Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3135643a3a2f3438203d3e203338303038.roa
File:                     323630323a666564613a3135643a3a2f3438203d3e203338303038.roa (raw, json)
Hash identifier:          tf/nMuPIYQExYsAt9MyZ0Jq4Lxh93SPrLLC57uKjHq4=
Subject key identifier:   8E:CB:80:05:BF:95:8D:10:29:F3:D9:8A:67:A7:25:5A:99:11:FD:E3
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       644EBDC2FF270E9281C545C55DBAF03F3F89E9CB
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3135643a3a2f3438203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 12:00:00 +0000
ROA not before:           Wed 13 Jul 2022 11:55:00 +0000
ROA not after:            Thu 13 Jul 2023 12:00:00 +0000
asID:                     38008
IP address blocks:        2602:feda:15d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4e:bd:c2:ff:27:0e:92:81:c5:45:c5:5d:ba:f0:3f:3f:89:e9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 11:55:00 2022 GMT
            Not After : Jul 13 12:00:00 2023 GMT
        Subject: CN=3082010A0282010100C2ACCD33646BE6CF703F07BD3819F47441C56907DF38622C6257F24E74E56CA2672562967D7D9CF6DA71B91DBC769F3427B95FEED48AC41FE0C5E0076ED16F66DD064C4AFA192C31DE1B90AE3249DA77239738801C47EFCAB4D9BD6508559D733CDBDDE65695BB8E73509E617AA03CF36CCFBA6208C69F7C0286D7B4FD0FCF26AB374E9EAC5A7376326FCC77C720115E93AF7653B63760709C72A44A4FC43B1B78B63C637620271D857E1F207FAF20F7206B71265DA8B655AC5ECAA8DE539C35DAA9FBA4ADF302249F504A731E5F00131D578511411B52729DF099702E410F1F335B5A925834182D4BADB9426D6F28A55023E2D87B56DA56B56AE2F8112C306F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:cd:33:64:6b:e6:cf:70:3f:07:bd:38:19:
                    f4:74:41:c5:69:07:df:38:62:2c:62:57:f2:4e:74:
                    e5:6c:a2:67:25:62:96:7d:7d:9c:f6:da:71:b9:1d:
                    bc:76:9f:34:27:b9:5f:ee:d4:8a:c4:1f:e0:c5:e0:
                    07:6e:d1:6f:66:dd:06:4c:4a:fa:19:2c:31:de:1b:
                    90:ae:32:49:da:77:23:97:38:80:1c:47:ef:ca:b4:
                    d9:bd:65:08:55:9d:73:3c:db:dd:e6:56:95:bb:8e:
                    73:50:9e:61:7a:a0:3c:f3:6c:cf:ba:62:08:c6:9f:
                    7c:02:86:d7:b4:fd:0f:cf:26:ab:37:4e:9e:ac:5a:
                    73:76:32:6f:cc:77:c7:20:11:5e:93:af:76:53:b6:
                    37:60:70:9c:72:a4:4a:4f:c4:3b:1b:78:b6:3c:63:
                    76:20:27:1d:85:7e:1f:20:7f:af:20:f7:20:6b:71:
                    26:5d:a8:b6:55:ac:5e:ca:a8:de:53:9c:35:da:a9:
                    fb:a4:ad:f3:02:24:9f:50:4a:73:1e:5f:00:13:1d:
                    57:85:11:41:1b:52:72:9d:f0:99:70:2e:41:0f:1f:
                    33:5b:5a:92:58:34:18:2d:4b:ad:b9:42:6d:6f:28:
                    a5:50:23:e2:d8:7b:56:da:56:b5:6a:e2:f8:11:2c:
                    30:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CB:80:05:BF:95:8D:10:29:F3:D9:8A:67:A7:25:5A:99:11:FD:E3
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3135643a3a2f3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:15d::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:5e:cb:21:52:45:c8:da:57:1f:d4:01:b1:26:a7:2a:1e:23:
         dc:64:11:78:d2:e4:46:14:b7:25:91:33:62:9d:32:ae:c1:05:
         ca:92:40:8d:c8:40:74:a5:c3:19:c1:67:45:3f:69:ab:7f:7e:
         16:a1:69:8d:f6:c5:3f:75:25:df:eb:87:9d:c8:6a:16:d6:db:
         ad:d2:7d:94:63:e2:7f:f3:88:e4:93:2a:fe:ca:8e:55:0d:28:
         51:d0:67:e4:6a:8a:c0:30:82:96:77:a6:65:2e:9e:a4:70:37:
         92:10:8a:ec:a1:35:be:82:04:aa:a3:8f:de:6a:a1:13:ab:74:
         4c:11:08:7e:f4:e7:33:b2:88:23:80:88:f1:52:5b:7f:ac:04:
         12:ee:df:87:9c:64:61:8d:76:b1:fc:2f:de:39:fd:fd:42:a0:
         58:0f:fc:d4:7b:b7:03:6d:0b:6c:fa:61:3d:7e:1a:4d:6a:3c:
         d9:cb:09:ac:cd:fb:e3:6b:24:e6:ec:78:7c:db:51:24:ac:99:
         1a:ed:c9:1a:0b:ab:51:f4:09:c4:e6:3b:87:10:95:78:4e:70:
         88:a9:49:54:20:a3:6f:8c:73:aa:98:52:f2:cb:a8:1a:4e:19:
         07:33:c3:3e:e1:d8:b0:ad:21:ae:21:b1:e7:c8:d2:ab:3e:1f:
         00:8c:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----