Route Origin Authorization

$ rpki-client -vvf rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435383a3a2f34382d3438203d3e20313431373132.roa
File:                     323630323a666564613a6435383a3a2f34382d3438203d3e20313431373132.roa (raw, json)
Hash identifier:          i65l04nEau3mpNKaD3HLU3R9nUpQmJzVDvRNQSNu1pE=
Subject key identifier:   BD:F2:4E:87:5B:B0:35:D6:11:FC:D6:1C:AE:7F:64:97:24:D8:B7:9D
Certificate issuer:       /CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
Certificate serial:       0E7F8803A7B86B15A8FE699693DB84258C731AAB
Authority key identifier: 73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer
Subject info access:      rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435383a3a2f34382d3438203d3e20313431373132.roa
Signing time:             Fri 25 Feb 2022 14:28:00 +0000
ROA not before:           Fri 25 Feb 2022 14:23:00 +0000
ROA not after:            Fri 24 Feb 2023 14:28:00 +0000
asID:                     141712
IP address blocks:        2602:feda:d58::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7f:88:03:a7:b8:6b:15:a8:fe:69:96:93:db:84:25:8c:73:1a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
        Validity
            Not Before: Feb 25 14:23:00 2022 GMT
            Not After : Feb 24 14:28:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:1e:ee:82:02:2c:9c:be:f3:0b:7c:ca:82:
                    be:3b:53:49:4b:50:fd:0b:8e:98:5f:3f:62:ce:20:
                    b8:bd:dc:b8:35:fe:4f:75:89:29:d3:39:33:16:e5:
                    aa:65:54:ac:d0:94:bc:f2:76:a4:41:33:21:0d:17:
                    c9:98:b5:16:bc:ac:d7:82:08:a4:b1:1c:08:3e:26:
                    c2:3f:c8:f0:39:a9:05:65:05:f9:60:e1:8f:78:d8:
                    93:e3:4e:08:f9:80:e7:f7:09:49:7a:6e:e4:54:22:
                    bd:f1:55:af:d4:6a:6e:4d:98:fc:82:3c:c1:bb:1a:
                    f4:05:b2:28:f8:08:aa:c2:86:af:ce:3a:48:e8:5c:
                    29:0e:a1:1a:b7:ce:0a:57:4e:58:cd:61:0c:40:6a:
                    fc:ad:14:cc:e8:63:f4:9d:26:74:c9:51:af:77:72:
                    80:4e:74:8c:1f:bc:c3:0e:8c:94:95:65:fc:77:de:
                    a1:e4:f9:2d:2b:91:ee:7b:e1:56:6a:f6:45:f7:4a:
                    7f:b5:4c:89:a5:f6:d0:21:2e:31:01:3b:94:18:04:
                    48:b8:d4:97:f7:90:44:b0:52:85:38:00:83:13:cb:
                    a8:f8:6f:14:70:ca:60:2f:c5:d6:14:e1:7f:14:ac:
                    63:04:f4:bd:45:37:fb:53:d8:e9:42:ec:bc:f2:ad:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F2:4E:87:5B:B0:35:D6:11:FC:D6:1C:AE:7F:64:97:24:D8:B7:9D
            X509v3 Authority Key Identifier:
                keyid:73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435383a3a2f34382d3438203d3e20313431373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d58::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:9b:8c:38:e0:f5:0a:7c:3d:b3:33:f5:c5:3a:7f:11:43:82:
         95:f3:26:7b:8a:5c:19:49:87:4b:01:a6:8e:a4:2c:6e:62:b1:
         7e:cd:5b:af:72:64:8d:55:32:b7:e8:68:9e:03:34:1c:62:e8:
         ed:50:28:87:4c:3e:60:f0:7b:fe:88:40:fa:fc:28:4b:a7:4d:
         bd:39:9e:3f:a0:c0:b5:da:86:cf:a4:8a:e9:63:aa:2f:c7:66:
         a0:af:06:84:05:96:31:03:f9:d1:90:66:02:77:25:99:4f:80:
         d9:18:85:ed:06:12:ae:b5:3c:dc:a2:24:47:14:a0:ba:82:23:
         e0:b5:40:3b:98:a8:4e:48:40:48:8e:af:8d:2e:04:f9:b9:e4:
         c2:77:af:1b:51:af:f9:a2:7e:97:a0:ad:85:2d:f6:74:37:87:
         bf:95:89:c0:28:ce:08:cb:80:d8:97:d0:b5:44:cf:fd:fa:a2:
         cf:f4:28:f5:92:75:36:c9:45:1a:fe:5e:da:78:8b:fc:57:d2:
         21:ea:3b:e3:c1:27:f2:37:55:f5:34:aa:a2:11:e4:b8:49:eb:
         da:a0:35:0a:dd:04:f1:09:fb:5c:b8:ed:a1:09:f9:89:79:96:
         7b:f7:d0:e3:47:6f:9e:f0:6b:1d:56:af:94:32:1c:c5:ba:5f:
         a5:07:5d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----