Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa
File:                     323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa (raw, json)
Hash identifier:          SV0rUcuW70GAoo9VzQL9lcnr/O0+uFGYNcUHoC44VBo=
Subject key identifier:   2D:A1:7D:3C:7A:28:FA:90:56:EA:7B:79:AE:AB:40:42:F7:4E:95:DA
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       3394CFF8DFF531C113BCFA8F0F27C9F41D86A15E
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa
Signing time:             Mon 28 Feb 2022 01:00:10 +0000
ROA not before:           Mon 28 Feb 2022 00:55:10 +0000
ROA not after:            Mon 27 Feb 2023 01:00:10 +0000
asID:                     140913
IP address blocks:        2602:feda:3a8::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:94:cf:f8:df:f5:31:c1:13:bc:fa:8f:0f:27:c9:f4:1d:86:a1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:10 2022 GMT
            Not After : Feb 27 01:00:10 2023 GMT
        Subject: CN=3082010A0282010100D90601C9472BF3E416F33800DFB5003E529DEB12C49D2B21149564485B7E43E17B1DDA8D53476512C168D10493178D350EF668B90949DBF3986685A3BEE9547E8415CB0A20A0D158E732B3811479DED640C2E4B16C815D981CBEC81DB28913E1634A4733BFBC54A4258227B821FE568D11FDD3E6CE1B63FD1E33799374B48DE06EF80FB272C4D53C0F2657E532495206BD93A0F990B77EB69DDC3320363F7E6C64D62C848C3A1DE06D1C786F1E795927210DEBF2B30DC874F866C95B01F876B71658769C3BDD25D846C038F480A325FA54882F17B48EA1884BB0147389AB23F4732B001EFC80E6AB14BFCF9400D4AD76B41CACDF4317D97EAF8CF436573E41190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:01:c9:47:2b:f3:e4:16:f3:38:00:df:b5:
                    00:3e:52:9d:eb:12:c4:9d:2b:21:14:95:64:48:5b:
                    7e:43:e1:7b:1d:da:8d:53:47:65:12:c1:68:d1:04:
                    93:17:8d:35:0e:f6:68:b9:09:49:db:f3:98:66:85:
                    a3:be:e9:54:7e:84:15:cb:0a:20:a0:d1:58:e7:32:
                    b3:81:14:79:de:d6:40:c2:e4:b1:6c:81:5d:98:1c:
                    be:c8:1d:b2:89:13:e1:63:4a:47:33:bf:bc:54:a4:
                    25:82:27:b8:21:fe:56:8d:11:fd:d3:e6:ce:1b:63:
                    fd:1e:33:79:93:74:b4:8d:e0:6e:f8:0f:b2:72:c4:
                    d5:3c:0f:26:57:e5:32:49:52:06:bd:93:a0:f9:90:
                    b7:7e:b6:9d:dc:33:20:36:3f:7e:6c:64:d6:2c:84:
                    8c:3a:1d:e0:6d:1c:78:6f:1e:79:59:27:21:0d:eb:
                    f2:b3:0d:c8:74:f8:66:c9:5b:01:f8:76:b7:16:58:
                    76:9c:3b:dd:25:d8:46:c0:38:f4:80:a3:25:fa:54:
                    88:2f:17:b4:8e:a1:88:4b:b0:14:73:89:ab:23:f4:
                    73:2b:00:1e:fc:80:e6:ab:14:bf:cf:94:00:d4:ad:
                    76:b4:1c:ac:df:43:17:d9:7e:af:8c:f4:36:57:3e:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A1:7D:3C:7A:28:FA:90:56:EA:7B:79:AE:AB:40:42:F7:4E:95:DA
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         a3:50:be:b0:f8:74:cb:cf:dc:9f:b0:b4:5c:e5:49:a3:d0:7e:
         b3:60:31:1d:f8:6c:4c:b6:ca:3a:83:c8:97:d6:b7:71:ab:9a:
         a8:28:7b:7d:87:ba:38:02:25:a1:ac:4d:43:b5:9e:c8:cc:8f:
         eb:35:43:a0:04:73:65:f9:86:a5:0b:bf:97:00:e2:ea:96:b0:
         56:1f:98:a0:f4:c0:a3:2f:40:1e:ad:25:bd:65:0a:cb:fe:7e:
         aa:29:ba:7f:41:14:7d:74:56:ac:77:1f:1c:b8:fe:66:bc:ea:
         97:46:9e:d0:8a:27:cb:a8:cb:68:22:9e:7d:6b:99:c7:07:af:
         38:aa:f0:66:b4:8e:98:6d:08:de:49:cd:2c:7d:d5:8d:3e:ca:
         42:fa:ae:b3:e5:96:a6:b1:d9:ad:00:0c:55:b2:7d:9f:dc:4a:
         ea:2e:72:e2:d8:e2:33:06:fe:52:d3:5e:42:60:0a:5b:0e:bb:
         fe:b1:85:42:4d:f1:c7:8f:5c:f7:4b:43:5d:aa:87:0a:7b:2d:
         70:a4:bd:e8:56:22:92:a6:5b:4b:ea:20:18:b0:eb:76:a2:5a:
         b5:2e:b6:3c:1e:5d:ae:9c:71:c4:49:e0:66:42:1b:ac:2e:d2:
         ce:55:4e:c3:f6:90:52:28:69:28:83:9a:7e:c0:6c:a6:87:4e:
         d9:cf:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----