Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130333a3a2f34382d3438203d3e203338303038.roa
File:                     323630323a666564613a3130333a3a2f34382d3438203d3e203338303038.roa (raw, json)
Hash identifier:          MZJ87vNeUIkrdf2xDO2m57h6SqElKN7ZVAc9g19ZyuQ=
Subject key identifier:   9A:F7:B1:F0:16:82:35:E9:46:A5:57:9F:D9:AD:D2:1F:4C:71:11:15
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       014EDABB425473489A771F23B5472FD074B9C9C3
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130333a3a2f34382d3438203d3e203338303038.roa
Signing time:             Sun 10 Jul 2022 20:00:01 +0000
ROA not before:           Sun 10 Jul 2022 19:55:01 +0000
ROA not after:            Mon 10 Jul 2023 20:00:01 +0000
asID:                     38008
IP address blocks:        2602:feda:103::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4e:da:bb:42:54:73:48:9a:77:1f:23:b5:47:2f:d0:74:b9:c9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 10 19:55:01 2022 GMT
            Not After : Jul 10 20:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:8d:7a:30:f8:97:c4:c6:7e:22:36:ab:03:
                    4e:df:33:dc:58:23:51:90:f3:8f:68:fb:82:22:15:
                    d0:fb:d6:00:69:54:ae:36:29:2a:ca:0f:a2:01:4e:
                    97:1a:1e:e6:dd:f4:d5:4a:8d:cc:d4:71:07:bd:c2:
                    01:b1:f8:96:46:aa:8c:18:83:4d:5b:41:66:07:74:
                    d9:98:7c:d4:ee:41:86:56:7c:66:6b:44:b5:e0:d4:
                    4e:05:3c:48:78:ec:47:d1:e0:71:a2:4d:c6:4c:f8:
                    d2:74:ff:cd:0c:e2:4a:c6:ec:25:4d:f8:13:0a:93:
                    05:5b:9f:e8:b2:09:19:8d:92:c5:7d:c4:d3:53:b1:
                    bd:e3:f4:02:ad:34:aa:76:fe:88:ad:39:a0:d8:e2:
                    e6:83:e3:ed:08:09:49:25:6a:2a:1b:04:3b:73:29:
                    04:11:7b:08:44:88:45:36:77:22:81:29:46:c4:b6:
                    70:81:71:79:fc:6c:67:46:0f:f4:f5:b0:7c:5f:6c:
                    d1:0b:83:51:41:81:b2:2a:59:67:c2:0a:4f:6a:af:
                    36:39:b2:40:c0:f0:c8:65:cf:23:2a:56:dc:e8:ff:
                    f5:47:fb:b5:8e:80:a7:ec:69:24:13:0e:86:87:07:
                    18:ee:2e:ec:9f:48:de:25:39:03:18:4d:38:08:a0:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F7:B1:F0:16:82:35:E9:46:A5:57:9F:D9:AD:D2:1F:4C:71:11:15
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130333a3a2f34382d3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:10:f6:eb:fb:a6:cd:e6:4c:b6:a9:c8:a4:6c:b2:23:48:30:
         c8:60:88:9b:5a:45:f2:f5:05:eb:5c:c3:4f:27:13:3d:ff:07:
         cf:30:3b:42:8d:ce:1d:3d:6f:db:56:cb:63:4f:9d:c1:82:bc:
         e4:b8:b4:48:cc:0f:b3:64:bb:60:c7:e7:57:bd:4d:d6:5a:22:
         31:89:d6:36:5b:28:1b:23:47:80:f9:6b:65:1c:88:38:f5:64:
         d6:b7:b9:7e:fe:b5:a7:77:a4:11:cb:f6:8f:23:55:5f:ed:6d:
         c0:d0:76:32:f6:37:41:d8:59:09:83:a5:00:46:7b:8c:12:cc:
         b9:ec:e4:25:fa:18:88:e5:3f:47:69:49:e3:85:26:9e:1b:6b:
         57:da:0b:f7:c5:e6:0d:f2:1c:74:0b:41:84:88:53:0a:bd:5b:
         0b:06:e8:c2:2e:23:06:10:b7:04:35:7a:e3:4b:05:9a:a8:78:
         66:38:14:c3:e1:40:21:aa:09:2f:a4:b9:3b:b5:a1:20:9e:62:
         61:19:1e:df:00:df:48:e1:3a:e6:ff:24:83:d8:76:8c:5e:00:
         4d:52:58:3b:94:d6:a1:8b:83:8e:76:8b:d2:c3:86:7a:fb:ee:
         86:ed:c7:0a:6d:10:36:dc:3e:8e:7a:8a:e6:5c:e8:e7:0b:6d:
         3d:c9:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----