Route Origin Authorization

$ rpki-client -vvf rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435313a3a2f34382d3438203d3e20313431373132.roa
File:                     323630323a666564613a6435313a3a2f34382d3438203d3e20313431373132.roa (raw, json)
Hash identifier:          LE7jXoEp9cnB63Rc6jDG5z7RQUH2idIr0vGzhr6t60k=
Subject key identifier:   29:71:7C:9B:7F:4A:22:B5:4E:EA:67:5C:54:EB:58:23:22:49:58:C9
Certificate issuer:       /CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
Certificate serial:       043D71C72B3BB7BF9087462758BEED76DDFED3A0
Authority key identifier: 73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer
Subject info access:      rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435313a3a2f34382d3438203d3e20313431373132.roa
Signing time:             Sat 12 Mar 2022 11:32:00 +0000
ROA not before:           Sat 12 Mar 2022 11:27:00 +0000
ROA not after:            Sat 11 Mar 2023 11:32:00 +0000
asID:                     141712
IP address blocks:        2602:feda:d51::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3d:71:c7:2b:3b:b7:bf:90:87:46:27:58:be:ed:76:dd:fe:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
        Validity
            Not Before: Mar 12 11:27:00 2022 GMT
            Not After : Mar 11 11:32:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:92:4f:6c:1f:f9:5b:5a:77:ab:62:8e:87:ec:
                    9e:11:85:47:76:0f:6c:c9:cd:1c:45:0a:8f:d7:7b:
                    c4:f8:b4:1e:05:59:83:cc:47:85:45:e0:9d:5b:e2:
                    b2:bb:57:5e:05:b3:18:76:ef:c4:6d:38:7b:c6:6c:
                    a9:c2:1c:df:e6:1e:a8:44:91:6e:00:e2:e7:8a:cd:
                    4e:15:ca:d9:45:3b:bd:fa:bd:21:53:2d:95:da:4a:
                    a1:67:db:2f:b6:2a:e9:7b:58:9e:8a:f3:29:87:20:
                    3e:cf:93:6c:34:32:50:8d:c8:8d:35:7e:c9:70:c3:
                    94:fe:38:43:90:83:9a:53:32:03:bd:02:32:bd:7e:
                    5b:e7:25:59:ea:05:55:ef:b1:8a:9d:42:28:ee:1c:
                    aa:5c:20:12:0f:d4:58:9e:13:c7:55:16:60:cb:6d:
                    35:bd:bc:d2:7b:ea:19:5c:7b:f2:36:6c:59:77:af:
                    f7:ac:6f:f6:46:3d:ea:31:bc:1e:d4:c7:87:53:46:
                    78:25:0c:40:40:c9:ad:d6:45:a4:90:af:25:01:7c:
                    ca:bf:48:37:e7:d5:6e:f3:e9:ff:9a:8c:72:9d:09:
                    b0:a5:7b:e7:24:5e:8d:2a:5a:99:64:3e:c8:44:6b:
                    bb:cc:db:a7:f6:28:e5:a7:15:25:d7:1a:83:a1:52:
                    cd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:71:7C:9B:7F:4A:22:B5:4E:EA:67:5C:54:EB:58:23:22:49:58:C9
            X509v3 Authority Key Identifier:
                keyid:73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435313a3a2f34382d3438203d3e20313431373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d51::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:ec:3f:c8:e0:46:1c:56:84:6b:94:b6:cd:77:d1:12:f8:
         13:34:ab:cc:1a:85:e5:fd:dd:c8:7c:54:d5:71:61:f2:e9:46:
         d3:b4:5f:c7:99:c6:35:58:43:69:ff:34:a4:98:f1:ba:69:70:
         db:29:79:32:c1:74:67:44:9b:f5:6e:15:9b:d6:9e:93:30:44:
         55:63:57:33:a1:c2:3b:55:e7:c6:a7:36:c1:f6:e8:05:5c:a2:
         48:53:0a:cd:e6:c0:33:51:9c:e5:82:ef:6b:bd:cc:72:63:70:
         3b:af:11:76:03:da:02:13:ac:e1:60:ed:47:c0:29:8d:a7:fa:
         f6:86:26:11:06:a4:c2:61:c4:be:76:5d:f7:ca:d8:aa:6b:be:
         f3:bc:fa:b5:b1:dd:3f:7d:01:ed:7c:8e:50:fa:3f:7b:91:0f:
         2b:d8:de:d4:24:5f:ec:af:e5:be:44:6d:ac:ac:3e:31:fe:8b:
         6f:a1:6e:cc:80:ab:e3:b1:f5:8d:95:52:5f:eb:c1:d4:eb:23:
         fb:51:a5:a5:71:d2:98:75:63:20:29:86:66:11:15:84:6f:4b:
         0e:e9:87:d5:10:14:84:9d:ec:b0:ec:af:a2:dd:9b:db:9a:42:
         1e:d0:9d:83:1b:5c:c1:92:79:4d:80:ed:ae:52:f7:7b:11:8f:
         33:f0:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----