Route Origin Authorization

$ rpki-client -vvf rpki.apernet.io/repo/APERNET/0/323630323a666564613a3137303a3a2f3434203d3e203338303038.roa
File:                     323630323a666564613a3137303a3a2f3434203d3e203338303038.roa (raw, json)
Hash identifier:          mrA+7r/LwhUNOFEx6Bg96FkpIx49TguIIJFHObbtOpE=
Subject key identifier:   50:99:E0:6C:D1:12:E5:13:DE:13:E5:57:B3:D2:4C:0B:47:20:7E:D5
Certificate issuer:       /CN=2B493543892B31620E0FCE2FCA417069D0647A14
Certificate serial:       33EC469BA61AF1E3D299F75730D08B2E1D43C331
Authority key identifier: 2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer
Subject info access:      rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3137303a3a2f3434203d3e203338303038.roa
Signing time:             Wed 13 Jul 2022 13:00:00 +0000
ROA not before:           Wed 13 Jul 2022 12:55:00 +0000
ROA not after:            Thu 13 Jul 2023 13:00:00 +0000
asID:                     38008
IP address blocks:        2602:feda:170::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ec:46:9b:a6:1a:f1:e3:d2:99:f7:57:30:d0:8b:2e:1d:43:c3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B493543892B31620E0FCE2FCA417069D0647A14
        Validity
            Not Before: Jul 13 12:55:00 2022 GMT
            Not After : Jul 13 13:00:00 2023 GMT
        Subject: CN=3082010A0282010100D2F5464FC8715B7BC80D8544E34E1F2F222DE3A425159CEE6F4EA26357174C93C0B1C839C252F22B84BC835C4328972597A6DA7DE7A6AE56D7E25FD53F282DEA070AA4ADB1D089C9992D64B4DA10CE2ECDC96D49AF44BBDA1CCB7AE61BDAE34963B94F75EC5BCF63E2E0DC2C7EF898143A6DC47EE35B4E09EA91F3F3114068AA8B3E979EC1A0E4866D6F22DC2EF8E9ABD55E73957B770EE1DD6212A390C980D16D040280CA7798C0730F62DCF2ECBEA27693B62E8FC81EB4CACFA950FD620BDE1C4C40BD00F59F71944F27C0B132C89C9300C78E86A21D28AF76401363BC16DD6C198717D5F80F7738B1A1A437C2EAF07769310E6F93B081DB4B881E2A2FF0E70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:46:4f:c8:71:5b:7b:c8:0d:85:44:e3:4e:
                    1f:2f:22:2d:e3:a4:25:15:9c:ee:6f:4e:a2:63:57:
                    17:4c:93:c0:b1:c8:39:c2:52:f2:2b:84:bc:83:5c:
                    43:28:97:25:97:a6:da:7d:e7:a6:ae:56:d7:e2:5f:
                    d5:3f:28:2d:ea:07:0a:a4:ad:b1:d0:89:c9:99:2d:
                    64:b4:da:10:ce:2e:cd:c9:6d:49:af:44:bb:da:1c:
                    cb:7a:e6:1b:da:e3:49:63:b9:4f:75:ec:5b:cf:63:
                    e2:e0:dc:2c:7e:f8:98:14:3a:6d:c4:7e:e3:5b:4e:
                    09:ea:91:f3:f3:11:40:68:aa:8b:3e:97:9e:c1:a0:
                    e4:86:6d:6f:22:dc:2e:f8:e9:ab:d5:5e:73:95:7b:
                    77:0e:e1:dd:62:12:a3:90:c9:80:d1:6d:04:02:80:
                    ca:77:98:c0:73:0f:62:dc:f2:ec:be:a2:76:93:b6:
                    2e:8f:c8:1e:b4:ca:cf:a9:50:fd:62:0b:de:1c:4c:
                    40:bd:00:f5:9f:71:94:4f:27:c0:b1:32:c8:9c:93:
                    00:c7:8e:86:a2:1d:28:af:76:40:13:63:bc:16:dd:
                    6c:19:87:17:d5:f8:0f:77:38:b1:a1:a4:37:c2:ea:
                    f0:77:69:31:0e:6f:93:b0:81:db:4b:88:1e:2a:2f:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:99:E0:6C:D1:12:E5:13:DE:13:E5:57:B3:D2:4C:0B:47:20:7E:D5
            X509v3 Authority Key Identifier:
                keyid:2B:49:35:43:89:2B:31:62:0E:0F:CE:2F:CA:41:70:69:D0:64:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apernet.io/repo/APERNET/0/2B493543892B31620E0FCE2FCA417069D0647A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/2B493543892B31620E0FCE2FCA417069D0647A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/0/323630323a666564613a3137303a3a2f3434203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:170::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:23:66:70:ec:db:ef:eb:92:59:d5:6d:55:90:dc:3e:ce:8d:
         db:7e:2b:cd:ff:fe:7d:50:e4:31:2c:24:35:90:81:65:f8:fe:
         89:b8:fa:e3:0c:e6:55:7f:46:23:1c:33:12:0f:54:64:fb:4b:
         98:85:43:2d:57:f8:38:7c:d7:0a:59:56:4f:05:51:17:fe:30:
         07:cb:db:d9:e5:80:72:12:39:22:9f:d3:79:78:1b:e3:08:c0:
         ec:ea:4d:94:8e:ed:9a:8b:8e:a1:c2:cb:a9:f0:0e:8b:3d:02:
         c2:a6:fd:87:57:eb:e0:9d:04:9d:f2:c5:79:3b:d3:06:fe:74:
         13:85:7b:2c:37:91:96:66:e7:82:56:2f:1c:b8:69:b0:29:28:
         d5:43:df:da:14:cb:9e:d6:49:0b:47:e3:d3:1e:99:13:31:e4:
         11:8e:25:5e:5b:a4:ff:ef:86:3d:fb:04:f3:dd:09:33:72:d2:
         77:22:5d:f8:7d:21:85:71:a2:8a:76:46:b3:57:51:80:73:cd:
         8a:fe:bf:35:2a:55:a5:aa:f9:54:5a:ad:ae:6d:7c:87:7b:1a:
         c5:a1:b7:62:2c:d6:3d:0e:ad:00:b6:a6:73:db:90:15:f6:a2:
         12:8b:35:27:1a:62:6e:6a:b6:ba:f7:2c:f2:e3:ae:88:4c:d5:
         5d:78:f9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----