Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3130353a3a2f34382d3438203d3e20333936333033.roa
File:                     323630323a666564613a3130353a3a2f34382d3438203d3e20333936333033.roa (raw, json)
Hash identifier:          Fr0iC6c749wZ8ssamAqe92o+03OxmETXrLY7JplQg/w=
Subject key identifier:   21:C8:61:B7:45:3C:79:20:7D:74:9D:69:60:70:A7:F5:FD:93:25:74
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       19B4442D0CC518C3C9A44F0DC38567FC1B00AE5F
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3130353a3a2f34382d3438203d3e20333936333033.roa
Signing time:             Mon 28 Feb 2022 01:00:04 +0000
ROA not before:           Mon 28 Feb 2022 00:55:04 +0000
ROA not after:            Mon 27 Feb 2023 01:00:04 +0000
asID:                     396303
IP address blocks:        2602:feda:105::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b4:44:2d:0c:c5:18:c3:c9:a4:4f:0d:c3:85:67:fc:1b:00:ae:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:04 2022 GMT
            Not After : Feb 27 01:00:04 2023 GMT
        Subject: CN=3082010A0282010100B67BF7BD2DADA8EE11D61F838936529C79046F222D81E73B1D83DFDD26A230161DCB773B5B3B45383CED7AB9020334170A772DC2C69B4BF74D8F4A4706B149238A7A0AC7353D356A4373018CF894E8483B37D5DC045D41B4C660300F85DD185A1F6833130510E636F0E06209ED4F5CC452D5E73340837D233278DA66847C85DA1581C507A684C857A8330593CA631C5AE25F5E0193233F6AB0D5EF1BA5D0DF4C347CB3BB2F99A07EBDD341B83FFED3E240A54A62334606216B1D8EF1D119D7B282588B612F8F44DABF639A979B8363323BDAE309C5FA8251837F4196CC9EE5078D0DDC40C303014F61630B4F3C862AD855759E8741472BCDD645953B9328D1E50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:f7:bd:2d:ad:a8:ee:11:d6:1f:83:89:36:
                    52:9c:79:04:6f:22:2d:81:e7:3b:1d:83:df:dd:26:
                    a2:30:16:1d:cb:77:3b:5b:3b:45:38:3c:ed:7a:b9:
                    02:03:34:17:0a:77:2d:c2:c6:9b:4b:f7:4d:8f:4a:
                    47:06:b1:49:23:8a:7a:0a:c7:35:3d:35:6a:43:73:
                    01:8c:f8:94:e8:48:3b:37:d5:dc:04:5d:41:b4:c6:
                    60:30:0f:85:dd:18:5a:1f:68:33:13:05:10:e6:36:
                    f0:e0:62:09:ed:4f:5c:c4:52:d5:e7:33:40:83:7d:
                    23:32:78:da:66:84:7c:85:da:15:81:c5:07:a6:84:
                    c8:57:a8:33:05:93:ca:63:1c:5a:e2:5f:5e:01:93:
                    23:3f:6a:b0:d5:ef:1b:a5:d0:df:4c:34:7c:b3:bb:
                    2f:99:a0:7e:bd:d3:41:b8:3f:fe:d3:e2:40:a5:4a:
                    62:33:46:06:21:6b:1d:8e:f1:d1:19:d7:b2:82:58:
                    8b:61:2f:8f:44:da:bf:63:9a:97:9b:83:63:32:3b:
                    da:e3:09:c5:fa:82:51:83:7f:41:96:cc:9e:e5:07:
                    8d:0d:dc:40:c3:03:01:4f:61:63:0b:4f:3c:86:2a:
                    d8:55:75:9e:87:41:47:2b:cd:d6:45:95:3b:93:28:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C8:61:B7:45:3C:79:20:7D:74:9D:69:60:70:A7:F5:FD:93:25:74
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3130353a3a2f34382d3438203d3e20333936333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:74:2c:56:c2:9b:eb:b7:ca:d6:91:30:c8:cf:0d:3f:20:7d:
         80:da:0e:3a:b6:97:ab:a4:06:0e:e3:40:3e:ee:08:bf:63:d0:
         d5:94:da:8d:24:11:b5:55:7e:f0:7b:64:8e:7a:f7:9d:91:a9:
         6d:6c:f9:a3:0a:b2:4a:c3:53:32:29:89:62:92:88:1b:13:8f:
         27:d6:84:2f:02:48:8d:d7:14:86:d5:c2:05:7b:4e:5a:13:28:
         1d:cd:d5:93:a9:58:94:c0:7e:78:72:94:29:af:dc:b6:ed:08:
         b0:88:53:81:c0:a8:1f:8b:2d:2a:77:3e:24:e0:d8:5e:a0:1d:
         27:c9:99:fd:45:31:61:73:00:10:1d:a9:3d:8d:36:63:f0:37:
         13:cc:24:b0:fd:fc:79:a6:f9:1f:32:76:99:d3:4a:a1:05:d1:
         8a:96:ed:75:0b:56:b6:ae:f2:57:c9:59:ec:43:9c:8c:0f:67:
         76:4a:ec:8d:2d:5c:dc:74:b7:96:bb:14:61:fa:ea:d9:46:d2:
         3b:19:fd:ac:c2:45:18:2f:e8:9a:38:1f:33:8b:eb:66:75:8b:
         aa:aa:8d:8c:b7:a1:55:3b:7b:e2:6d:22:fd:c0:fa:c0:a1:15:
         ef:2e:bd:09:e4:5e:30:68:cb:00:5b:92:bb:98:03:75:76:0a:
         6e:2f:64:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----