Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3133623a3a2f3438203d3e203338303038.roa
File:                     323630323a666564613a3133623a3a2f3438203d3e203338303038.roa (raw, json)
Hash identifier:          2/W3vWvJgNMFdZLhKHH7s0MVDEHi5CfaEyXf23oU9WQ=
Subject key identifier:   F2:03:15:21:A6:A7:3A:C0:87:28:30:FF:B2:A2:AC:F7:18:F9:1C:E7
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       3CD07156E944260E145A317BF3ADBD5CA48012D1
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3133623a3a2f3438203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 11:55:00 +0000
ROA not after:            Thu 13 Jul 2023 12:00:00 +0000
asID:                     38008
IP address blocks:        2602:feda:13b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d0:71:56:e9:44:26:0e:14:5a:31:7b:f3:ad:bd:5c:a4:80:12:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 11:55:00 2022 GMT
            Not After : Jul 13 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b3:22:d4:17:78:46:2b:7a:58:6e:29:ea:a9:
                    1a:ca:21:dc:ac:23:98:89:72:40:eb:5c:18:e4:a0:
                    06:59:32:e0:0b:98:58:07:5e:b4:71:00:2e:c8:00:
                    6e:3e:68:46:68:3b:49:75:b8:0c:7a:3b:71:d6:34:
                    39:3a:28:19:f2:c2:32:c7:96:07:fb:4f:c6:1d:e1:
                    f3:e0:07:b7:36:a4:7b:06:01:13:1a:bf:b6:53:60:
                    ab:ef:a1:6a:91:44:bd:29:31:3f:88:99:8e:5e:b2:
                    77:68:af:e2:3b:4d:db:5b:e1:d5:b4:7d:f3:0c:24:
                    cb:17:b6:b4:e4:9a:2e:58:8b:4c:58:93:fb:0d:ab:
                    41:e8:7d:85:6d:b3:9b:a6:d3:b6:a1:99:48:96:07:
                    f6:b3:7f:00:90:d6:59:c7:1b:b6:a7:b4:d9:cb:ed:
                    c2:bb:3a:6e:cf:c2:67:c7:2e:ac:a1:9e:18:2f:af:
                    18:99:8e:6a:88:f5:58:74:08:2c:d9:3f:26:9d:38:
                    d4:2d:39:13:c1:92:14:70:c8:cf:80:c9:8c:00:8e:
                    4d:e2:76:a1:fc:51:2a:e1:c6:f9:f1:35:bf:2b:00:
                    2a:ea:3e:4a:33:e8:2f:4b:06:ce:56:51:03:6e:a5:
                    6a:9c:da:91:3a:1e:f5:ed:8b:96:ba:d9:be:76:53:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:03:15:21:A6:A7:3A:C0:87:28:30:FF:B2:A2:AC:F7:18:F9:1C:E7
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3133623a3a2f3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:13b::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:13:15:7f:0b:cc:77:8b:08:c7:7f:31:e6:c0:3a:bd:99:58:
         fa:8b:e2:4a:c3:3c:40:86:06:66:22:5b:90:a6:63:3d:98:68:
         8c:b8:54:0d:94:71:7f:0d:6c:87:2d:24:5c:6c:bf:a1:1d:74:
         04:69:4d:3d:6a:2b:93:1d:b3:fe:07:e8:97:58:59:60:cf:71:
         40:65:d6:f8:2f:48:f4:ff:8f:a5:a4:79:5a:2f:1a:0a:1c:c4:
         a9:7a:51:d3:aa:28:27:a7:5f:b8:a2:4b:96:e4:fc:a8:18:0d:
         92:3e:65:8a:bc:34:34:81:ea:20:22:48:4f:8f:13:36:cc:94:
         c6:86:d5:39:71:98:32:8c:d3:e9:32:aa:c0:c8:2d:cd:88:14:
         1f:18:c2:d5:40:5d:ec:42:e5:b4:84:85:76:7c:6e:43:bc:1d:
         79:51:e5:94:06:a2:8d:b3:7f:1e:fe:43:27:11:e0:7f:78:dc:
         ed:3f:64:c6:a0:00:4a:49:c1:e3:56:40:fb:15:b5:3d:51:dd:
         96:a3:05:b9:2c:5a:7b:71:fa:a8:1a:cb:02:46:9f:c2:65:ec:
         cf:20:65:d8:a7:67:b0:98:bd:a7:28:a9:0f:31:28:9a:23:8d:
         39:c5:9e:c9:11:4a:f4:72:20:3c:01:95:0b:03:a1:b7:2d:ff:
         ce:35:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----