Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3132383a3a2f3438203d3e203338303038.roa
File:                     323630323a666564613a3132383a3a2f3438203d3e203338303038.roa (raw, json)
Hash identifier:          ZLMuLsc2Efq6l5zHZk1/dJKqOMXREYp2peYT6Ai5nPM=
Subject key identifier:   F5:85:DE:0E:66:F9:FC:48:8F:87:4C:7A:67:4B:9E:FB:80:A9:49:CD
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       7D082FA7184D44A9D2E4356F5A2EB459F17599D5
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3132383a3a2f3438203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 12:00:01 +0000
ROA not before:           Wed 13 Jul 2022 11:55:01 +0000
ROA not after:            Thu 13 Jul 2023 12:00:01 +0000
asID:                     38008
IP address blocks:        2602:feda:128::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:08:2f:a7:18:4d:44:a9:d2:e4:35:6f:5a:2e:b4:59:f1:75:99:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 11:55:01 2022 GMT
            Not After : Jul 13 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:8c:f2:99:b7:f2:68:c3:c0:c9:27:02:ba:
                    75:cf:30:3a:fc:e1:6a:57:5c:f3:9a:92:33:fc:1c:
                    7e:3c:cd:aa:e3:9f:25:73:6c:eb:51:84:4d:2c:49:
                    a3:bb:ba:4e:cf:89:14:d0:40:c0:c7:b8:47:fb:6e:
                    28:c4:0e:5a:fa:0b:32:2d:36:c4:55:bb:3c:d2:62:
                    1b:d8:dd:10:8b:9b:4f:21:28:e6:3a:24:3d:19:f3:
                    48:94:4c:5c:66:b9:8d:90:b5:91:d2:72:4f:df:2a:
                    3b:76:0f:db:32:06:71:2c:34:1f:b6:a1:9b:26:8f:
                    54:13:fd:88:52:3c:4c:e7:86:ab:4d:21:3f:31:63:
                    c7:60:2d:b2:ea:60:d4:84:99:f9:56:91:76:ec:96:
                    05:34:14:a5:30:d1:cd:b1:e3:61:1e:d4:2f:53:c6:
                    49:39:dc:3a:dc:85:1f:a3:c5:d4:0f:0e:ce:97:f5:
                    a2:da:9b:9f:ba:88:f1:c1:77:cd:30:88:4e:89:13:
                    8f:20:f2:79:63:cc:8d:fd:28:89:10:8a:a1:72:7e:
                    b4:f0:a9:fc:00:de:b4:6a:79:c4:e8:2d:f6:18:31:
                    29:93:a3:ef:15:b7:c7:4d:01:0a:f6:c8:4a:99:12:
                    d1:58:13:22:28:3a:79:56:d8:39:a1:3e:59:7b:4b:
                    1b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:85:DE:0E:66:F9:FC:48:8F:87:4C:7A:67:4B:9E:FB:80:A9:49:CD
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3132383a3a2f3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:b4:2d:d5:b3:39:b2:74:72:2e:11:2c:c2:e4:f4:eb:c1:41:
         65:a7:72:a2:99:13:17:5b:87:30:03:f5:81:b3:e9:c9:ef:94:
         62:8f:4e:9f:e9:77:fb:87:68:bd:8e:9a:fc:52:9b:bd:42:1d:
         f6:b9:af:bb:7c:71:6e:52:90:67:dd:16:88:0f:59:f5:36:78:
         38:d7:39:0c:97:be:36:e4:3e:26:a2:e4:4a:47:08:ba:21:37:
         f3:b3:4c:70:af:dd:b6:cd:06:62:66:c5:25:f7:39:77:1c:fb:
         b7:00:5f:ef:4e:85:c4:62:02:99:8a:87:81:a9:92:2e:8a:16:
         5f:0c:60:e2:90:d6:68:5a:bc:fc:14:1e:ba:3d:01:ed:cb:2a:
         1e:05:88:01:cd:41:2c:c3:a2:80:22:fc:53:ed:b8:6e:d8:d7:
         d6:13:af:6a:32:9d:38:55:c9:43:4c:da:5f:26:77:31:d4:3a:
         10:4c:83:a3:06:74:b1:1f:1d:84:a9:36:68:8d:de:c5:35:2f:
         f0:3e:80:88:30:3d:f6:eb:f3:93:b0:16:65:57:a9:d7:f8:91:
         a4:0f:02:b4:35:9b:54:d2:73:4a:5f:2f:d8:9e:68:15:73:71:
         64:d3:d5:b0:bb:d3:f3:5c:5f:ca:cc:f8:68:d1:a1:cf:58:01:
         7d:57:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----