Route Origin Authorization

$ rpki-client -vvf rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435363a3a2f34382d3438203d3e20313431373132.roa
File:                     323630323a666564613a6435363a3a2f34382d3438203d3e20313431373132.roa (raw, json)
Hash identifier:          VQiE1w1bqfLpjT6Y6tC4IGKHElf07f4i8zSCWYVZcxk=
Subject key identifier:   2D:A7:71:74:B6:4E:5B:75:45:E5:A0:0C:95:59:36:76:31:26:A3:99
Certificate issuer:       /CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
Certificate serial:       760BE98703F2483E7F9DB753817860AF295ACC53
Authority key identifier: 73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer
Subject info access:      rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435363a3a2f34382d3438203d3e20313431373132.roa
Signing time:             Fri 25 Feb 2022 14:28:01 +0000
ROA not before:           Fri 25 Feb 2022 14:23:01 +0000
ROA not after:            Fri 24 Feb 2023 14:28:01 +0000
asID:                     141712
IP address blocks:        2602:feda:d56::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0b:e9:87:03:f2:48:3e:7f:9d:b7:53:81:78:60:af:29:5a:cc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
        Validity
            Not Before: Feb 25 14:23:01 2022 GMT
            Not After : Feb 24 14:28:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:19:43:31:25:17:30:6e:e7:1c:3f:11:a4:
                    23:f9:68:49:bf:11:82:6e:4b:64:4f:6a:c2:1b:33:
                    51:29:75:a1:88:dd:72:79:ed:7e:59:f7:57:47:3c:
                    f1:32:ea:73:a3:ab:71:f3:10:26:99:a4:39:e1:b1:
                    ae:d4:7c:70:98:3e:68:7a:80:1e:c5:b1:24:99:b5:
                    c1:e2:82:33:19:3a:8e:80:c1:22:18:fa:f0:eb:66:
                    47:6e:4d:26:df:c2:70:d0:b3:8f:90:d7:25:5b:ec:
                    64:7a:db:22:d9:00:46:9c:3d:68:ac:30:88:34:c5:
                    d9:fc:a5:a9:64:7b:6a:97:67:b7:c7:60:83:da:3d:
                    6f:bd:60:d0:89:f7:59:be:a4:97:03:ac:1f:fd:2c:
                    b8:20:fc:5c:bc:75:ff:3b:ac:5b:a9:e6:0d:fc:1d:
                    77:b0:5d:9e:df:0b:b3:c1:84:95:09:65:25:6a:4a:
                    a1:ff:09:97:9b:f1:63:eb:40:cc:4a:80:27:db:6c:
                    d4:b1:ec:65:1d:3e:c0:6d:17:7a:80:38:6b:81:32:
                    69:0f:e8:0c:8d:3b:83:43:05:88:ed:76:61:3b:71:
                    fc:73:e8:c3:51:20:87:e8:f0:0a:2a:91:e4:3f:0c:
                    89:c8:87:93:83:8a:04:3c:b4:07:8b:55:46:d7:a9:
                    79:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A7:71:74:B6:4E:5B:75:45:E5:A0:0C:95:59:36:76:31:26:A3:99
            X509v3 Authority Key Identifier:
                keyid:73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435363a3a2f34382d3438203d3e20313431373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d56::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:25:06:80:0f:66:8a:e5:da:c0:58:37:87:6c:53:1b:0a:d0:
         a0:cd:9f:8b:d9:ba:92:51:a2:d7:b7:b9:5c:8f:65:0c:d5:c3:
         7e:a7:ac:1b:74:f8:6d:ad:80:0e:67:b5:80:d6:43:95:54:35:
         bc:9f:c1:3d:57:79:67:aa:95:00:bf:f4:dd:68:5a:f1:9b:ec:
         32:01:70:1e:c0:a5:4d:93:8f:41:16:73:dd:ee:cb:79:9a:47:
         c3:26:88:39:32:8f:b6:f9:04:5d:66:36:b0:9e:5c:45:e6:2e:
         55:28:11:0d:c4:41:6a:2f:af:88:fd:44:1a:b2:86:41:e2:4d:
         4b:71:8e:06:ed:c9:94:6f:ba:e2:f3:4e:4c:e9:d8:52:ab:cd:
         38:52:e2:8c:7e:0c:bb:9d:75:a9:d7:de:b0:54:50:f5:cf:f1:
         c6:31:71:ee:05:a4:43:5a:10:b8:ee:a1:ad:98:71:4e:b9:f6:
         ef:8a:03:f4:7b:d8:53:63:ac:ae:cb:9f:a6:b1:23:4c:47:6b:
         80:52:7b:d6:56:cd:77:df:b4:8d:c6:eb:0b:f4:61:f2:26:a7:
         00:c6:aa:d9:c3:37:64:9d:37:15:96:33:db:0b:81:d4:96:56:
         fd:39:e3:2c:24:2a:9a:9f:1e:b0:c5:39:d7:f4:91:cf:e7:6b:
         28:f8:71:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----