Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3134633a3a2f3438203d3e203338303038.roa
File:                     323630323a666564613a3134633a3a2f3438203d3e203338303038.roa (raw, json)
Hash identifier:          T/+kZIH/L8L1pjtkRx6wBPnP3a/ZKv4h1TfrmkAQ5Kc=
Subject key identifier:   D4:F3:84:37:3F:87:98:F1:A0:89:35:4A:EF:E2:19:55:B0:6D:AE:D3
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       3284D7C9DC1314B48D2F08A04E730F55E2CFD883
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3134633a3a2f3438203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 11:55:00 +0000
ROA not after:            Thu 13 Jul 2023 12:00:00 +0000
asID:                     38008
IP address blocks:        2602:feda:14c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:84:d7:c9:dc:13:14:b4:8d:2f:08:a0:4e:73:0f:55:e2:cf:d8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 11:55:00 2022 GMT
            Not After : Jul 13 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:0e:dc:bd:a6:51:35:d1:12:64:7d:d4:be:
                    8e:64:55:ba:d0:be:a3:e7:4c:79:37:9c:20:c9:aa:
                    9d:37:b9:3c:86:30:fd:b2:72:fb:09:a0:7c:e9:1f:
                    87:df:35:1a:64:5b:30:9a:7b:fb:47:7c:1c:66:7e:
                    f5:d2:4e:34:24:74:2a:06:34:35:a0:00:09:3c:23:
                    11:a8:7b:6e:fd:0d:39:49:dd:4b:fa:18:e6:d2:c2:
                    62:a2:40:f0:33:b5:bc:cb:5f:65:d8:8d:1b:3a:31:
                    83:bb:64:14:17:3e:76:c0:0e:68:96:72:65:b3:b7:
                    a3:88:59:1f:ea:27:f9:12:3f:b6:be:4e:41:42:21:
                    66:d2:72:dc:8e:f7:07:51:b2:82:47:11:c1:fc:c8:
                    bb:78:ba:3f:af:a8:41:e4:8b:82:4f:0b:9f:33:2f:
                    d8:fd:a2:db:cc:26:35:ba:9e:da:75:ef:b8:8c:d3:
                    2d:da:29:0a:ce:0d:72:8b:1e:c0:ee:e2:11:8f:a9:
                    b4:6d:51:0b:62:df:a4:30:6c:bc:fb:60:63:76:de:
                    9b:0d:e4:18:5e:8c:d4:08:b1:cc:e7:f9:4d:59:ba:
                    2f:c5:e1:f1:11:97:dd:d5:69:da:72:cb:51:ba:f6:
                    d4:89:4c:8f:1d:bf:0d:1b:10:84:9c:f4:2f:3e:f8:
                    8e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F3:84:37:3F:87:98:F1:A0:89:35:4A:EF:E2:19:55:B0:6D:AE:D3
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3134633a3a2f3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:14c::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:a1:f7:bd:a3:b1:d4:51:07:64:56:84:fa:ef:1a:ef:f8:f7:
         c7:26:b6:1c:37:0d:c5:02:9a:7b:90:7f:d6:5f:70:dd:f2:87:
         8e:dd:db:90:7e:de:72:42:64:bb:58:bc:bc:d0:5c:1f:49:f5:
         3d:0e:23:51:1a:df:19:b4:03:51:76:48:61:d3:47:b2:d1:ea:
         05:9c:18:c1:dc:61:08:db:a6:fe:1d:ff:d6:47:22:c9:56:70:
         45:56:b5:fb:4d:e9:12:20:5f:5f:de:ff:14:be:fa:da:7c:ea:
         e6:3f:a6:bc:e2:32:1c:10:a7:63:b6:29:6c:03:28:90:2b:b1:
         a4:31:e9:53:c7:5d:c1:be:45:d0:d7:0a:94:6f:2f:59:b9:87:
