Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130323a3a2f3438203d3e203338303038.roa
File:                     323630323a666564613a3130323a3a2f3438203d3e203338303038.roa (raw, json)
Hash identifier:          kGDD7H8sCzs//KtuKBz2grm/EHEsDBH8S5d0g+1Maz4=
Subject key identifier:   42:D9:16:0A:28:5B:58:C7:7E:8A:47:0A:F7:57:1D:75:BB:D0:D8:42
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       485BCAB3AF9FBCC082D8CADF1FE4113F1EA25A2C
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130323a3a2f3438203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 12:00:01 +0000
ROA not before:           Wed 13 Jul 2022 11:55:01 +0000
ROA not after:            Thu 13 Jul 2023 12:00:01 +0000
asID:                     38008
IP address blocks:        2602:feda:102::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5b:ca:b3:af:9f:bc:c0:82:d8:ca:df:1f:e4:11:3f:1e:a2:5a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 11:55:01 2022 GMT
            Not After : Jul 13 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:b5:ee:03:75:08:6c:74:60:23:54:14:6f:
                    a8:7d:a6:54:f7:17:48:34:a4:71:26:b7:f2:bb:0b:
                    98:0f:72:fc:8d:5c:19:36:a3:c6:bc:32:5f:b4:41:
                    67:05:97:91:e6:ee:e3:6d:a9:37:a8:fe:9c:1a:4c:
                    f3:12:6f:40:64:b2:c1:e5:8c:c6:a3:24:35:b3:74:
                    4a:54:3a:01:1f:05:9f:2c:da:71:be:e9:35:db:fa:
                    28:9d:53:87:b1:2f:1c:f0:18:7b:87:1b:b4:54:80:
                    f9:cd:45:7a:2f:f6:2e:5c:82:55:6f:35:f0:4a:6c:
                    ab:af:f9:1c:bd:97:a9:ff:27:95:ef:25:4a:4f:d1:
                    c8:6e:15:95:62:ec:9a:40:b9:75:9a:49:c2:f8:4d:
                    6e:35:7a:4e:cd:9f:c1:bd:f4:cf:61:99:a3:bf:4f:
                    3a:f8:d5:39:68:2e:ce:4f:9e:fd:77:98:a9:ce:87:
                    ea:d8:89:0b:90:c3:b7:4b:9d:db:dc:38:43:ff:20:
                    a0:95:ef:cc:1d:5f:71:38:18:4c:43:f7:26:27:ad:
                    63:38:00:6b:af:64:81:90:e5:e6:1f:6f:97:2c:b8:
                    e8:a3:9a:9a:13:ab:dc:ab:cb:95:eb:42:ca:e1:19:
                    c2:15:1b:cb:fc:ac:a0:6c:f1:65:f3:51:be:27:c5:
                    93:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D9:16:0A:28:5B:58:C7:7E:8A:47:0A:F7:57:1D:75:BB:D0:D8:42
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130323a3a2f3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:91:ca:df:19:03:3c:7a:1b:2e:f1:f3:46:79:92:b0:a1:17:
         41:0a:b9:e3:81:89:d7:2b:d5:e2:0b:5f:c2:10:ac:91:fc:ba:
         fb:9d:22:77:c7:49:f7:5e:37:aa:fe:d7:d6:9d:9a:e4:96:67:
         d3:44:d3:a1:c5:15:7b:9b:49:93:00:ce:cf:54:74:d3:90:db:
         41:03:67:13:20:6a:91:e4:f3:ab:82:1a:71:62:75:ad:20:2c:
         cd:83:25:96:bb:1e:0e:e7:1a:a4:dc:c5:2f:be:71:b5:18:1b:
         24:7c:03:47:3b:be:5e:00:77:35:0c:f5:53:9e:dd:d8:73:4b:
         cb:fd:03:8f:36:0d:56:15:30:0c:1e:01:e7:68:3e:70:a4:70:
         14:34:c2:a1:a7:19:4d:e0:5a:6c:71:ea:71:c0:9f:a1:c8:4c:
         50:2e:64:ac:e0:82:05:26:8c:5b:10:84:47:fd:fd:0a:ef:49:
         16:79:6d:0d:be:b2:d1:6a:0c:b4:dd:d1:89:6f:a2:4b:0e:10:
         24:a4:20:11:49:29:d6:e6:ec:93:71:07:73:92:ba:e5:cd:50:
         39:8d:45:d7:b1:5f:15:ce:7f:56:db:db:1a:a0:a1:de:3f:c1:
         40:af:59:67:fc:58:9d:62:a9:1d:db:52:77:f6:ad:9f:3e:f8:
         9d:ea:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----