Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e2038303735.roa
File:                     32332e3234372e3133362e302f32322d3234203d3e2038303735.roa (raw, json)
Hash identifier:          aErskoFy/Td6aMFAZe6+vuGsg3d85tPKSEIcbSr8LEA=
Subject key identifier:   5F:C7:B6:05:D2:81:FA:02:5C:24:77:30:7D:14:15:03:55:00:77:F6
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       20681B902B002D2834F69B3A5170A4EF43EECAEE
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e2038303735.roa
Signing time:             Sun 22 May 2022 03:15:19 +0000
ROA not before:           Sun 22 May 2022 03:10:19 +0000
ROA not after:            Sun 21 May 2023 03:15:19 +0000
asID:                     8075
IP address blocks:        23.247.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:68:1b:90:2b:00:2d:28:34:f6:9b:3a:51:70:a4:ef:43:ee:ca:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: May 22 03:10:19 2022 GMT
            Not After : May 21 03:15:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:8b:3d:69:5d:f5:f6:cf:de:1a:b0:14:62:
                    11:73:b0:82:72:ab:f6:f4:4b:1c:3e:21:22:44:db:
                    d6:a9:be:0d:0f:06:c9:5a:8c:ef:7d:3f:0f:6e:95:
                    7b:f7:9f:02:11:a8:da:a8:3b:9a:d7:a7:32:f7:f5:
                    ec:b4:df:71:fb:c8:43:ff:80:24:11:e6:85:df:de:
                    25:a8:89:f2:a4:f1:78:19:97:79:b3:55:d0:2d:b1:
                    29:93:07:01:a1:2d:d4:c3:66:37:a5:04:91:b6:6d:
                    a8:5f:e8:99:74:bd:9a:72:72:f8:2a:50:03:1d:40:
                    d6:a3:f6:6a:5d:4d:4e:f7:ee:0c:88:c4:a1:0e:44:
                    ae:24:d0:d1:6f:1a:d8:8b:06:cb:0a:fd:2e:c9:1f:
                    df:ee:6f:a9:dd:20:00:9b:65:ff:51:70:3e:f6:b4:
                    69:9a:f1:69:bb:cd:ec:c2:3b:74:a8:16:a0:f8:21:
                    fb:1e:cc:3d:6a:6f:17:ca:3c:d8:67:68:b8:28:6b:
                    87:56:2a:17:e6:17:ee:0e:49:df:e5:6c:a6:ca:d7:
                    4b:36:4c:25:fa:a1:da:42:3e:45:6e:bc:f2:77:18:
                    09:04:54:ab:7e:d1:95:26:c1:ae:8f:50:34:ab:e3:
                    04:91:8d:65:9b:1e:13:26:64:7f:e8:50:7f:f1:d2:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C7:B6:05:D2:81:FA:02:5C:24:77:30:7D:14:15:03:55:00:77:F6
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/32332e3234372e3133362e302f32322d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:16:e1:0f:5e:9b:1d:85:fd:0f:13:6e:23:de:6b:0e:62:
         32:d3:5d:4b:8b:cd:57:f8:43:4e:07:2a:78:b0:da:2e:46:bd:
         24:cd:96:bb:6f:63:3f:4d:bd:35:a2:8a:7d:ec:56:bd:01:16:
         9a:a3:a3:5a:6a:85:36:27:f7:ad:b2:1b:2c:ca:ce:f0:27:f7:
         2a:45:42:a2:91:83:76:54:07:ff:b3:e4:c8:01:b4:87:6f:68:
         ad:ff:98:10:ee:02:d5:e5:e1:ab:e9:37:7e:b9:a7:b0:a5:e0:
         f9:65:a5:72:f6:b9:55:cd:9b:58:bd:e9:7c:24:4f:41:30:83:
         5a:60:28:c0:7d:dc:a7:ad:49:8a:11:fc:22:f0:79:ef:86:67:
         62:9e:a4:6c:76:78:6d:c0:23:65:67:85:45:83:77:27:b8:cf:
         eb:c7:39:7f:2a:bf:11:30:2a:a5:0f:6c:3c:2f:90:a0:73:a1:
         5a:b5:4e:67:81:8d:e9:5c:52:40:b9:37:46:63:ba:53:c2:13:
         ef:04:a9:df:31:97:4c:8b:de:4b:75:7c:44:2f:3a:aa:f2:4e:
         bd:a8:ef:a8:59:18:87:84:e1:ee:85:b5:6e:75:53:01:af:fd:
         cb:cd:b2:28:ef:d4:ee:63:4a:b3:af:e2:92:1c:cb:e5:56:4d:
         b6:e9:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----