Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130303a3a2f34342d3434203d3e203338303038.roa
File:                     323630323a666564613a3130303a3a2f34342d3434203d3e203338303038.roa (raw, json)
Hash identifier:          sXN1xb8IhOw+EiMkJVW4YZJfTf+v2xkojz6wEXeTG3k=
Subject key identifier:   97:87:D3:37:E1:C0:50:49:59:FE:AB:2C:DC:7B:B5:57:C3:56:65:22
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       7A9858876F807F663FD7CBA34A6416D2056223EE
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130303a3a2f34342d3434203d3e203338303038.roa
Signing time:             Sun 10 Jul 2022 20:00:01 +0000
ROA not before:           Sun 10 Jul 2022 19:55:01 +0000
ROA not after:            Mon 10 Jul 2023 20:00:01 +0000
asID:                     38008
IP address blocks:        2602:feda:100::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:98:58:87:6f:80:7f:66:3f:d7:cb:a3:4a:64:16:d2:05:62:23:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 10 19:55:01 2022 GMT
            Not After : Jul 10 20:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:bf:41:74:f0:12:b2:3d:97:a6:93:14:68:
                    60:74:e3:05:17:c1:7b:e8:87:da:e1:b4:10:4b:61:
                    f9:81:3a:22:27:6f:42:b2:68:5d:29:ad:14:d9:cd:
                    f1:a3:1c:bf:94:15:b4:e0:95:81:94:22:97:11:9e:
                    25:dd:9a:9f:92:3b:0f:99:8e:1a:a5:3c:31:12:bd:
                    ef:66:aa:1a:e9:59:88:0a:89:08:43:56:ab:7f:ec:
                    71:a8:e0:b3:85:4a:c2:ae:6b:bc:5c:62:45:5b:5a:
                    19:33:d8:c6:8d:55:d9:4d:4f:d6:e6:de:65:46:83:
                    be:54:9d:36:35:e2:95:92:06:d8:25:da:d6:5e:9c:
                    0c:43:98:2a:6e:2d:9a:f3:cb:e3:ee:f8:e3:63:f5:
                    b8:8b:5f:ab:4d:f7:c5:69:2a:d0:54:0f:20:ac:14:
                    29:b0:e0:5b:d6:f6:52:b8:60:de:b4:a7:ae:13:53:
                    a8:27:34:55:c5:84:e8:80:99:88:8d:25:9e:0f:83:
                    a5:0a:d5:ec:85:bb:83:f1:bd:ea:32:b6:84:3a:e1:
                    fa:68:b5:c7:9b:c9:15:b2:0b:3a:f6:a6:ff:c5:0e:
                    32:92:34:96:34:5a:b9:a2:1b:68:77:77:60:ce:d5:
                    79:bd:3a:e4:19:f2:f3:94:7f:b6:4f:3b:ab:92:6d:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:87:D3:37:E1:C0:50:49:59:FE:AB:2C:DC:7B:B5:57:C3:56:65:22
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130303a3a2f34342d3434203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:d3:89:3e:97:d8:89:86:73:26:9d:8f:4d:e1:d1:47:0a:56:
         2a:a5:ec:f2:83:12:1d:f8:06:06:62:31:5c:64:88:af:17:7a:
         25:76:74:af:d1:fa:c6:b3:9a:2c:d0:da:30:ab:62:c7:df:54:
         27:e1:a4:bf:1e:d1:98:0e:62:7c:d9:38:c8:21:db:50:31:7f:
         8c:ab:73:3d:08:86:ba:49:63:7b:a8:c5:ba:1c:2e:a9:ec:a3:
         cd:be:39:a1:5b:29:45:84:53:ba:1c:3a:79:2b:ef:b6:21:88:
         95:23:4a:f5:ba:02:a6:c0:03:3e:98:c9:2c:27:a4:4b:59:ac:
         66:f7:11:f9:24:b0:f4:92:6f:4c:85:d6:a0:d9:a7:64:ab:55:
         ce:d2:ee:35:a5:11:88:b3:10:f9:e0:37:69:cf:ad:83:ce:87:
         7c:8e:03:9d:c9:1b:24:aa:90:f6:b9:84:cf:42:ff:00:bd:81:
         11:84:fe:4d:15:a6:8e:d7:f0:cc:9f:75:82:37:27:bc:88:f0:
         16:02:8a:c9:bf:d6:fd:2c:73:a8:4d:ed:3e:06:4f:7c:a5:fc:
         e8:b2:11:20:3f:a4:0f:ee:81:fe:f3:51:ee:58:9a:eb:03:eb:
         bb:1f:ca:ff:7d:d8:3c:84:32:99:da:67:a2:4f:9b:27:be:9d:
         39:b9:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----