         9b:80:a2:d8:77:1c:98:ad:f3:a3:41:d4:3a:8b:f4:7c:57:f7:
         3b:a3:51:51:de:52:13:22:42:33:27:3b:1f:db:67:68:d6:f6:
         f9:88:4a:06:8d:6e:80:ab:d1:6b:65:26:f5:65:71:5d:df:75:
         0f:49:ee:ac:1d:43:f4:a6:fe:34:dd:84:73:22:85:64:f7:45:
         15:06:23:f1:35:1b:40:20:d0:ba:a1:45:84:ad:82:23:04:c3:
         2a:d4:3e:31:24:2c:f4:55:9f:f8:74:d3:66:61:77:26:76:69:
         24:3a:38:d3
-----BEGIN CERTIFICATE-----
MIIG2DCCBcCgAwIBAgIUMoTXydwTFLSNLwigTnMPVeLP2IMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0OTM1NDM4OTJCMzE2MjBFMEZDRTJGQ0E0MTcwNjlE
MDY0N0ExNDAeFw0yMjA3MTMxMTU1MDBaFw0yMzA3MTMxMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDY1RDBFRENCREE2NTEzNUQx
MTI2NDdERDRCRThFNjQ1NUJBRDBCRUEzRTc0Qzc5Mzc5QzIwQzlBQTlEMzdCOTND
ODYzMEZEQjI3MkZCMDlBMDdDRTkxRjg3REYzNTFBNjQ1QjMwOUE3QkZCNDc3QzFD
NjY3RUY1RDI0RTM0MjQ3NDJBMDYzNDM1QTAwMDA5M0MyMzExQTg3QjZFRkQwRDM5
NDlERDRCRkExOEU2RDJDMjYyQTI0MEYwMzNCNUJDQ0I1RjY1RDg4RDFCM0EzMTgz
QkI2NDE0MTczRTc2QzAwRTY4OTY3MjY1QjNCN0EzODg1OTFGRUEyN0Y5MTIzRkI2
QkU0RTQxNDIyMTY2RDI3MkRDOEVGNzA3NTFCMjgyNDcxMUMxRkNDOEJCNzhCQTNG
QUZBODQxRTQ4QjgyNEYwQjlGMzMyRkQ4RkRBMkRCQ0MyNjM1QkE5RURBNzVFRkI4
OENEMzJEREEyOTBBQ0UwRDcyOEIxRUMwRUVFMjExOEZBOUI0NkQ1MTBCNjJERkE0
MzA2Q0JDRkI2MDYzNzZERTlCMERFNDE4NUU4Q0Q0MDhCMUNDRTdGOTRENTlCQTJG
QzVFMUYxMTE5N0RERDU2OURBNzJDQjUxQkFGNkQ0ODk0QzhGMURCRjBEMUIxMDg0
OUNGNDJGM0VGODhFREQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1l0O3L2mUTXREmR91L6OZFW60L6j50x5N5wgyaqdN7k8hjD9snL7
CaB86R+H3zUaZFswmnv7R3wcZn710k40JHQqBjQ1oAAJPCMRqHtu/Q05Sd1L+hjm
0sJiokDwM7W8y19l2I0bOjGDu2QUFz52wA5olnJls7ejiFkf6if5Ej+2vk5BQiFm
0nLcjvcHUbKCRxHB/Mi7eLo/r6hB5IuCTwufMy/Y/aLbzCY1up7ade+4jNMt2ikK
zg1yix7A7uIRj6m0bVELYt+kMGy8+2Bjdt6bDeQYXozUCLHM5/lNWbovxeHxEZfd
1WnacstRuvbUiUyPHb8NGxCEnPQvPviO3QIDAQABo4IB5jCCAeIwHQYDVR0OBBYE
FNTzhDc/h5jxoIk1Su/iGVWwba7TMB8GA1UdIwQYMBaAFCtJNUOJKzFiDg/OL8pB
cGnQZHoUMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov
L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMC8yQjQ5MzU0Mzg5MkIzMTYy
MEUwRkNFMkZDQTQxNzA2OUQwNjQ3QTE0LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI
KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMC8y
QjQ5MzU0Mzg5MkIzMTYyMEUwRkNFMkZDQTQxNzA2OUQwNjQ3QTE0LmNlcjB9Bggr
BgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5jOi8vcnBraS5hcGVybmV0Lmlv
L3JlcG8vQVBFUk5FVC8wLzMyMzYzMDMyM2E2NjY1NjQ2MTNhMzEzNDYzM2EzYTJm
MzQzODIwM2QzZTIwMzMzODMwMzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/toBTDANBgkqhkiG
9w0BAQsFAAOCAQEAMqH3vaOx1FEHZFaE+u8a7/j3xya2HDcNxQKae5B/1l9w3fKH
jt3bkH7eckJku1i8vNBcH0n1PQ4jURrfGbQDUXZIYdNHstHqBZwYwdxhCNum/h3/
1kciyVZwRVa1+03pEiBfX97/FL762nzq5j+mvOIyHBCnY7YpbAMokCuxpDHpU8dd
wb5F0NcKlG8vWbmHm4Ci2HccmK3zo0HUOov0fFf3O6NRUd5SEyJCMyc7H9tnaNb2
+YhKBo1ugKvRa2Um9WVxXd91D0nurB1D9Kb+NN2EcyKFZPdFFQYj8TUbQCDQuqFF
hK2CIwTDKtQ+MSQs9FWf+HTTZmF3JnZpJDo40w==
-----END CERTIFICATE-----