Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203134363138.roa
File:                     32332e3234372e3133362e302f32322d3234203d3e203134363138.roa (raw, json)
Hash identifier:          d11Bx28clZWF0VyjB+RrKxbACdKvC4/RtGJqW07t928=
Subject key identifier:   27:11:6B:B8:E9:63:40:79:45:3A:92:78:59:4C:57:C4:D6:BD:E8:55
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       4A4EC5A4194F2ED08D8CDADE2A01B3158298B80E
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203134363138.roa
Signing time:             Wed 18 May 2022 18:31:25 +0000
ROA not before:           Wed 18 May 2022 18:26:25 +0000
ROA not after:            Wed 17 May 2023 18:31:25 +0000
asID:                     14618
IP address blocks:        23.247.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4e:c5:a4:19:4f:2e:d0:8d:8c:da:de:2a:01:b3:15:82:98:b8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: May 18 18:26:25 2022 GMT
            Not After : May 17 18:31:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:37:55:5d:ab:8b:64:ba:10:de:26:5e:ca:
                    8a:39:cb:92:c2:ed:73:4c:59:05:71:64:87:9c:a9:
                    eb:7f:0d:ad:a4:98:2d:58:6f:b0:9e:d2:86:e4:66:
                    b8:c0:12:09:cb:52:2d:4d:9d:97:f1:11:d9:0f:19:
                    d2:1f:8f:22:93:c4:7b:76:b2:bd:95:5c:82:20:c5:
                    a3:19:30:b0:42:e9:a0:60:7d:f8:0b:83:c6:70:06:
                    4c:58:b3:99:ee:b7:90:34:50:9a:db:d6:cc:b6:e1:
                    4b:e0:6e:b6:5b:02:9f:87:ea:67:3d:c1:12:8c:36:
                    6e:22:fc:cb:58:3e:53:f1:76:c0:b9:a7:4e:f5:af:
                    fd:0e:6e:4b:2f:c0:c2:38:1f:40:22:e7:88:36:98:
                    ad:0a:14:45:2f:6a:c6:1b:a4:ab:81:cb:a7:4e:fa:
                    55:7c:00:9f:21:f6:81:f9:27:84:42:1b:f5:c5:d5:
                    42:0c:90:57:9b:99:17:52:b1:e0:74:3d:47:d7:fc:
                    ff:f6:18:94:8b:fa:d8:93:fb:f6:be:bf:20:cb:67:
                    8e:f0:bc:d9:b4:77:b4:00:1f:33:1a:fc:40:28:6f:
                    05:d2:5f:7a:46:83:a7:53:39:eb:50:66:bd:b4:97:
                    14:64:74:ef:97:38:62:f3:45:4a:b1:93:4e:90:52:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:11:6B:B8:E9:63:40:79:45:3A:92:78:59:4C:57:C4:D6:BD:E8:55
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:97:6a:dc:7b:1f:fc:1e:ec:dd:8c:fe:d6:70:a5:f5:eb:
         5f:be:a9:53:2a:6b:87:c7:a0:84:fe:a6:de:3d:89:5f:0f:42:
         c4:63:69:49:59:19:45:7e:9e:68:4e:22:f5:7c:5a:68:c6:91:
         2a:8a:32:64:bd:22:ad:77:26:9b:cd:30:0e:83:87:f9:5b:23:
         5f:c2:d2:ae:31:51:08:21:ac:a8:9f:be:b7:60:53:37:35:57:
         d7:69:82:44:7b:c7:cc:0c:f5:84:c7:94:1c:5a:b7:ac:7c:5e:
         3f:26:6e:be:55:96:b8:38:94:97:8c:9d:b4:cf:37:40:7e:81:
         9e:22:ac:cd:38:b0:f2:ce:25:64:fb:0e:96:13:a6:65:7b:61:
         92:fe:2f:ca:c4:7d:89:bd:90:46:a1:1c:a9:cd:7c:95:f9:dc:
         a8:28:c0:b9:48:08:08:31:5c:66:86:45:8d:2d:28:a9:8f:5a:
         89:d3:e5:a0:47:56:98:73:ef:76:40:d9:c7:62:56:8c:07:a6:
         4a:3f:2e:ff:53:71:94:fc:67:98:9f:5e:b7:93:dd:fc:53:8b:
         99:38:a9:2e:ca:57:e3:dd:9b:c8:e6:4e:22:e0:cf:6f:f6:bf:
         18:18:ad:72:42:98:97:3c:1f:70:18:48:fd:2a:55:f6:c3:88:
         1a:77:6d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----