Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3134303a3a2f3434203d3e203338303038.roa
File:                     323630323a666564613a3134303a3a2f3434203d3e203338303038.roa (raw, json)
Hash identifier:          6sygvjOdXZ+dXBOJzr5tRfjUzStc3sbSdYsbcdIuNjA=
Subject key identifier:   96:FE:88:B1:86:58:33:1C:FC:D2:7E:EA:FB:E8:C1:6D:95:82:55:15
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       46E8D16CD4CEA4DDDC53A5C632204FF542A497F1
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3134303a3a2f3434203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 12:00:01 +0000
ROA not before:           Wed 13 Jul 2022 11:55:01 +0000
ROA not after:            Thu 13 Jul 2023 12:00:01 +0000
asID:                     38008
IP address blocks:        2602:feda:140::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e8:d1:6c:d4:ce:a4:dd:dc:53:a5:c6:32:20:4f:f5:42:a4:97:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 11:55:01 2022 GMT
            Not After : Jul 13 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:5c:b3:a7:e2:1a:45:0c:0e:35:68:64:a7:
                    70:25:e7:ce:59:b4:6c:c8:0d:e4:c2:96:79:0b:33:
                    60:87:fa:84:ca:63:e1:0d:16:e8:03:ae:bc:33:ca:
                    8d:3b:b7:84:58:71:ec:bf:8a:ce:76:bb:20:da:52:
                    ae:cf:57:34:aa:0a:a2:81:eb:e5:76:13:dd:0a:91:
                    14:db:e4:14:86:b8:2c:0d:2a:c1:e9:90:41:86:c5:
                    02:76:5f:e8:52:58:80:44:37:e9:6b:c7:17:f3:2d:
                    79:8e:1e:67:08:dc:01:d0:69:05:99:cb:b2:71:56:
                    b6:59:7b:2a:fc:66:99:37:10:dd:21:b8:7a:23:fc:
                    5b:0d:37:29:b8:8d:b3:20:0c:af:d8:57:3e:59:35:
                    7e:41:0d:de:b7:82:43:26:ab:2f:a8:9e:68:76:ed:
                    29:a9:17:63:27:3d:f6:b6:22:0a:58:cf:1f:c6:5d:
                    16:ef:74:01:60:7a:3a:fd:b9:9b:cd:ed:8c:00:6b:
                    e2:d0:b8:30:e4:6a:25:8d:09:2d:d7:01:4b:fd:97:
                    4b:16:9a:de:76:df:99:88:41:fc:a0:61:4d:2d:a6:
                    81:05:75:97:9c:d0:9e:13:4e:06:ca:f4:2d:98:4f:
                    77:54:2b:82:4d:64:cd:9f:2d:2e:ca:98:5e:dc:c2:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FE:88:B1:86:58:33:1C:FC:D2:7E:EA:FB:E8:C1:6D:95:82:55:15
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3134303a3a2f3434203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:140::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:48:01:5a:32:ad:79:33:73:65:f3:1c:63:cf:94:e6:6e:
         95:35:58:a6:c6:94:09:c2:67:20:65:1b:80:17:30:fc:44:47:
         85:30:20:fb:7a:b3:fc:d4:06:02:5a:8b:33:1d:64:fd:8a:7b:
         70:8d:dc:fe:80:51:59:64:83:d7:bc:34:08:89:43:a6:9c:ef:
         78:23:90:48:4e:17:27:2a:0c:f2:b2:03:11:2c:4a:26:bd:cc:
         7f:23:a2:3a:9f:0f:1a:01:c2:ad:ae:1d:ad:9d:78:01:41:78:
         e0:0a:57:41:85:90:64:18:b6:dd:92:5f:f6:6d:ce:44:c9:6d:
         fe:16:f3:79:5f:0d:9f:37:0c:93:83:4e:0e:ec:74:3b:e1:3e:
         3e:2c:ea:ba:64:49:af:91:7c:6f:f3:56:b4:3f:d6:0f:32:0d:
         95:a7:78:94:65:80:57:39:4d:31:5c:f7:bf:80:d9:64:72:11:
         ce:4f:56:7d:4b:bb:0e:53:ca:1d:69:c4:41:40:05:05:15:66:
         ff:5d:f2:03:4f:f2:3f:94:9a:4c:a5:33:29:84:cc:d2:6d:60:
         f0:1b:ae:17:a8:40:93:38:b8:16:59:e7:c1:9a:81:98:f8:84:
         4c:0c:70:4e:1e:64:b8:bd:ab:be:4e:ce:ec:51:db:94:81:8e:
         cc:8d:b3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----