Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130313a3a2f34382d3438203d3e203338303038.roa
File:                     323630323a666564613a3130313a3a2f34382d3438203d3e203338303038.roa (raw, json)
Hash identifier:          vnx8In4Ak9C5pTTRFS9R4mpCRzWAesHz33lq2LLRMoA=
Subject key identifier:   75:C8:10:97:80:CE:76:0C:F5:EC:B9:72:D2:25:9F:AA:04:AD:35:28
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       409F1C908427A8A356FC390198372C520090103A
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130313a3a2f34382d3438203d3e203338303038.roa
Signing time:             Sun 10 Jul 2022 20:00:00 +0000
ROA not before:           Sun 10 Jul 2022 19:55:00 +0000
ROA not after:            Mon 10 Jul 2023 20:00:00 +0000
asID:                     38008
IP address blocks:        2602:feda:101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9f:1c:90:84:27:a8:a3:56:fc:39:01:98:37:2c:52:00:90:10:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 10 19:55:00 2022 GMT
            Not After : Jul 10 20:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:ba:dc:0f:16:51:6f:2f:a7:8b:cc:cb:1d:
                    af:62:55:ef:82:1a:05:10:24:85:72:18:ff:1c:ff:
                    bc:73:d5:dc:56:82:be:67:b9:b0:23:f8:1e:90:7f:
                    08:95:61:d4:dc:0c:8a:d9:d8:89:99:e7:1c:94:12:
                    75:e0:43:01:06:f3:b4:d1:4c:af:36:5f:ea:76:56:
                    6b:ee:22:ac:21:17:d9:5d:f5:82:dd:29:8b:8e:e0:
                    02:a3:ee:ba:66:39:5e:67:33:57:15:15:d1:de:ee:
                    31:a6:5b:81:e6:a8:6b:a7:25:a8:b6:3d:d7:01:98:
                    5f:9c:8e:2b:6b:b8:9e:c0:03:1d:b4:34:22:e3:47:
                    91:2f:c9:cd:ee:58:f3:5d:7d:62:fa:02:3b:67:2c:
                    fc:c7:d5:a4:a1:0d:ef:a1:e3:98:cd:52:73:d3:8b:
                    a8:a3:84:07:81:0b:73:31:d6:41:25:7b:61:26:b6:
                    29:c2:bd:ae:41:66:21:8b:62:08:fd:88:65:47:3f:
                    80:fd:4e:50:25:61:1e:ff:25:ee:5a:4a:b6:56:2c:
                    75:80:f2:7d:ec:1c:01:1b:ed:15:78:ce:94:81:33:
                    3f:99:5f:9a:bd:33:92:ee:48:f4:58:51:1b:61:be:
                    5f:94:be:d5:16:97:13:0a:a2:7c:f4:61:27:6f:29:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C8:10:97:80:CE:76:0C:F5:EC:B9:72:D2:25:9F:AA:04:AD:35:28
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130313a3a2f34382d3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:b0:44:de:a9:57:2f:a3:c2:a0:f1:19:c4:67:86:b2:92:
         c7:0c:7d:40:8c:1a:b5:27:2e:54:58:b6:42:1a:a8:24:0f:31:
         56:0a:e2:43:ca:42:7f:7d:89:37:77:ae:48:e2:b5:8d:1b:55:
         ae:f4:50:e7:a2:ac:43:31:fd:7d:e2:b3:ce:5f:dd:de:39:3d:
         f5:cc:80:6f:2a:29:85:a6:28:e5:3c:f6:68:b8:33:18:52:77:
         be:bc:94:56:82:c5:8e:bd:b8:7c:e4:b4:9c:ac:18:98:bf:1c:
         bd:7f:f8:d1:f2:e0:6b:41:5c:f2:80:7d:87:2b:90:80:04:01:
         a0:b2:75:98:7f:c9:7b:4b:78:25:a0:e5:fc:da:29:16:16:0c:
         39:60:91:7b:2f:de:44:25:12:75:7f:d9:80:8a:c6:88:22:64:
         7b:81:fc:70:b7:db:50:f5:73:a2:89:b7:63:9b:b6:b4:e9:00:
         fb:ad:14:08:74:72:8b:b9:24:36:62:4e:62:4f:b0:65:4a:61:
         84:05:80:e5:47:66:e9:91:1b:62:5e:f2:7f:be:96:96:40:a3:
         30:24:60:86:3d:24:e0:c0:c7:c9:bf:c5:1e:79:bb:9d:69:88:
         53:81:66:9f:75:23:67:7b:ef:91:6b:a5:c8:6a:e9:77:c5:83:
         40:78:03:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----