Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa
File:                     323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa (raw, json)
Hash identifier:          oHwJQoP/CmeJUUU7BoCgoah07muuuytTn9V49mZrFG0=
Subject key identifier:   A9:47:98:EA:43:B9:6D:EF:96:CF:C7:FF:3A:4E:3D:82:D3:E9:F3:2F
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       7CBC54305ADB4AF55F89F30366FDBB840FD14289
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa
Signing time:             Fri 19 Aug 2022 10:03:42 +0000
ROA not before:           Fri 19 Aug 2022 09:58:42 +0000
ROA not after:            Fri 18 Aug 2023 10:03:42 +0000
asID:                     142634
IP address blocks:        2602:feda:ab0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bc:54:30:5a:db:4a:f5:5f:89:f3:03:66:fd:bb:84:0f:d1:42:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Aug 19 09:58:42 2022 GMT
            Not After : Aug 18 10:03:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:60:5a:f3:82:df:c2:48:71:fb:70:40:02:
                    38:20:c0:fa:ad:ea:b2:42:3c:d3:5c:6c:6a:12:14:
                    f1:2e:a7:d1:ec:e9:9e:