Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa
File:                     323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa (raw, json)
Hash identifier:          +/ts3+y+1ZSfmHWL6q3AnsO3sLECU/awTOe3BWT94dg=
Subject key identifier:   E7:63:7F:1C:A1:5F:C7:F4:87:82:11:C1:64:DD:A7:97:72:08:70:2A
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       575ED4066A123CA0853D5AFAF71E96D358CE96C9
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa
Signing time:             Mon 15 Jul 2024 08:50:14 +0000
ROA not before:           Mon 15 Jul 2024 08:45:14 +0000
ROA not after:            Mon 14 Jul 2025 08:50:14 +0000
asID:                     207803
IP address blocks:        2602:feda:b80::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5e:d4:06:6a:12:3c:a0:85:3d:5a:fa:f7:1e:96:d3:58:ce:96:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:14 2024 GMT
            Not After : Jul 14 08:50:14 2025 GMT
        Subject: CN=E7637F1CA15FC7F4878211C164DDA7977208702A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:f8:ba:3e:7f:a4:eb:41:2f:81:18:86:76:
                    a3:d5:cd:27:4f:d2:99:19:ea:39:ee:24:4d:0b:f4:
                    3d:3e:bf:70:30:69:4e:2e:46:fb:44:59:ce:d5:d1:
                    0d:11:55:f3:63:ac:dd:05:7b:e5:87:ea:04:97:9d:
                    71:23:f0:4a:da:0c:b0:a4:b9:f6:f0:b5:89:1b:d8:
                    a9:9f:88:6f:8b:5c:5d:47:44:b4:de:c7:cd:e6:3b:
                    63:65:a9:4d:c6:a4:a0:45:b3:49:ee:54:83:e8:20:
                    19:f2:51:40:cc:3a:4a:95:be:88:1d:74:44:46:28:
                    66:08:52:b4:29:89:ef:46:da:32:07:e9:37:12:98:
                    f5:eb:93:53:8a:2e:55:de:2b:92:e8:ca:17:f3:ee:
                    02:df:87:a8:b4:9e:38:93:c9:b5:7a:3c:c0:68:9b:
                    f8:1b:fe:ba:dc:e3:e3:b5:df:13:cb:0e:43:25:bf:
                    d1:48:65:b0:16:b0:c1:f2:17:83:63:30:e6:8e:8d:
                    c2:ba:0e:30:c6:ac:9b:96:4e:a6:9d:25:d6:36:91:
                    0c:23:6b:24:85:31:36:0a:01:f3:99:33:48:80:12:
                    28:4f:5d:83:b4:24:b5:0b:42:75:89:76:1a:93:79:
                    1d:a6:ed:77:26:b9:32:bb:f8:ca:2f:67:b9:a7:d4:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:63:7F:1C:A1:5F:C7:F4:87:82:11:C1:64:DD:A7:97:72:08:70:2A
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b80::/45

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:15:ad:5a:a6:ef:6f:7d:11:f3:30:ff:f0:80:1c:1c:ad:
         4a:83:7e:b7:3a:9e:5d:a5:5c:c6:8b:a3:8f:a0:77:03:15:c1:
         79:26:9b:b2:62:4d:46:8a:c8:8d:de:bf:f4:ba:fc:df:da:59:
         28:40:e8:3a:71:f6:17:40:0c:15:7f:df:71:22:3d:0e:a1:03:
         ca:15:c0:f4:14:67:32:85:a8:3a:68:71:f4:ed:cf:78:cc:e7:
         59:cc:4c:9e:06:9b:e1:e1:1e:96:97:1e:25:98:09:9a:0c:cf:
         f0:31:cb:14:94:3f:9a:38:d6:39:de:61:b0:57:dd:3c:44:0c:
         50:92:5d:1d:f3:f3:8b:c8:78:43:7f:2b:d0:95:fc:b2:7a:6b:
         57:a9:f0:36:d8:da:4b:0c:b4:5a:9f:99:18:a6:ee:f7:43:a1:
         8c:f1:3f:ff:85:43:02:29:98:e7:a5:87:6a:6f:6c:e6:f0:92:
         b6:21:25:4f:6b:1c:cb:99:00:a2:46:d3:61:c7:fa:4b:64:8e:
         a6:bb:ca:b5:e3:e3:d3:e3:44:32:d7:39:cb:a5:0e:ac:17:7e:
         ed:b5:4c:ad:4d:63:e7:a4:22:6b:5c:d6:0c:8d:04:e3:80:38:
         4f:51:77:69:b0:fb:f6:ad:1e:01:3d:b9:1e:6c:b6:28:41:88:
         4a:53:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----