Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3132303a3a2f3434203d3e203338303038.roa
File:                     323630323a666564613a3132303a3a2f3434203d3e203338303038.roa (raw, json)
Hash identifier:          7HIazn+R+d0+/w/CSSeObfLt7d6CwJHWzFMODr2f/7o=
Subject key identifier:   BF:B9:69:25:17:08:B0:53:6E:60:C8:A5:3E:94:73:3E:87:8C:58:C5
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       2D11AA33C84A2B91E4F9FFE8CC593C8449F58126
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3132303a3a2f3434203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 12:00:01 +0000
ROA not before:           Wed 13 Jul 2022 11:55:01 +0000
ROA not after:            Thu 13 Jul 2023 12:00:01 +0000
asID:                     38008
IP address blocks:        2602:feda:120::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:11:aa:33:c8:4a:2b:91:e4:f9:ff:e8:cc:59:3c:84:49:f5:81:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 11:55:01 2022 GMT
            Not After : Jul 13 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:ee:12:c9:05:d2:05:a3:ff:b0:20:74:c2:
                    61:16:40:56:2e:56:70:36:b0:2b:65:54:5d:bd:26:
                    58:41:d6:5f:86:7f:5f:92:ae:33:53:a3:14:7f:16:
                    61:df:12:65:b0:db:5f:eb:0b:b7:55:69:10:8c:1b:
                    5b:da:9a:93:b6:10:f3:bc:60:19:1c:34:6d:da:2f:
                    0d:7b:09:d7:72:61:1c:cf:6b:fa:c7:12:24:10:00:
                    aa:19:3f:ba:ab:0f:a8:b5:ea:96:3f:f6:9b:a3:fe:
                    9e:92:72:89:8d:11:f4:40:d4:00:04:85:08:d6:bb:
                    83:24:12:3f:09:96:e6:20:15:41:fb:62:0c:b7:d4:
                    6b:13:3d:aa:87:76:63:f2:26:da:e3:5d:5e:12:ff:
                    a0:6f:48:6c:34:b7:f8:57:de:14:00:b8:81:c1:ce:
                    da:62:22:30:40:49:ad:83:65:95:64:8b:0f:f5:1c:
                    51:78:e0:de:8e:58:b4:e7:27:2a:f9:b7:43:19:f9:
                    25:fb:52:08:d2:f4:8d:ce:35:db:40:38:81:9c:99:
                    a2:86:fe:67:73:63:ed:17:05:31:c4:ae:8d:fa:7b:
                    6b:0c:6b:30:11:2b:48:17:d4:8a:fa:98:de:f3:d8:
                    35:b7:17:85:3d:3e:ed:54:2d:09:f9:9b:cc:49:23:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B9:69:25:17:08:B0:53:6E:60:C8:A5:3E:94:73:3E:87:8C:58:C5
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3132303a3a2f3434203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:31:f2:1f:f4:d8:3a:d3:c7:b5:f0:0c:66:ac:e3:7a:79:34:
         a9:b4:e3:3e:d5:17:4d:0d:8f:c7:b1:e3:ad:39:f4:bd:c6:93:
         63:31:b7:3f:17:53:7e:67:e6:0c:9a:14:d6:56:c9:2f:0e:4d:
         68:32:86:81:41:56:e9:96:58:cd:0f:5f:99:dc:25:f3:eb:82:
         b2:a5:f5:8c:09:31:75:50:e3:4e:e1:fe:a1:63:6a:59:6d:4a:
         d4:38:b6:5a:75:2f:0f:26:49:73:8d:95:7b:f4:83:d6:cb:d7:
         95:e1:5f:60:44:76:e4:c9:f3:81:02:7c:a2:a9:21:f2:33:5e:
         f3:b5:19:7f:3c:33:5a:64:c1:ec:3b:a1:9b:97:b6:cf:86:49:
         26:90:bb:95:1b:43:f8:0e:1b:d5:be:2d:88:c9:63:fa:0f:94:
         8f:2f:00:82:cc:ff:af:61:a5:f7:bb:32:82:53:cf:c0:8a:ea:
         e4:fe:b9:0c:e8:d1:e9:3b:42:9d:b3:59:26:b3:e7:71:81:4c:
         ad:d4:a7:32:ea:7a:d4:9c:5b:f7:a3:78:09:6e:3e:09:ff:b8:
         fa:85:da:0a:fc:b1:a3:9f:19:a8:30:35:e3:50:c9:09:7f:0e:
         23:c6:6e:fa:0e:8d:32:ed:db:db:f0:4f:85:ba:e4:ef:36:91:
         e5:36:2b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----