Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa
File:                     323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa (raw, json)
Hash identifier:          k5PL/wE1P+uwxu6SWYbHYinNPOEZBEL5JQUmJPjrKRo=
Subject key identifier:   F0:55:2F:58:B4:82:F7:84:9E:B6:49:56:29:6C:AA:55:20:1C:CD:DE
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       63D94AB4902EC7135B10476ABD3205156EBCD111
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa
Signing time:             Sat 19 Mar 2022 06:00:00 +0000
ROA not before:           Sat 19 Mar 2022 05:55:00 +0000
ROA not after:            Sat 18 Mar 2023 06:00:00 +0000
asID:                     137256
IP address blocks:        2602:feda:3a8::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d9:4a:b4:90:2e:c7:13:5b:10:47:6a:bd:32:05:15:6e:bc:d1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Mar 19 05:55:00 2022 GMT
            Not After : Mar 18 06:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:96:e9:35:31:13:64:9c:5a:d8:95:b6:07:23:
                    0f:04:8c:9c:2d:36:82:37:0e:b8:98:c8:54:ed:f4:
                    03:75:21:46:47:2e:76:cf:e7:75:be:65:63:06:23:
                    40:27:af:fb:96:5a:40:8e:c0:3f:6f:27:7d:3e:97:
                    57:eb:9e:f0:53:e9:cc:74:73:95:e2:8d:74:0a:e4:
                    70:1c:45:9c:b2:41:6c:27:85:d4:0b:9e:ec:c7:1e:
                    80:ec:e9:bd:bc:33:29:ac:ae:d9:6b:29:73:9e:4b:
                    53:aa:99:2d:2e:e9:a6:73:6a:b8:d3:ed:6a:e0:82:
                    d4:a3:a8:0e:46:b7:dd:d6:88:f4:9b:b7:ac:75:85:
                    92:de:90:64:37:7d:ca:d3:71:a1:b3:40:63:cd:a1:
                    8c:0b:da:72:76:4a:07:e2:26:e7:8f:4c:7d:19:df:
                    be:fa:19:7a:68:50:a0:ea:08:4d:7e:03:55:6e:98:
                    1d:52:e4:b0:67:16:16:8c:0b:42:98:6b:66:06:b0:
                    42:d8:0d:be:06:f6:48:82:af:7b:a2:9b:ad:ce:47:
                    42:fd:bd:86:41:b9:29:3c:1b:53:b0:49:a5:c0:48:
                    45:9b:6a:27:f9:77:fb:03:1f:d1:0c:92:c6:1a:48:
                    dd:80:03:b9:a5:14:e5:2f:7f:11:10:87:fc:a7:4d:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:2F:58:B4:82:F7:84:9E:B6:49:56:29:6C:AA:55:20:1C:CD:DE
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         86:a9:33:69:5b:e7:c4:ad:b2:aa:ff:e1:fa:e9:18:b7:8f:af:
         f4:4b:81:6d:2b:0f:d0:b1:34:9e:89:d7:78:43:8f:ca:47:90:
         51:6e:44:ba:de:67:29:f4:5b:6d:56:23:b5:82:df:17:7a:87:
         fd:62:d1:3e:69:59:14:57:5c:57:51:76:0b:d5:4a:a6:8d:f3:
         3e:c1:bc:cb:98:20:66:d0:87:f7:9d:06:e4:0b:c4:9f:fa:6e:
         9b:72:6e:cb:b6:59:6e:45:32:d5:0e:d0:6e:9c:bf:04:f3:1f:
         fc:51:0f:30:99:1b:9f:2a:30:8f:43:d8:a5:74:06:35:63:29:
         8b:98:58:9b:77:e6:4f:48:68:68:d3:b3:23:45:a8:3c:b7:07:
         23:77:e8:4c:4a:b8:06:d1:5c:8a:fc:5c:40:e1:4c:e4:13:71:
         d9:cc:b1:67:58:88:e5:52:a2:75:40:1d:86:64:ce:39:a2:cc:
         1b:b1:e3:d3:f0:ce:d7:cf:86:de:4d:a5:6c:2b:de:2d:8a:5d:
         0b:1f:b6:37:96:51:1e:18:de:40:83:ae:76:3d:97:55:aa:2b:
         96:ea:aa:f1:80:78:f9:eb:42:c2:b3:49:e8:a0:1b:e1:c6:d6:
         39:db:32:8c:57:67:77:42:96:de:1d:2f:37:ba:30:ff:48:e7:
         a3:bf:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----