Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10215/yYkq6HaJUsfgEdzuM5erOVL_lPc.roa
File:                     yYkq6HaJUsfgEdzuM5erOVL_lPc.roa (raw, json)
Hash identifier:          GCLXLUlWug9UhnA0SlHhPLsK4CSiGbsA99f8B4EusqA=
Subject key identifier:   C9:89:2A:E8:76:89:52:C7:E0:11:DC:EE:33:97:AB:39:52:FF:94:F7
Certificate issuer:       /CN=69219D546CF9CA57FB370DAB22D341F451CDE6E2
Certificate serial:       0F
Authority key identifier: 69:21:9D:54:6C:F9:CA:57:FB:37:0D:AB:22:D3:41:F4:51:CD:E6:E2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aSGdVGz5ylf7Nw2rItNB9FHN5uI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10215/yYkq6HaJUsfgEdzuM5erOVL_lPc.roa
Signing time:             Wed 19 Jan 2022 06:25:50 +0000
ROA not before:           Wed 19 Jan 2022 06:25:50 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     23805
IP address blocks:        118.27.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69219D546CF9CA57FB370DAB22D341F451CDE6E2
        Validity
            Not Before: Jan 19 06:25:50 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=C9892AE8768952C7E011DCEE3397AB3952FF94F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2c:26:0f:15:65:78:d3:2d:f9:66:2d:84:c9:
                    c1:8a:4a:7f:9d:97:d3:ab:31:4f:47:d2:42:c9:7b:
                    69:c0:47:ce:6d:4d:fa:2a:94:9c:ce:38:c1:b6:9f:
                    e8:82:05:1f:84:8f:0d:72:e6:70:87:c2:7b:60:6a:
                    cb:62:fd:98:48:6b:65:c4:80:1a:77:71:9d:85:1a:
                    bf:0d:a5:d6:fa:87:81:3e:ac:cf:3c:d3:0f:d5:1b:
                    60:f0:14:c9:30:f7:03:ff:4a:69:4a:6f:f2:cc:37:
                    9e:0b:27:79:d3:41:e4:4a:de:f3:9f:4d:11:f4:0b:
                    1e:0f:54:9d:49:13:d6:82:d2:b1:96:6b:6e:a6:51:
                    04:06:c6:d1:e4:07:4d:ba:0c:dc:73:ad:6f:39:ad:
                    24:2f:22:a8:8e:fc:41:d8:02:f9:46:8c:e1:9e:5d:
                    85:cd:29:73:58:28:73:dc:10:9d:d7:5d:fd:52:ce:
                    c3:98:04:4b:b6:27:7a:8b:97:1b:f3:af:ac:cc:05:
                    6c:85:40:b9:fc:ad:bb:ae:12:64:eb:eb:01:6e:a3:
                    ec:0e:55:06:67:a4:7c:5c:77:f1:1c:95:93:58:f3:
                    04:0f:0c:4b:10:96:f9:77:67:4d:08:f7:4f:49:31:
                    9d:1a:1f:90:25:3f:42:fc:9c:ba:68:fc:57:cb:f7:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:89:2A:E8:76:89:52:C7:E0:11:DC:EE:33:97:AB:39:52:FF:94:F7
            X509v3 Authority Key Identifier:
                keyid:69:21:9D:54:6C:F9:CA:57:FB:37:0D:AB:22:D3:41:F4:51:CD:E6:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10215/aSGdVGz5ylf7Nw2rItNB9FHN5uI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aSGdVGz5ylf7Nw2rItNB9FHN5uI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10215/yYkq6HaJUsfgEdzuM5erOVL_lPc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.27.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:93:06:b9:8f:5c:7e:e4:bb:26:2b:76:33:a8:ad:32:fd:53:
         55:30:8e:61:29:66:30:cc:59:7a:fa:20:f5:90:2d:fe:c7:7b:
         5a:dc:b7:95:81:c5:28:0f:a9:45:58:00:e2:0a:47:13:2a:bc:
         28:3d:c4:4e:4d:51:36:6b:e8:34:46:4f:59:20:5c:ce:b2:33:
         5b:cd:3f:62:06:40:99:f8:6d:ea:5a:f3:c3:9c:c9:01:c8:f2:
         df:74:a3:0e:75:41:73:8a:48:cf:cb:ad:03:de:aa:72:1e:1c:
         00:1a:6f:09:ed:8f:f2:33:af:f5:3f:94:22:5e:04:ff:da:a5:
         7e:e1:96:5e:92:a3:ea:ae:d3:ad:b8:79:67:75:39:e2:9d:4e:
         1b:d2:01:49:a3:91:29:50:d0:6d:4d:7b:be:7a:92:af:44:8f:
         44:9c:72:25:f3:d7:5f:24:a8:d7:4b:5f:1e:26:37:82:0f:53:
         c8:13:72:96:f9:34:d3:97:4a:26:cd:cb:78:bf:42:2b:27:ce:
         ee:f6:67:2c:92:dd:0b:5a:9c:a8:5c:88:82:07:d5:cd:3c:93:
         b9:4e:d8:6f:6e:a5:2e:9f:b6:c3:00:f1:0d:a2:d3:7c:a3:68:
         18:42:31:74:a4:0e:3a:ab:17:6e:49:76:09:ae:d6:63:1b:8d:
         25:17:6f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----