:a0:da:33:7b:76:b0:65:
                    a5:10:83:01:ba:1b:d3:b7:54:cc:9f:5c:88:1b:39:
                    fd:9e:df:cf:d8:38:fb:ea:a3:d8:e0:ff:24:81:59:
                    39:b5:50:f7:ba:0a:e6:1f:b6:7e:1f:a2:f0:ee:4d:
                    d7:b1:ec:2c:fd:c8:a5:fe:59:45:ac:e5:25:d0:e6:
                    9a:0f:bf:e1:ef:4c:76:f0:62:15:9b:3b:3f:07:6b:
                    8c:4a:8b:10:2a:eb:99:04:e4:7e:39:42:2d:be:14:
                    9d:11:3a:9f:1d:5e:6f:e5:3d:a7:6a:85:a1:7e:16:
                    30:ed:09:26:95:e3:57:5e:9b:70:b1:f5:a3:9c:14:
                    b1:1c:1d:96:47:4f:c5:3f:5b:f2:da:a4:83:93:0f:
                    48:5a:4e:a5:30:cb:af:2c:84:aa:97:57:99:43:55:
                    5c:60:75:09:81:f5:d7:51:23:d9:cf:41:29:26:d0:
                    b8:67:42:48:9f:08:fd:92:2d:23:41:a6:98:13:b7:
                    1f:44:2f:ef:f0:40:7d:8f:26:fe:73:ba:a2:60:9d:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AE:29:08:17:9C:2E:25:7A:62:F7:50:A1:44:EB:05:D5:B1:44:9A
            X509v3 Authority Key Identifier:
                keyid:4A:19:DB:1B:BD:B3:32:C4:EC:10:79:72:82:13:C2:E5:8E:D7:DE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/1/4A19DB1BBDB332C4EC1079728213C2E58ED7DE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ShnbG72zMsTsEHlyghPC5Y7X3lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/1/3136372e3136322e302e302f31372d3137203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.162.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b2:0f:38:0a:33:2a:2d:3c:cc:47:55:7f:c2:35:f2:26:66:1b:
         a2:d9:24:d7:cd:85:06:cf:59:28:cd:81:f6:98:bd:ca:ad:70:
         88:92:6e:26:cf:a8:c8:4c:af:49:15:73:3b:58:9f:9f:7a:a0:
         6c:96:1b:e5:bd:0b:20:93:4d:c1:9c:a6:97:f4:d0:f0:1a:ae:
         78:ed:fd:94:7f:84:93:e9:b0:40:95:f0:2b:54:03:5b:97:4e:
         87:ed:c8:25:75:d4:6c:ac:23:95:1f:4a:27:a2:f1:67:f1:35:
         87:bf:2c:f3:95:cf:77:f0:bc:ee:68:e4:45:b9:df:0d:75:5f:
         26:90:ac:79:7f:80:3c:77:be:24:55:0a:b6:60:39:c3:15:33:
         ca:46:81:1a:f3:05:d4:52:26:85:01:b6:b7:a2:b1:ee:fd:8e:
         2a:b6:ce:95:1c:00:cb:6c:5a:ac:e2:26:7b:64:bc:0e:fe:b1:
         a3:5f:6d:bb:1a:4e:99:14:61:29:63:37:ba:7a:4e:28:ca:ee:
         67:06:44:cf:37:75:31:94:be:9a:98:2c:13:f8:7e:95:38:bf:
         e7:e1:42:44:fa:53:d4:b7:01:a5:92:39:ae:15:06:67:05:b4:
         be:31:2c:93:76:63:77:40:9b:e0:15:09:7c:73:ef:cd:9e:c4:
         c2:20:85:b1
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIUckB75Pc6Pn2gvHh9T6qacyg3MzgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzlGMDgwMDAwMTEwLwYDVQQFEyg0QTE5REIxQkJE
QjMzMkM0RUMxMDc5NzI4MjEzQzJFNThFRDdERTU2MB4XDTIyMDkxNzAxMDQyOFoX
DTIzMDkxNjAxMDkyOFowMzExMC8GA1UEAxMoNDFBRTI5MDgxNzlDMkUyNTdBNjJG
NzUwQTE0NEVCMDVENUIxNDQ5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN7cM3snIFdK/IyEaclAQWzlOHKhBM7CYFrzK+gb8Aig5X0suO0Lv5/2w88D
dJcu8Y6lvXeg2jN7drBlpRCDAbob07dUzJ9ciBs5/Z7fz9g4++qj2OD/JIFZObVQ
97oK5h+2fh+i8O5N17HsLP3Ipf5ZRazlJdDmmg+/4e9MdvBiFZs7PwdrjEqLECrr
mQTkfjlCLb4UnRE6nx1eb+U9p2qFoX4WMO0JJpXjV16bcLH1o5wUsRwdlkdPxT9b
8tqkg5MPSFpOpTDLryyEqpdXmUNVXGB1CYH111Ej2c9BKSbQuGdCSJ8I/ZItI0Gm
mBO3H0Qv7/BAfY8m/nO6omCdjNUCAwEAAaOCAgcwggIDMB0GA1UdDgQWBBRBrikI
F5wuJXpi91ChROsF1bFEmjAfBgNVHSMEGDAWgBRKGdsbvbMyxOwQeXKCE8Lljtfe
VjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMS80QTE5REIx
QkJEQjMzMkM0RUMxMDc5NzI4MjEzQzJFNThFRDdERTU2LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9TaG5iRzcyek1z
VHNFSGx5Z2hQQzVZN1gzbFkuY2VyMIGBBggrBgEFBQcBCwR1MHMwcQYIKwYBBQUH
MAuGZXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzEvMzEzNjM3MmUzMTM2MzIyZTMwMmUzMDJmMzEzNzJkMzEzNzIwM2Qz
ZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAenogAwDQYJKoZIhvcNAQELBQADggEBALIPOAozKi08
zEdVf8I18iZmG6LZJNfNhQbPWSjNgfaYvcqtcIiSbibPqMhMr0kVcztYn596oGyW
G+W9CyCTTcGcppf00PAarnjt/ZR/hJPpsECV8CtUA1uXToftyCV11GysI5UfSiei
8WfxNYe/LPOVz3fwvO5o5EW53w11XyaQrHl/gDx3viRVCrZgOcMVM8pGgRrzBdRS
JoUBtreise79jiq2zpUcAMtsWqziJntkvA7+saNfbbsaTpkUYSljN7p6TijK7mcG
RM83dTGUvpqYLBP4fpU4v+fhQkT6U9S3AaWSOa4VBmcFtL4xLJN2Y3dAm+AVCXxz
782exMIghbE=
-----END CERTIFICATE-----