Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30037/z6L3RyRhojRlkeQyyfJScmGIb6c.roa
File:                     z6L3RyRhojRlkeQyyfJScmGIb6c.roa (raw, json)
Hash identifier:          ln9PE/Us8Lrv/2m2hxPWVpZiYRgMQc/aj4gNeUXyHH8=
Subject key identifier:   CF:A2:F7:47:24:61:A2:34:65:91:E4:32:C9:F2:52:72:61:88:6F:A7
Certificate issuer:       /CN=1A6BE921E7DA1F51F38C299F792F5ECC0CB6AB9E
Certificate serial:       1B
Authority key identifier: 1A:6B:E9:21:E7:DA:1F:51:F3:8C:29:9F:79:2F:5E:CC:0C:B6:AB:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmvpIefaH1HzjCmfeS9ezAy2q54.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/z6L3RyRhojRlkeQyyfJScmGIb6c.roa
Signing time:             Sun 01 Oct 2023 01:30:35 +0000
ROA not before:           Sun 01 Oct 2023 01:30:35 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     0
IP address blocks:        2001:2c8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A6BE921E7DA1F51F38C299F792F5ECC0CB6AB9E
        Validity
            Not Before: Oct  1 01:30:35 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=CFA2F7472461A2346591E432C9F2527261886FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a4:4d:d7:66:50:66:cc:9e:e4:09:09:01:fc:
                    7d:9a:33:24:37:10:c3:7e:4f:32:46:f6:74:42:39:
                    34:c1:4e:99:0e:b8:4b:4c:cb:b5:6b:4c:55:88:b4:
                    ea:91:d5:78:e8:c0:f2:d8:45:9e:e1:fb:80:eb:b5:
                    8a:54:c8:1f:86:85:3b:be:c5:7e:41:dc:32:47:f0:
                    36:06:f3:1b:0f:c7:b8:0b:00:48:0f:26:be:01:4e:
                    0a:ac:d1:cb:e2:63:72:dc:69:ee:a3:90:59:15:5e:
                    6d:f8:ca:4b:7f:58:ce:77:f8:7c:bc:d7:1d:89:45:
                    c4:3b:21:29:d9:63:88:28:94:d4:ef:85:d9:c7:c5:
                    a4:26:64:49:ac:bf:63:ba:8f:5f:e1:71:9e:e8:c2:
                    19:83:52:48:d5:25:13:82:23:4b:2a:e6:bb:31:ce:
                    d3:77:82:04:8e:76:00:08:74:fe:a9:fd:76:f7:03:
                    37:f5:db:ee:52:64:33:10:ba:34:05:89:6b:40:81:
                    6c:88:74:e4:fb:83:37:b9:e2:93:96:68:2a:0f:88:
                    ec:db:38:85:a2:9b:64:fb:ff:0d:dd:7c:05:02:32:
                    74:44:7a:59:cc:f8:0d:14:7b:de:8c:b4:ee:28:ec:
                    a5:a9:c1:d5:c9:0c:c5:18:8e:d3:a2:97:68:60:71:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A2:F7:47:24:61:A2:34:65:91:E4:32:C9:F2:52:72:61:88:6F:A7
            X509v3 Authority Key Identifier:
