Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3135303a3a2f3434203d3e203338303038.roa
File:                     323630323a666564613a3135303a3a2f3434203d3e203338303038.roa (raw, json)
Hash identifier:          2NFJNc0kP9rP6nE2a/LuX9JEzYJshj+am3zhQ6d1wyw=
Subject key identifier:   4A:E8:59:5E:B9:88:05:5F:7C:86:75:6C:D9:8C:DC:E2:8F:34:ED:45
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       287D5E99A5BFC1943B25705A3E71BF8F6D91CF6E
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3135303a3a2f3434203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 12:00:01 +0000
ROA not before:           Wed 13 Jul 2022 11:55:01 +0000
ROA not after:            Thu 13 Jul 2023 12:00:01 +0000
asID:                     38008
IP address blocks:        2602:feda:150::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7d:5e:99:a5:bf:c1:94:3b:25:70:5a:3e:71:bf:8f:6d:91:cf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 11:55:01 2022 GMT
            Not After : Jul 13 12:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:ba:9e:02:bd:6e:c4:64:28:3c:c5:28:e3:
                    ba:c8:d4:f8:71:78:83:9e:42:57:0d:5e:e7:58:48:
                    d7:c6:ea:42:44:e0:04:97:c8:f4:c1:5b:02:0b:84:
                    32:5f:21:24:19:0b:2b:83:57:a8:39:f2:36:b2:18:
                    c5:34:d1:11:08:f1:9c:42:b3:96:7e:30:99:d1:8e:
                    73:92:00:7c:62:f4:c2:f6:40:b1:44:74:cb:99:f0:
                    e8:c7:22:82:cc:3a:8e:70:44:dd:93:e4:cc:f3:5d:
                    01:fb:39:1a:e1:43:bb:71:95:c4:83:fc:92:d5:d9:
                    94:57:09:6a:ee:7d:71:4e:47:02:f5:88:f4:e0:2a:
                    41:6a:e8:f6:4c:9d:8d:2c:e9:04:2d:d0:92:45:67:
                    ab:69:fd:e8:7e:e3:d6:26:ff:5a:d9:20:7a:1c:68:
                    a4:54:02:9e:55:eb:64:5d:d4:ea:6c:5a:ce:b9:a6:
                    22:45:14:5a:8b:2b:66:46:f7:2b:5c:ea:d5:0d:72:
                    d5:24:62:41:10:ca:f5:91:cb:2e:d0:64:d6:1a:65:
                    4a:ea:ee:90:66:70:53:4f:fd:ba:50:7c:82:0d:29:
                    8e:5b:60:3d:10:65:57:6b:b6:85:a1:38:36:9c:3a:
                    81:ab:d2:99:7e:cd:07:ca:af:26:fe:5e:d5:1d:df:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E8:59:5E:B9:88:05:5F:7C:86:75:6C:D9:8C:DC:E2:8F:34:ED:45
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3135303a3a2f3434203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:150::/44

    Signature Algorithm: sha256WithRSAEncryption
         47:40:9e:c3:81:a9:24:b6:05:7a:c3:17:b8:42:57:97:8c:3c:
         26:1a:a2:8d:3a:5f:e0:7d:5f:81:e2:76:ef:4e:74:ad:d6:55:
         9a:d5:0e:b3:04:b5:59:29:e8:cf:73:49:bf:2d:aa:57:cf:e2:
         10:32:11:bf:b2:02:b7:2c:c8:33:8e:2d:58:a7:2e:93:f1:3c:
         67:83:f6:a8:da:ae:7d:ce:1e:0a:ed:f3:ef:4a:75:e9:67:0f:
         7a:bf:6b:b3:f1:32:fe:f0:74:29:9f:c8:b1:69:70:83:88:4d:
         96:56:bc:fd:0e:07:01:c3:9a:cb:1a:9b:95:0b:b1:d4:94:82:
         ec:fc:7f:c6:9b:c1:fe:1a:32:b3:1b:9c:b3:9d:66:4a:f6:55:
         34:bb:7f:5c:6c:0e:7c:37:bc:d7:4f:c3:b1:9e:cf:b5:ed:e5:
         4d:73:db:6f:ad:1c:52:02:09:eb:62:4b:6b:7c:a0:90:d4:04:
         2e:ce:9f:d4:b5:2d:31:11:56:f6:9c:f6:4d:b6:2b:ac:ca:5c:
         5e:69:dd:c0:cd:1e:bd:6d:2b:04:de:f4:c2:c1:b6:48:e6:23:
         1f:9d:46:cc:02:df:00:8b:aa:87:fe:96:6c:fb:88:3b:58:4b:
         bd:a3:ee:3c:c9:0e:51:a4:0d:56:03:f2:3d:dc:3d:44:54:b0:
         3c:6c:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----