Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa
File:                     323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa (raw, json)
Hash identifier:          BNQoJkYVHb9KBIZ2kZzlP+NKmwYGx8gvhq+eiHX6HP4=
Subject key identifier:   34:06:1A:37:5C:C5:54:77:98:82:BB:6E:3B:67:B8:FF:CE:15:E9:73
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       7ADF5CAA89108EE703902819CFB91FA2A249AD7D
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa
Signing time:             Mon 28 Feb 2022 01:00:06 +0000
ROA not before:           Mon 28 Feb 2022 00:55:06 +0000
ROA not after:            Mon 27 Feb 2023 01:00:06 +0000
asID:                     40916
IP address blocks:        2602:feda:3a0::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:df:5c:aa:89:10:8e:e7:03:90:28:19:cf:b9:1f:a2:a2:49:ad:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:06 2022 GMT
            Not After : Feb 27 01:00:06 2023 GMT
        Subject: CN=3082010A0282010100AC132D0BEBC98354F9CA0BB301645703C2AE45B62BA8EF5F037042810F4D821BAA294440DFF99C2B83340CAD27DA5F5B099BF6E15E2B833599B3060D7CD1B57A442593162CAF168E885EB388694271F4F3A4159F5BF00BBEE228E07C8F2CE316152C872975C9904C5C2F82922AC78EA2F14B5396C77F4516AF82D73F27B9C50F71477BB716ECB2E57DD15A963D53290F6CF68D0BB1220BB0014C2A907C558CA79308EB71345C7F70AF0652C1423CCF84A21DE02D22DCFC8D81D8C645E48DA6CAC5B7B25D9A3334271715EEF76017B1680CC5FB1664409FAECD036F100F242CD6BE2BB563D6B5BC9F57161C95E4170DAFDD34B8D74B17F1E3134B518402302CD10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:2d:0b:eb:c9:83:54:f9:ca:0b:b3:01:64:
                    57:03:c2:ae:45:b6:2b:a8:ef:5f:03:70:42:81:0f:
                    4d:82:1b:aa:29:44:40:df:f9:9c:2b:83:34:0c:ad:
                    27:da:5f:5b:09:9b:f6:e1:5e:2b:83:35:99:b3:06:
                    0d:7c:d1:b5:7a:44:25:93:16:2c:af:16:8e:88:5e:
                    b3:88:69:42:71:f4:f3:a4:15:9f:5b:f0:0b:be:e2:
                    28:e0:7c:8f:2c:e3:16:15:2c:87:29:75:c9:90:4c:
                    5c:2f:82:92:2a:c7:8e:a2:f1:4b:53:96:c7:7f:45:
                    16:af:82:d7:3f:27:b9:c5:0f:71:47:7b:b7:16:ec:
                    b2:e5:7d:d1:5a:96:3d:53:29:0f:6c:f6:8d:0b:b1:
                    22:0b:b0:01:4c:2a:90:7c:55:8c:a7:93:08:eb:71:
                    34:5c:7f:70:af:06:52:c1:42:3c:cf:84:a2:1d:e0:
                    2d:22:dc:fc:8d:81:d8:c6:45:e4:8d:a6:ca:c5:b7:
                    b2:5d:9a:33:34:27:17:15:ee:f7:60:17:b1:68:0c:
                    c5:fb:16:64:40:9f:ae:cd:03:6f:10:0f:24:2c:d6:
                    be:2b:b5:63:d6:b5:bc:9f:57:16:1c:95:e4:17:0d:
                    af:dd:34:b8:d7:4b:17:f1:e3:13:4b:51:84:02:30:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:1A:37:5C:C5:54:77:98:82:BB:6E:3B:67:B8:FF:CE:15:E9:73
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361303a3a2f34352d3438203d3e203430393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3a0::/45

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:cc:02:d9:31:14:c3:92:41:61:3b:91:02:b5:c8:40:63:
         0d:ac:21:ae:35:d1:bf:06:ee:4d:6a:c3:33:20:64:68:c9:c8:
         f6:82:44:d5:4a:ed:0c:eb:57:86:e4:af:26:15:ee:a8:b0:d4:
         28:40:e2:ed:f8:9f:a1:46:43:35:bd:c5:82:f4:2a:40:d7:c8:
         bb:67:10:bd:b8:5f:08:b0:19:c8:63:1b:a3:c0:45:12:9a:62:
         23:af:ba:a6:21:7c:ff:3f:68:6f:36:0c:c7:43:5e:d5:a1:5b:
         6d:0a:d1:69:ee:a5:1c:aa:07:4f:48:b9:43:07:1f:23:e3:f6:
         db:2f:58:c4:f9:87:92:cf:5d:7a:4d:38:c8:be:20:b1:12:9d:
         86:1d:ba:2d:f5:95:d9:25:e1:9b:92:44:5a:3e:21:67:76:11:
         37:4f:ad:75:a0:d6:79:47:3a:f1:e8:81:d5:28:c0:e5:06:ab:
         43:a9:b7:9e:0a:ca:c7:9a:6f:f6:49:93:92:09:e4:a7:3d:fb:
         2f:01:ba:84:10:b1:4a:07:fb:8d:6f:1b:54:20:23:0a:b8:1d:
         46:01:2a:b0:f4:0e:b4:33:f2:48:7f:2b:1e:54:c5:e5:3a:a3:
         80:30:4d:4d:60:79:c1:0f:e5:d4:fb:2f:63:74:dc:6f:35:f3:
         e0:c3:95:66
-----BEGIN CERTIFICATE-----
MIIG/jCCBeagAwIBAgIUet9cqokQjucDkCgZz7kfoqJJrX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwODM5OENBOTg4MzgyQzJBNTA5QkZEQjM5RTE0NkE3
NkNGOURFMDAeFw0yMjAyMjgwMDU1MDZaFw0yMzAyMjcwMTAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUMxMzJEMEJFQkM5ODM1NEY5
Q0EwQkIzMDE2NDU3MDNDMkFFNDVCNjJCQThFRjVGMDM3MDQyODEwRjREODIxQkFB
Mjk0NDQwREZGOTlDMkI4MzM0MENBRDI3REE1RjVCMDk5QkY2RTE1RTJCODMzNTk5
QjMwNjBEN0NEMUI1N0E0NDI1OTMxNjJDQUYxNjhFODg1RUIzODg2OTQyNzFGNEYz
QTQxNTlGNUJGMDBCQkVFMjI4RTA3QzhGMkNFMzE2MTUyQzg3Mjk3NUM5OTA0QzVD
MkY4MjkyMkFDNzhFQTJGMTRCNTM5NkM3N0Y0NTE2QUY4MkQ3M0YyN0I5QzUwRjcx
NDc3QkI3MTZFQ0IyRTU3REQxNUE5NjNENTMyOTBGNkNGNjhEMEJCMTIyMEJCMDAx
NEMyQTkwN0M1NThDQTc5MzA4RUI3MTM0NUM3RjcwQUYwNjUyQzE0MjNDQ0Y4NEEy
MURFMDJEMjJEQ0ZDOEQ4MUQ4QzY0NUU0OERBNkNBQzVCN0IyNUQ5QTMzMzQyNzE3
MTVFRUY3NjAxN0IxNjgwQ0M1RkIxNjY0NDA5RkFFQ0QwMzZGMTAwRjI0MkNENkJF
MkJCNTYzRDZCNUJDOUY1NzE2MUM5NUU0MTcwREFGREQzNEI4RDc0QjE3RjFFMzEz
NEI1MTg0MDIzMDJDRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArBMtC+vJg1T5yguzAWRXA8KuRbYrqO9fA3BCgQ9NghuqKURA3/mc
K4M0DK0n2l9bCZv24V4rgzWZswYNfNG1ekQlkxYsrxaOiF6ziGlCcfTzpBWfW/AL
vuIo4HyPLOMWFSyHKXXJkExcL4KSKseOovFLU5bHf0UWr4LXPye5xQ9xR3u3Fuyy
5X3RWpY9UykPbPaNC7EiC7ABTCqQfFWMp5MI63E0XH9wrwZSwUI8z4SiHeAtItz8
jYHYxkXkjabKxbeyXZozNCcXFe73YBexaAzF+xZkQJ+uzQNvEA8kLNa+K7Vj1rW8
n1cWHJXkFw2v3TS410sX8eMTS1GEAjAs0QIDAQABo4ICDDCCAggwHQYDVR0OBBYE
FDQGGjdcxVR3mIK7bjtnuP/OFelzMB8GA1UdIwQYMBaAFAEIOYypiDgsKlCb/bOe
FGp2z53gMA4GA1UdDwEB/wQEAwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzov
L3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTE0RTc1MDAwMC8wLzAx
MDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZDRjlERTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9y
ZXBvL05BVE9DQS8wLzAxMDgzOThDQTk4ODM4MkMyQTUwOUJGREIzOUUxNDZBNzZD
RjlERTAuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5j
Oi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxMTRFNzUwMDAwLzAv
MzIzNjMwMzIzYTY2NjU2NDYxM2EzMzYxMzAzYTNhMmYzNDM1MmQzNDM4MjAzZDNl
MjAzNDMwMzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL+2gOgMA0GCSqGSIb3DQEBCwUAA4IB
AQBcNswC2TEUw5JBYTuRArXIQGMNrCGuNdG/Bu5NasMzIGRoycj2gkTVSu0M61eG
5K8mFe6osNQoQOLt+J+hRkM1vcWC9CpA18i7ZxC9uF8IsBnIYxujwEUSmmIjr7qm
IXz/P2hvNgzHQ17VoVttCtFp7qUcqgdPSLlDBx8j4/bbL1jE+YeSz116TTjIviCx
Ep2GHbot9ZXZJeGbkkRaPiFndhE3T611oNZ5Rzrx6IHVKMDlBqtDqbeeCsrHmm/2
SZOSCeSnPfsvAbqEELFKB/uNbxtUICMKuB1GASqw9A60M/JIfyseVMXlOqOAME1N
YHnBD+XU+y9jdNxvNfPgw5Vm
-----END CERTIFICATE-----