                keyid:1A:6B:E9:21:E7:DA:1F:51:F3:8C:29:9F:79:2F:5E:CC:0C:B6:AB:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/GmvpIefaH1HzjCmfeS9ezAy2q54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GmvpIefaH1HzjCmfeS9ezAy2q54.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30037/z6L3RyRhojRlkeQyyfJScmGIb6c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:94:84:4b:99:55:15:6f:60:4f:60:4c:6c:2a:83:d2:a6:3b:
         36:1c:d5:2a:d7:88:12:d3:50:c0:17:6c:24:5b:1e:a5:f1:0b:
         7d:52:33:3b:41:96:1e:2b:d9:49:73:59:52:7e:8d:1b:9f:61:
         9a:e0:55:d8:96:6b:ce:cc:bb:44:86:6e:85:a8:41:94:20:cd:
         ef:54:90:53:81:3f:28:70:35:0a:a6:2c:c1:fb:47:25:67:78:
         97:5c:9f:2c:d8:7d:56:fd:88:52:50:ed:4e:9b:a6:a8:e0:48:
         ac:71:31:d3:7c:dd:33:bb:1c:c8:5b:66:eb:97:c5:4d:e9:0f:
         75:8d:ab:47:4e:c9:16:12:3c:69:7f:4b:ee:1e:08:da:40:e8:
         54:2c:fa:a0:59:4c:2d:1f:bd:3d:7a:db:57:6c:5d:3d:5c:5c:
         dd:59:2c:3e:1f:aa:0f:92:8e:9e:66:c2:9e:b8:1d:66:87:c1:
         45:e3:9d:08:1c:42:01:30:b9:33:34:6d:26:74:f4:26:fe:96:
         1d:76:64:24:bd:10:96:20:94:73:02:56:c6:0e:07:13:ed:ac:
         fa:c1:12:77:be:5d:7c:64:95:60:64:d8:0a:8f:9a:bd:5b:23:
         a2:68:24:dd:ef:46:d3:12:26:e4:83:4c:48:95:3e:52:f6:da:
         74:14:dc:aa
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQTZC
RTkyMUU3REExRjUxRjM4QzI5OUY3OTJGNUVDQzBDQjZBQjlFMB4XDTIzMTAwMTAx
MzAzNVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQ0ZBMkY3NDcyNDYxQTIz
NDY1OTFFNDMyQzlGMjUyNzI2MTg4NkZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO2kTddmUGbMnuQJCQH8fZozJDcQw35PMkb2dEI5NMFOmQ64S0zL
tWtMVYi06pHVeOjA8thFnuH7gOu1ilTIH4aFO77FfkHcMkfwNgbzGw/HuAsASA8m
vgFOCqzRy+Jjctxp7qOQWRVebfjKS39Yznf4fLzXHYlFxDshKdljiCiU1O+F2cfF
pCZkSay/Y7qPX+FxnujCGYNSSNUlE4IjSyrmuzHO03eCBI52AAh0/qn9dvcDN/Xb
7lJkMxC6NAWJa0CBbIh05PuDN7nik5ZoKg+I7Ns4haKbZPv/Dd18BQIydER6Wcz4
DRR73oy07ijspanB1ckMxRiO06KXaGBxtFMCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTPovdHJGGiNGWR5DLJ8lJyYYhvpzAfBgNVHSMEGDAWgBQaa+kh59ofUfOMKZ95
L17MDLarnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMzcvR212cEllZmFIMUh6akNtZmVTOWV6QXkycTU0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR212cEllZmFIMUh6akNtZmVTOWV6
QXkycTU0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDM3L3o2TDNSeVJob2pSbGtlUXl5ZkpTY21HSWI2Yy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQLIMA0GCSqGSIb3DQEBCwUAA4IBAQBJlIRLmVUVb2BPYExsKoPS
pjs2HNUq14gS01DAF2wkWx6l8Qt9UjM7QZYeK9lJc1lSfo0bn2Ga4FXYlmvOzLtE
hm6FqEGUIM3vVJBTgT8ocDUKpizB+0clZ3iXXJ8s2H1W/YhSUO1Om6ao4EiscTHT
fN0zuxzIW2brl8VN6Q91jatHTskWEjxpf0vuHgjaQOhULPqgWUwtH709ettXbF09
XFzdWSw+H6oPko6eZsKeuB1mh8FF450IHEIBMLkzNG0mdPQm/pYddmQkvRCWIJRz
AlbGDgcT7az6wRJ3vl18ZJVgZNgKj5q9WyOiaCTd70bTEibkg0xIlT5S9tp0FNyq
-----END CERTIFICATE-----