Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3136303a3a2f3434203d3e203338303038.roa
File:                     323630323a666564613a3136303a3a2f3434203d3e203338303038.roa (raw, json)
Hash identifier:          tkzOt6ZPjmfR7Jx5EYEUe3cJG/tBYZJcbLRvkpYkhEY=
Subject key identifier:   58:1C:7D:07:65:7E:A6:EC:EC:79:E7:2A:92:A8:FB:A0:EB:99:C3:19
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       57E6F9AB11E6E56566C55639AE963D6C450D8357
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3136303a3a2f3434203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 11:55:00 +0000
ROA not after:            Thu 13 Jul 2023 12:00:00 +0000
asID:                     38008
IP address blocks:        2602:feda:160::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e6:f9:ab:11:e6:e5:65:66:c5:56:39:ae:96:3d:6c:45:0d:83:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 11:55:00 2022 GMT
            Not After : Jul 13 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b1:ea:a3:49:96:2b:fd:28:9c:f7:a9:5f:fa:
                    5a:34:db:00:3a:f3:15:a7:46:d2:4f:1d:dc:fd:21:
                    22:7e:b8:33:57:56:28:3a:8d:28:e0:97:de:56:f5:
                    62:5f:64:13:94:ae:5a:ff:0a:fb:ed:bb:85:6b:a2:
                    42:92:50:f5:88:38:c8:ff:24:83:a3:be:e9:fd:9a:
                    db:fb:08:48:8d:cf:ad:81:23:da:40:48:d0:47:15:
                    7a:a2:73:fd:95:02:70:af:49:b4:d0:ef:10:7b:36:
                    07:31:d6:c3:e8:e3:1e:43:2c:93:e2:e4:3d:fc:09:
                    e9:8a:3d:36:3d:27:51:ca:69:89:fe:09:99:81:b1:
                    d2:63:fd:df:1c:db:fb:ca:1d:34:2b:65:8c:ef:fc:
                    37:c3:75:06:95:67:c8:6d:52:a5:9d:f3:51:00:fc:
                    51:0e:1c:c5:19:a7:c8:ea:76:70:5f:d3:ef:49:fe:
                    92:ac:73:ab:a5:03:a9:9a:fe:ac:33:71:71:18:7d:
                    98:41:a8:5d:6b:e7:e2:b3:a3:76:8f:b2:27:9d:2f:
                    5b:e7:ef:1d:2d:58:9e:21:7b:3f:1a:79:0e:17:7e:
                    d6:fc:06:69:20:bf:01:47:16:de:26:45:a4:a0:17:
                    0e:e7:94:6a:87:ae:0b:5c:52:a3:3c:99:52:d3:2b:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1C:7D:07:65:7E:A6:EC:EC:79:E7:2A:92:A8:FB:A0:EB:99:C3:19
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3136303a3a2f3434203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:a1:de:6d:4f:9a:30:6b:41:39:0e:8d:04:46:d2:c0:b3:7a:
         88:68:5a:d9:f9:9a:d7:5f:7a:83:82:04:df:c5:e6:e2:6c:7b:
         97:56:9f:eb:f2:5d:f8:8e:da:40:b5:ab:a4:8d:39:ed:25:0b:
         a7:39:f4:d9:f3:c6:a8:f4:ed:82:04:16:00:8b:d5:d1:74:48:
         bd:72:af:7d:2d:52:42:00:98:38:ae:ad:fd:27:48:41:ad:94:
         f2:3e:79:de:93:f0:b6:17:1e:50:29:66:10:f8:49:45:23:dd:
         c0:11:63:a7:40:4e:79:69:96:ae:eb:23:d5:ac:66:44:ea:0b:
         2e:15:11:91:74:47:41:e3:96:3e:e5:14:4e:c0:6e:9f:27:ab:
         12:f5:41:8f:ca:73:06:f0:dd:a8:b5:97:88:7a:02:d2:08:5a:
         21:ef:e4:dd:41:49:9d:93:3d:16:f6:4e:ae:31:53:ff:9a:8d:
         f3:56:4a:dd:1c:8a:7c:73:b5:49:6d:37:33:ec:64:70:13:b5:
         25:a5:8b:bc:cd:18:ff:7d:49:7f:06:b9:21:0f:25:8c:2a:78:
         a4:32:49:3d:a6:5f:52:61:6d:e0:93:aa:7b:fe:4d:45:93:a7:
         17:09:37:bd:e2:b7:de:95:16:c1:e8:4d:c0:4a:69:db:66:63:
         74:cc:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----