Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3133303a3a2f3434203d3e203338303038.roa
File:                     323630323a666564613a3133303a3a2f3434203d3e203338303038.roa (raw, json)
Hash identifier:          fBj3j7xgH2KDo+CMmtxfgAyzgN93weDkAn8N4gL4riE=
Subject key identifier:   12:5F:D6:29:53:7E:E1:D4:7E:96:18:98:9B:15:28:9E:33:1D:A0:6C
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       738E3B785478D8E7A0FCC2ACB74868D258C1CC16
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3133303a3a2f3434203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 12:00:01 +0000
ROA not before:           Wed 13 Jul 2022 11:55:01 +0000
ROA not after:            Thu 13 Jul 2023 12:00:01 +0000
asID:                     38008
IP address blocks:        2602:feda:130::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8e:3b:78:54:78:d8:e7:a0:fc:c2:ac:b7:48:68:d2:58:c1:cc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 11:55:01 2022 GMT
            Not After : Jul 13 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:6d:28:52:84:62:a3:5a:32:e7:e9:33:7b:
                    e3:6d:59:6a:4f:e8:74:cd:bd:4d:87:ba:31:53:53:
                    97:61:09:08:3c:bd:9f:4b:84:29:c8:62:3e:d8:03:
                    b2:ed:96:af:c4:9f:cc:7d:60:95:40:94:47:2b:21:
                    d7:0a:d1:9c:14:9c:99:27:ab:a0:1a:25:95:54:a7:
                    db:87:4d:0e:f6:df:93:01:92:2f:69:bd:5f:c6:4a:
                    44:34:e2:25:37:89:a5:17:e0:38:37:b1:d5:55:4b:
                    45:df:c6:e6:65:82:08:b8:17:3d:73:1c:ea:20:c0:
                    f7:74:c0:73:a7:9e:7c:87:38:5a:93:13:94:cd:1c:
                    73:cf:3d:55:3d:f1:83:27:6a:62:33:3a:f8:63:e6:
                    cc:12:69:fc:88:8a:f0:a1:d7:a0:52:9a:57:74:04:
                    11:e5:06:77:05:46:19:70:c4:4e:07:1d:6a:77:4c:
                    45:03:9a:30:3d:ee:91:b7:c9:76:ed:a9:9d:e5:2c:
                    aa:aa:7c:e1:b7:f1:ab:d8:fa:0b:c8:23:91:c5:8b:
                    40:af:8d:22:e2:c2:00:89:ff:1b:48:ec:9d:1a:0f:
                    3c:20:70:21:8f:a9:4b:b2:93:2d:c6:39:21:53:64:
                    36:c3:d0:bd:f8:0d:6f:6d:43:3b:5f:fb:e8:cf:4a:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5F:D6:29:53:7E:E1:D4:7E:96:18:98:9B:15:28:9E:33:1D:A0:6C
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3133303a3a2f3434203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:130::/44

    Signature Algorithm: sha256WithRSAEncryption
         46:65:22:4a:25:0a:b1:2c:70:27:52:d1:70:34:ce:cc:61:0d:
         87:fb:f5:3c:86:07:c4:d7:12:07:c5:be:72:02:02:03:31:64:
         54:e6:b3:df:e6:ad:ae:e5:01:4a:bb:f3:53:04:96:ce:90:58:
         f6:87:5e:97:64:e0:bc:d1:5b:8f:8f:d1:a2:a0:07:36:9c:2a:
         17:88:cf:f5:ae:1e:eb:4b:83:1f:50:30:f9:ac:c1:c4:21:69:
         4f:28:30:48:35:cc:00:12:76:bb:64:e9:70:57:fc:2b:96:c4:
         dc:ac:5c:3d:f9:0c:8a:16:06:22:cb:ba:e2:2b:21:07:fe:b7:
         03:1d:76:1e:57:75:34:26:8d:62:1a:14:42:ab:49:8b:54:c0:
         1a:0d:65:f0:90:04:e5:51:ec:06:e8:68:93:ef:01:19:e8:f2:
         16:b2:09:c8:bb:f2:ee:29:de:4e:36:f4:8e:a1:71:7f:8b:0d:
         5e:90:43:f4:ed:ae:2c:d0:04:7d:f9:dc:7e:eb:5a:4d:e7:79:
         e5:62:f8:0f:c8:fc:23:c9:a8:a9:36:28:ad:ac:37:a5:87:3d:
         0f:6b:00:80:7d:b5:85:80:b2:6c:68:cd:c9:dd:33:f7:8c:7a:
         76:fd:4d:58:fe:9f:ee:d1:1a:7c:84:c6:1d:26:e2:c0:b1:36:
         86:4a:7f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----