Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130343a3a2f34382d3438203d3e203338303038.roa
File:                     323630323a666564613a3130343a3a2f34382d3438203d3e203338303038.roa (raw, json)
Hash identifier:          psjeKqwMiW3tIy7CC+BA0VFPtFCoRoKT3m2QjJbLEz8=
Subject key identifier:   7C:0E:37:DC:58:E9:5E:A7:E2:62:42:2A:DE:C7:19:01:BA:3C:DA:50
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       610CF2F1A873059417C07A5C973F13D350DE45B3
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130343a3a2f34382d3438203d3e203338303038.roa
Signing time:             Sun 10 Jul 2022 20:00:00 +0000
ROA not before:           Sun 10 Jul 2022 19:55:00 +0000
ROA not after:            Mon 10 Jul 2023 20:00:00 +0000
asID:                     38008
IP address blocks:        2602:feda:104::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:f2:f1:a8:73:05:94:17:c0:7a:5c:97:3f:13:d3:50:de:45:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 10 19:55:00 2022 GMT
            Not After : Jul 10 20:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:b4:da:61:2d:3a:ff:59:4f:dd:3c:01:e7:
                    c0:53:26:16:b8:aa:6a:d4:ca:a3:61:2a:03:fd:22:
                    b6:9c:95:30:bd:b4:4a:e3:ac:61:1b:7e:54:03:4f:
                    be:0c:09:fb:29:8e:4a:15:8e:c0:01:14:84:af:44:
                    4a:97:30:bd:c2:39:47:f5:4a:dc:e4:0a:2f:6b:5e:
                    70:a6:23:85:c6:d4:07:b5:29:ac:8f:ac:bc:3b:57:
                    02:a4:da:b1:8d:cf:3e:f4:cd:9a:0d:6b:a5:9e:9e:
                    0c:ec:b2:fe:2d:69:4e:25:85:f2:7d:e2:ef:aa:0e:
                    6f:b2:6e:b2:32:3e:4f:46:21:b5:45:2f:14:cb:67:
                    98:60:4f:7a:f4:a1:92:dc:71:65:cc:46:eb:62:49:
                    73:17:ca:6f:62:ee:d6:1b:0b:b3:12:93:e2:d8:48:
                    56:2e:ba:6c:24:c1:11:9b:47:cd:49:bb:43:fa:cd:
                    96:e0:37:b2:b0:c2:0c:ed:06:90:46:e5:4b:37:9a:
                    38:2c:b8:53:e5:1d:89:7e:7c:00:e3:cf:85:db:5d:
                    a6:a9:1b:c0:a5:ea:ff:a3:c5:58:2f:40:5b:64:9e:
                    c2:60:ad:b6:be:b7:79:57:ef:27:fd:74:a0:19:b9:
                    dc:be:15:61:3e:ad:83:ba:7c:78:09:1a:96:49:b3:
                    01:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0E:37:DC:58:E9:5E:A7:E2:62:42:2A:DE:C7:19:01:BA:3C:DA:50
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3130343a3a2f34382d3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:eb:98:63:b1:fc:21:da:e4:d7:93:46:f5:9f:50:c3:4c:d9:
         d3:ad:40:3f:d5:c4:44:cf:01:0f:23:36:3a:e5:07:d5:43:58:
         85:3e:03:fe:58:69:bd:3c:10:1b:a3:22:83:fd:2d:65:db:0a:
         b4:42:98:dc:64:0c:e5:b3:78:ce:67:04:6a:27:95:a2:bd:10:
         fd:35:38:a7:b8:f6:d6:54:17:62:b2:85:c2:5e:47:72:be:b1:
         03:ba:d2:f4:d5:8f:77:db:bf:b5:7d:13:9f:db:06:1f:6e:89:
         00:e2:49:d1:ce:a2:46:fc:54:84:d1:e4:5a:f5:20:a6:00:9e:
         03:6d:5f:4b:5b:6b:83:b2:1b:4f:f6:ba:b2:3f:b4:e2:b8:0d:
         f1:12:c9:a6:30:87:38:a6:97:65:e2:e8:9f:85:27:51:a6:d5:
         86:d5:fc:5b:a8:e8:56:f5:e6:ed:54:77:4a:ba:30:ab:34:96:
         c6:5f:78:08:26:97:38:2e:92:53:4b:c5:65:bc:8a:51:00:78:
         50:84:26:50:08:20:34:28:88:d9:27:4f:f3:61:22:5f:7c:06:
         aa:f1:f0:e0:2a:0d:ca:dc:38:ab:30:b4:f7:fb:ef:ad:7b:f2:
         f0:bc:8e:50:66:30:99:03:60:54:da:0d:c8:33:cb:bb:a0:54:
         46:fe:d1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----