Route Origin Authorization

$ rpki-client -vvf rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435393a3a2f34382d3438203d3e20313431373132.roa
File:                     323630323a666564613a6435393a3a2f34382d3438203d3e20313431373132.roa (raw, json)
Hash identifier:          tdkr7cK6bBcTI3GmYTeGESInNCtViN9r8SXodFOP3qM=
Subject key identifier:   4F:44:2A:D8:C7:6E:D5:35:97:00:1D:38:93:FF:E9:8E:46:F3:C6:D9
Certificate issuer:       /CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
Certificate serial:       59DBF13040FB6742F06A9672B7700D3759A5344B
Authority key identifier: 73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer
Subject info access:      rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435393a3a2f34382d3438203d3e20313431373132.roa
Signing time:             Fri 25 Feb 2022 14:28:00 +0000
ROA not before:           Fri 25 Feb 2022 14:23:00 +0000
ROA not after:            Fri 24 Feb 2023 14:28:00 +0000
asID:                     141712
IP address blocks:        2602:feda:d59::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:db:f1:30:40:fb:67:42:f0:6a:96:72:b7:70:0d:37:59:a5:34:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC
        Validity
            Not Before: Feb 25 14:23:00 2022 GMT
            Not After : Feb 24 14:28:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a9:5d:47:3f:fc:81:5a:d0:4d:68:ef:26:b8:
                    8e:89:06:20:48:05:d4:c2:61:40:81:91:bb:07:31:
                    be:d0:a0:36:7d:b9:60:2b:fa:ad:24:5e:de:ff:55:
                    25:91:ed:55:6b:54:c5:b8:db:4a:64:d2:bc:f0:fd:
                    3f:0f:1b:e5:95:4d:f8:21:30:42:65:90:9d:11:26:
                    b5:40:eb:99:76:ba:22:60:11:14:d6:62:df:97:37:
                    8d:48:65:7d:a7:8f:ea:0b:be:e6:bd:d2:a1:dc:3b:
                    62:de:a6:6c:59:69:71:4a:ec:b7:a4:0f:d0:cf:9e:
                    01:be:7a:1b:86:a4:7e:b3:2f:de:04:b3:ae:d2:f1:
                    f4:c7:a7:34:12:a4:41:43:d7:7a:33:eb:54:da:c6:
                    8d:9e:c6:57:59:4d:4a:4d:66:24:62:fd:33:21:3f:
                    9e:86:a2:ad:de:4d:a1:1d:e8:f1:32:ad:46:28:3f:
                    a1:52:9a:2c:dd:8a:6e:e1:7c:4f:08:58:be:90:99:
                    f7:4d:5b:d0:07:af:8b:c5:ee:19:70:2e:b9:f0:54:
                    8a:b9:c0:e2:93:2d:57:8f:c8:f3:60:d5:47:6a:24:
                    32:0c:5c:da:b6:5e:2d:37:40:ea:d1:e5:db:04:c6:
                    c2:7c:09:5c:5d:0c:ed:be:f7:5b:8b:01:48:5d:dd:
                    ba:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:44:2A:D8:C7:6E:D5:35:97:00:1D:38:93:FF:E9:8E:46:F3:C6:D9
            X509v3 Authority Key Identifier:
                keyid:73:DC:EE:C2:5B:33:E1:B0:0D:F2:8D:7D:73:BA:B6:D0:8B:9C:AF:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/73DCEEC25B33E1B00DF28D7D73BAB6D08B9CAFFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.luys.cloud/repo/LY-RPKI/0/323630323a666564613a6435393a3a2f34382d3438203d3e20313431373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d59::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:72:3f:14:f3:05:78:ca:09:c3:1f:b2:14:f2:47:22:42:a6:
         bb:39:34:75:bf:ed:94:98:8e:79:e8:46:1d:84:9e:72:aa:f0:
         33:c8:08:57:e1:f7:58:9c:7e:37:95:35:f7:bf:5f:86:97:80:
         9a:19:09:ac:63:8d:90:0e:0a:0b:50:6a:53:b6:d2:0b:61:1d:
         61:53:ce:6b:16:74:86:88:bb:fb:f2:f8:54:39:77:23:2a:24:
         e8:2f:f3:0b:0f:8c:ce:13:f9:ce:c2:d0:38:99:53:c6:1f:80:
         8d:af:08:67:a9:80:12:79:df:87:83:a3:e4:39:2f:e5:d6:5e:
         85:52:1b:46:d7:b2:f3:e8:c9:24:a3:58:d1:cc:4d:76:65:1e:
         d3:56:b2:8d:6c:64:54:25:b1:c5:13:64:c6:b4:f0:62:48:06:
         a6:4f:0e:23:ea:62:54:3c:2e:47:a9:5e:28:33:8e:e4:00:b3:
         53:7f:96:ad:c9:98:65:c4:c3:2a:1d:ad:8e:64:de:57:b6:f1:
         9a:7c:9d:0c:92:b1:dd:b2:17:04:11:63:37:22:c0:ba:41:01:
         fb:8a:ad:13:19:14:59:8b:02:41:e5:b7:07:c4:63:b3:d5:16:
         8f:0a:c6:2e:33:86:24:90:b0:13:ac:47:5b:9b:13:01:8d:41:
         62:01:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----