Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa
File:                     323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa (raw, json)
Hash identifier:          QcwB9jGlw+QLA3cTNYdU1P0L6NbjqiPkGs1Y2zMq/wQ=
Subject key identifier:   13:6A:10:6B:45:C0:95:28:A2:47:18:34:91:67:F5:A3:6A:62:25:43
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       74CA32F4B52813BB07B1FB202431B93BA7B0AED2
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa
Signing time:             Sun 03 Jul 2022 04:17:17 +0000
ROA not before:           Sun 03 Jul 2022 04:12:17 +0000
ROA not after:            Sun 02 Jul 2023 04:17:17 +0000
asID:                     46997
IP address blocks:        2602:feda:38::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ca:32:f4:b5:28:13:bb:07:b1:fb:20:24:31:b9:3b:a7:b0:ae:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Jul  3 04:12:17 2022 GMT
            Not After : Jul  2 04:17:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f3:64:cc:80:b4:93:40:61:9d:93:49:8c:50:
                    2e:52:2c:55:c2:90:60:e9:b5:f9:10:be:8b:75:d1:
                    58:d2:ab:8b:89:de:05:a9:76:35:a3:62:90:7c:13:
                    8f:af:52:6c:e8:8c:6c:e2:e5:6c:57:56:86:00:18:
                    c7:ec:c4:b8:7b:fb:41:d2:e8:73:11:62:30:54:00:
                    9c:0e:b5:0b:dc:34:a9:90:c5:42:1c:87:e8:48:f0:
                    4e:56:d9:fe:48:01:51:23:11:ca:07:01:cf:ae:67:
                    f7:ce:6a:f0:d9:b2:b6:b3:65:fc:c6:10:90:f2:58:
                    ec:80:84:bd:ee:20:97:04:83:c8:c0:3d:ef:2c:dc:
                    5e:36:74:a9:0e:22:13:7a:b3:82:1a:e4:75:36:1a:
                    d9:5e:84:59:22:16:a1:21:b8:89:d7:cf:3d:93:be:
                    f7:a1:97:d1:50:ec:49:dd:92:f6:e7:5c:bb:91:d2:
                    d0:be:75:bf:88:a5:c5:dd:5d:ba:5c:e5:bc:9e:11:
                    43:30:c0:76:78:ef:2f:32:a1:92:26:a8:d6:30:19:
                    04:a6:de:1f:a8:1e:05:92:9a:ae:e8:9c:f8:46:a8:
                    2e:d0:23:79:0e:57:d2:d7:e7:e1:ca:2b:9c:28:c1:
                    d3:21:c0:0d:1f:e9:d1:50:5a:d5:c3:0a:10:eb:bc:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6A:10:6B:45:C0:95:28:A2:47:18:34:91:67:F5:A3:6A:62:25:43
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:38::/45

    Signature Algorithm: sha256WithRSAEncryption
         a5:8f:8f:a5:93:c3:fc:87:81:f3:c0:f8:4d:4c:f1:62:12:e3:
         2f:b0:ec:c2:8c:69:8d:21:a8:16:9f:64:d2:01:65:f0:93:bc:
         9a:4f:84:f1:d1:db:c4:d9:df:71:ed:da:e3:d1:17:8e:d1:cf:
         75:f5:d3:99:0c:a4:71:2d:6f:bd:49:4c:2e:fd:be:0f:27:23:
         05:e4:fe:69:8c:33:22:d4:6a:61:45:ac:f4:ec:5c:d0:a3:af:
         85:8e:7a:fb:40:69:46:bc:e7:37:2e:e2:e1:e4:2f:f1:04:f2:
         b9:9c:66:1d:26:14:fd:9e:ea:17:93:4c:d8:59:d8:d1:d9:72:
         ed:79:5d:f2:82:63:79:ee:db:a3:37:9b:0d:60:fd:65:57:c8:
         4e:de:08:b5:9c:55:8f:c4:b0:e7:82:88:bb:da:56:ee:7d:35:
         df:7c:39:79:78:57:4a:20:7f:c9:ff:d6:d5:b5:20:b2:a5:11:
         91:3a:a9:8b:dc:99:8a:3f:f0:a6:7e:29:e7:99:e4:3f:3c:15:
         e2:c3:96:7a:e2:87:4f:4b:69:c5:7a:f1:70:20:ea:b6:14:ac:
         17:4f:6e:71:f5:1d:4a:41:41:f5:64:13:20:af:3f:53:75:eb:
         2d:d0:7a:30:3c:32:12:f6:b8:95:71:93:4d:ad:88:8e:12:26:
         25:9a:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----