Route Origin Authorization

$ rpki-client -vvf rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435373a3a2f34382d3438203d3e20313431373132.roa
File:                     323630323a666564613a6435373a3a2f34382d3438203d3e20313431373132.roa (raw, json)
Hash identifier:          ILDo+GVDczK9AsngcAzD5qmkroi+JvEzOoEHevtfU1o=
Subject key identifier:   F8:C5:ED:06:F1:64:97:EC:9C:46:29:DB:79:02:A3:2F:52:AE:02:32
Certificate issuer:       /CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
Certificate serial:       5D31A0A4627CCE53212564FA87509A7956C629F3
Authority key identifier: 73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer
Subject info access:      rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435373a3a2f34382d3438203d3e20313431373132.roa
Signing time:             Fri 25 Feb 2022 14:28:00 +0000
ROA not before:           Fri 25 Feb 2022 14:23:00 +0000
ROA not after:            Fri 24 Feb 2023 14:28:00 +0000
asID:                     141712
IP address blocks:        2602:feda:d57::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:31:a0:a4:62:7c:ce:53:21:25:64:fa:87:50:9a:79:56:c6:29:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
        Validity
            Not Before: Feb 25 14:23:00 2022 GMT
            Not After : Feb 24 14:28:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:ee:b7:59:e0:e1:89:45:bc:8d:e8:a2:9d:
                    02:ee:6c:46:3d:69:dc:8b:0e:77:33:e8:38:c7:fa:
                    33:62:1f:9a:1a:7e:c4:17:d9:00:6a:8a:62:ff:d9:
                    e8:d2:93:64:32:2b:33:b6:6a:d4:a0:60:e2:99:4a:
                    1c:5d:27:f8:36:27:db:d6:1d:46:5e:83:a3:16:68:
                    10:48:cc:ab:1e:6d:4d:ce:69:55:4e:36:ee:fd:8d:
                    27:9f:71:99:ad:c5:37:ed:13:be:2d:98:c3:b9:58:
                    be:fd:a5:b6:bc:6f:7d:43:8b:d8:5b:82:e1:34:ef:
                    59:a7:5b:65:44:0c:28:b6:9a:f6:c4:f6:be:7f:47:
                    f2:4f:ed:db:9e:db:19:c6:37:d6:43:9d:96:fe:6c:
                    6a:02:b0:47:49:82:25:42:bb:62:b8:a8:f9:ba:3c:
                    21:97:1b:20:1d:bf:d7:20:af:ee:ce:8c:fb:06:81:
                    cd:95:03:53:8c:2a:04:90:21:4e:e1:4b:e6:d8:3b:
                    21:22:01:73:89:9b:eb:43:c5:ce:68:8d:35:bd:1f:
                    09:d2:95:67:3c:be:29:c1:79:8b:f5:91:01:d1:c3:
                    d3:b0:3f:52:8d:54:31:f3:bc:d4:e1:a7:5f:0d:91:
                    10:dc:30:1e:0c:2d:0a:62:e3:44:b0:d7:32:ed:3e:
                    14:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C5:ED:06:F1:64:97:EC:9C:46:29:DB:79:02:A3:2F:52:AE:02:32
            X509v3 Authority Key Identifier:
                keyid:73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435373a3a2f34382d3438203d3e20313431373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d57::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:2c:92:15:48:26:6a:4f:14:e9:ee:37:a2:e6:d3:53:f9:fa:
         cb:8c:98:fa:76:3a:ed:b5:40:99:b8:26:17:d2:93:7a:79:dd:
         15:8f:02:cb:34:6a:7e:48:65:fe:ab:fd:e5:0f:e5:66:08:78:
         bc:90:cc:8d:b1:87:5c:fb:44:6e:81:2e:8d:76:a5:59:52:30:
         61:db:5e:f1:63:25:f5:db:e5:cb:d3:82:c4:c2:6f:96:02:2a:
         44:62:3d:e5:06:95:5c:58:22:03:ad:65:02:76:d7:bc:93:3b:
         9b:cf:c6:91:d2:6e:2c:b8:a0:98:3f:ea:da:20:16:98:a4:01:
         dd:07:ad:63:2d:74:ab:21:73:71:0d:7e:42:3e:8b:3f:40:77:
         13:7f:fa:0e:7e:2c:ef:ea:ff:4b:d5:4d:27:ff:67:bc:37:23:
         5d:e9:84:f3:97:d5:d3:73:89:d4:03:53:55:6a:f0:5f:f4:f8:
         c6:d5:81:74:fe:29:84:80:c0:58:3b:25:98:96:c5:79:e0:fa:
         9a:47:eb:23:1e:09:65:22:ec:3a:c3:a4:39:29:11:90:5c:de:
         f0:9b:79:90:1a:76:75:9a:f5:8d:66:22:ae:6a:4b:7a:3b:a5:
         6e:f2:4e:bc:f3:49:90:a4:ab:5c:04:2d:72:da:db:21:95:d7:
         6d:19:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----