Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e2039343439.roa
File:                     3139392e3138322e3133322e302f32322d3234203d3e2039343439.roa (raw, json)
Hash identifier:          KkiBrPk8Axi2z5ipI5S5topc9w88D/tiduGcK/jTDXE=
Subject key identifier:   AA:16:EB:6A:45:6C:C3:D8:0C:E6:23:17:56:B2:C0:F1:B6:FA:64:63
Certificate issuer:       /CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
Certificate serial:       6F0AE69EAD09E5DAA2B820475A04335D4F7E8458
Authority key identifier: 84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e2039343439.roa
Signing time:             Sun 01 Jan 2023 03:43:39 +0000
ROA not before:           Sun 01 Jan 2023 03:38:39 +0000
ROA not after:            Sun 31 Dec 2023 03:43:39 +0000
asID:                     9449
IP address blocks:        199.182.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0a:e6:9e:ad:09:e5:da:a2:b8:20:47:5a:04:33:5d:4f:7e:84:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f
        Validity
            Not Before: Jan  1 03:38:39 2023 GMT
            Not After : Dec 31 03:43:39 2023 GMT
        Subject: CN=AA16EB6A456CC3D80CE6231756B2C0F1B6FA6463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:71:d9:66:82:97:2b:77:56:1a:6f:12:5b:
                    91:41:c3:14:b2:dd:1e:6e:44:37:67:1a:0d:4f:a7:
                    7b:ed:9b:2c:d1:ce:87:da:0a:0a:37:3a:db:37:42:
                    69:0d:d4:4a:9c:05:45:87:9d:78:a9:b1:94:a2:b3:
                    83:b2:bd:fb:37:16:f0:5a:95:ab:b1:1e:91:1c:c2:
                    d3:8c:e5:12:94:9d:95:f5:9f:d6:59:30:dd:28:82:
                    6e:79:73:ca:fe:68:28:6b:1c:74:1f:01:65:52:ef:
                    9e:9c:8b:9b:9c:9d:a6:22:14:05:72:8d:44:88:18:
                    58:5c:4e:07:9a:4c:e9:d5:1a:0e:4c:e1:3a:39:0e:
                    3f:75:93:26:4f:00:f4:c1:85:8e:01:ae:09:02:8c:
                    4a:02:58:f7:27:17:b5:ad:81:75:43:eb:9e:7f:ea:
                    99:31:b5:50:d2:ff:51:a8:28:cb:61:04:3e:ff:5f:
                    f3:89:ed:9c:e5:55:7b:15:4f:ee:62:45:1e:6d:21:
                    0f:6c:07:5b:05:0e:cd:18:d4:2d:53:34:1f:e6:b2:
                    d3:a8:ed:96:b4:aa:32:b8:0b:87:04:c6:db:b7:52:
                    91:55:3c:69:36:52:47:f8:ae:8a:24:0e:60:e2:f3:
                    31:10:14:03:bf:77:21:68:dd:c4:4e:14:8b:cf:b9:
                    26:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:16:EB:6A:45:6C:C3:D8:0C:E6:23:17:56:B2:C0:F1:B6:FA:64:63
            X509v3 Authority Key Identifier:
                keyid:84:58:7B:F6:7D:2A:DA:31:FC:7E:0F:F9:3D:E2:E2:66:D3:31:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/84587BF67D2ADA31FC7E0FF93DE2E266D33164C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b474673c9d19f36418a5bd347fb8bd3d827cad52f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/2/3139392e3138322e3133322e302f32322d3234203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:03:0c:82:a3:8b:da:dd:47:e2:d4:41:d1:ac:40:68:f3:6c:
         c6:1d:ee:15:b3:43:34:dd:21:35:cf:96:f0:62:49:db:bf:dd:
         4c:7a:a9:d3:4a:1c:13:5a:a1:ee:c7:30:85:40:b8:fa:b9:38:
         22:53:20:e7:51:4e:e0:c3:82:42:13:22:a9:fc:35:3a:39:fb:
         6c:ba:e8:af:59:a7:95:19:ae:f9:e9:a2:5b:86:a6:a4:53:37:
         d2:2e:43:9b:cf:aa:3e:e6:7f:19:8b:e9:f2:84:72:b0:1f:7d:
         c9:ea:cc:66:f7:ec:05:18:2f:6b:bd:55:66:bc:54:f0:f3:6d:
         43:eb:3f:92:36:e4:90:15:4a:2f:26:4c:ce:bf:74:5f:b4:94:
         50:b7:00:58:c3:28:a4:2f:5f:df:49:b3:7a:e1:e2:11:22:bc:
         79:fa:b5:da:10:6e:b3:8a:d0:cd:32:94:3d:0f:87:ab:03:e2:
         7f:ba:9a:44:67:37:26:cc:40:d0:9a:31:bd:dd:e2:47:b7:85:
         6b:25:44:da:d0:ff:f7:fb:76:fe:ca:77:c5:b1:b7:03:6d:1a:
         4e:85:c0:44:e7:d7:60:a5:ee:55:7c:3d:53:ff:05:93:85:a0:
         99:cd:35:53:b2:5b:00:99:ab:e9:0f:77:32:9f:f5:4b:2d:18:
         5a:05:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----