Route Origin Authorization

$ rpki-client -vvf rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435353a3a2f34382d3438203d3e20313431373132.roa
File:                     323630323a666564613a6435353a3a2f34382d3438203d3e20313431373132.roa (raw, json)
Hash identifier:          iOHpda39D9zHCXqO8mxNpC43z51QD0KV/gCNku4gT3Q=
Subject key identifier:   60:09:F1:95:65:2E:3B:1D:FB:62:00:96:44:99:7B:63:D7:5D:7F:ED
Certificate issuer:       /CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
Certificate serial:       71752CDB28245EFC495A44E775312E60B42B7AA2
Authority key identifier: 73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer
Subject info access:      rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435353a3a2f34382d3438203d3e20313431373132.roa
Signing time:             Thu 17 Mar 2022 10:14:00 +0000
ROA not before:           Thu 17 Mar 2022 10:09:00 +0000
ROA not after:            Thu 16 Mar 2023 10:14:00 +0000
asID:                     141712
IP address blocks:        2602:feda:d55::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:75:2c:db:28:24:5e:fc:49:5a:44:e7:75:31:2e:60:b4:2b:7a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
        Validity
            Not Before: Mar 17 10:09:00 2022 GMT
            Not After : Mar 16 10:14:00 2023 GMT
        Subject: CN=3082010A0282010100DB41E169E66F59C96931E90A0705C3467CB6EFAE5204AC457B7D38AF6281C75DE7B2677DFA95675D69AA574E0C19BB0E23ED325804C060ABF3EC41A54CD1C7AA86DE5DABA468E2CFEE6916D71809D3D6D569ECEC806C9F7CDEB4CCB3B834B21218CF79C7A2EC2B92D5DB4C146F577F77A1F2E4E5717862FF43C62957B1EA64FE15ED42E61066AE80238D59329206DA2147FE4DC2ED5799670539F26F0B6E35444227025632C154F52BFF1525D1794D5558ACFE6731D37309D637F687F51C66F3C32EFC62ECA56FE4F969AA1729975DCED02513246349C45926EDD04EB8871207BADDEC9F6C2013CEC2C0514D93BE61A04DA71BF487CAA04A37232472BAB0CEE50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:41:e1:69:e6:6f:59:c9:69:31:e9:0a:07:05:
                    c3:46:7c:b6:ef:ae:52:04:ac:45:7b:7d:38:af:62:
                    81:c7:5d:e7:b2:67:7d:fa:95:67:5d:69:aa:57:4e:
                    0c:19:bb:0e:23:ed:32:58:04:c0:60:ab:f3:ec:41:
                    a5:4c:d1:c7:aa:86:de:5d:ab:a4:68:e2:cf:ee:69:
                    16:d7:18:09:d3:d6:d5:69:ec:ec:80:6c:9f:7c:de:
                    b4:cc:b3:b8:34:b2:12:18:cf:79:c7:a2:ec:2b:92:
                    d5:db:4c:14:6f:57:7f:77:a1:f2:e4:e5:71:78:62:
                    ff:43:c6:29:57:b1:ea:64:fe:15:ed:42:e6:10:66:
                    ae:80:23:8d:59:32:92:06:da:21:47:fe:4d:c2:ed:
                    57:99:67:05:39:f2:6f:0b:6e:35:44:42:27:02:56:
                    32:c1:54:f5:2b:ff:15:25:d1:79:4d:55:58:ac:fe:
                    67:31:d3:73:09:d6:37:f6:87:f5:1c:66:f3:c3:2e:
                    fc:62:ec:a5:6f:e4:f9:69:aa:17:29:97:5d:ce:d0:
                    25:13:24:63:49:c4:59:26:ed:d0:4e:b8:87:12:07:
                    ba:dd:ec:9f:6c:20:13:ce:c2:c0:51:4d:93:be:61:
                    a0:4d:a7:1b:f4:87:ca:a0:4a:37:23:24:72:ba:b0:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:09:F1:95:65:2E:3B:1D:FB:62:00:96:44:99:7B:63:D7:5D:7F:ED
            X509v3 Authority Key Identifier:
                keyid:73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435353a3a2f34382d3438203d3e20313431373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d55::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:60:36:3f:72:90:e3:8f:11:41:fa:26:f8:5e:74:47:e8:01:
         61:12:a9:8e:22:22:5c:e2:71:6b:35:9e:14:84:11:ef:87:da:
         b4:1d:4b:59:86:86:ce:58:0f:08:18:91:32:1d:ab:6f:2a:e1:
         a9:a9:40:18:5e:3b:33:bc:66:a9:8b:71:9a:3f:8e:b6:af:47:
         79:eb:2f:b2:f6:71:56:36:c9:70:cb:c6:00:20:a1:42:bd:f2:
         f5:20:a2:4b:98:01:69:f4:74:07:50:44:20:21:fa:bb:6a:3f:
         21:32:9b:32:8d:e7:94:3a:8e:c9:4b:65:43:21:04:e9:04:ad:
         30:f4:4e:ca:29:62:cd:f1:fc:6e:b3:ee:d1:84:f7:60:03:2d:
         ce:89:2f:bb:a6:eb:cf:66:5e:d1:13:cc:93:f5:f8:3b:dc:74:
         a2:42:41:08:54:59:80:85:0d:9e:9b:d2:3e:78:f0:fb:97:ef:
         fd:2b:15:ac:c7:41:b6:c4:02:a0:9f:f0:9e:fa:30:ae:77:7d:
         64:dd:e9:23:69:83:33:7a:86:d1:75:a3:e6:2b:77:f6:67:1f:
         1a:04:9e:25:71:f0:85:b7:40:bb:0c:84:ba:79:dd:1c:fd:fe:
         42:c8:05:62:6c:74:bf:ad:04:24:9f:63:e1:2c:f2:d3:10:3e:
         58:41:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----