Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3131303a3a2f3434203d3e203338303038.roa
File:                     323630323a666564613a3131303a3a2f3434203d3e203338303038.roa (raw, json)
Hash identifier:          XbIYKOJFqT5tq13Ze9P9x45zUXC7a5VRUUX3MyXFpbo=
Subject key identifier:   30:AF:FB:CE:E3:45:C4:A7:FF:B1:CE:7A:63:28:98:0E:18:2B:98:EB
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       2650600350D7E4A0EB16043400A4B01D4A3CFC70
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3131303a3a2f3434203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 11:00:00 +0000
ROA not before:           Wed 13 Jul 2022 10:55:00 +0000
ROA not after:            Thu 13 Jul 2023 11:00:00 +0000
asID:                     38008
IP address blocks:        2602:feda:110::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:50:60:03:50:d7:e4:a0:eb:16:04:34:00:a4:b0:1d:4a:3c:fc:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 10:55:00 2022 GMT
            Not After : Jul 13 11:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:93:2f:cf:5b:0a:12:ca:38:ab:c2:c9:16:
                    fe:40:65:e8:a9:fa:39:95:c9:c6:98:4d:88:23:8a:
                    9d:7a:79:16:7b:7d:fd:a7:2b:7a:19:6a:fc:40:56:
                    16:c0:b1:4d:f2:4b:72:d2:5c:7e:7a:17:e9:f9:6b:
                    ad:65:5a:a2:09:20:a1:2d:e3:d4:2c:2a:ed:f0:29:
                    14:48:da:62:cf:d9:7b:e9:54:62:f6:c2:9c:19:d8:
                    74:c1:2d:45:a7:d3:ad:c9:a4:d8:05:8e:0e:b4:93:
                    fb:16:2a:1b:07:01:80:7e:d3:42:fe:77:4c:94:fb:
                    d4:c3:fc:64:b6:c3:b3:4e:c6:14:c3:6e:0a:03:0b:
                    99:f1:ad:fc:7f:f8:7b:d3:7f:69:50:6e:80:00:61:
                    1d:a5:a7:15:9b:cb:76:b8:65:a9:83:d7:8a:a8:e5:
                    77:89:d3:58:28:e6:0c:5b:06:21:d7:18:51:8f:61:
                    11:86:3b:b0:2c:80:75:02:25:41:8c:29:d7:bf:47:
                    d6:da:b6:98:b0:b1:7e:99:23:e0:ac:47:1e:78:79:
                    77:8a:b5:65:5e:d6:14:f4:5b:93:ae:00:88:67:7b:
                    b3:87:c1:87:64:3c:d7:d8:4d:bd:78:95:71:8e:6b:
                    18:87:88:db:01:4e:45:78:f3:fa:3d:a7:a8:d5:bd:
                    aa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AF:FB:CE:E3:45:C4:A7:FF:B1:CE:7A:63:28:98:0E:18:2B:98:EB
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3131303a3a2f3434203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:76:64:3a:75:7b:4a:af:15:b6:d9:2c:bd:43:b7:95:31:41:
         4a:c8:ae:38:11:eb:85:d7:b2:50:0f:84:24:19:00:e7:93:11:
         d0:39:6f:f7:d8:ad:74:73:99:ee:78:81:5b:65:4e:f8:57:b3:
         e6:10:54:ef:66:b7:35:fd:57:3f:55:22:9b:64:f2:a8:20:6d:
         94:e8:bf:41:56:e4:0a:5f:43:d6:2d:33:a3:13:57:4b:2d:84:
         ca:8b:43:36:d6:08:e2:e1:ce:bf:65:72:7e:85:c0:15:a3:e7:
         d5:38:03:c5:2d:11:5d:1d:f1:06:b1:d5:cd:6e:99:c7:9d:34:
         ca:7e:8a:a6:3c:57:ee:75:4c:6c:ca:65:9a:1b:59:80:f6:19:
         08:a0:79:0a:30:a5:f3:90:50:cb:0c:df:f0:1d:e9:1e:30:a2:
         ac:88:60:8a:ea:23:f1:86:5e:1d:08:57:e3:17:77:4f:f1:c7:
         cf:5f:33:11:35:78:a3:74:78:1d:1b:3a:da:b6:da:a3:cd:0a:
         3f:b7:d8:92:a1:ff:fe:46:cc:e9:71:4b:69:2a:c6:a0:95:74:
         09:50:a7:22:33:b7:96:7e:83:a1:28:cb:74:b7:83:1f:49:75:
         48:39:e1:8b:cf:99:25:64:b6:cb:d1:ff:47:00:e8:d3:0a:82:
         63:55:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----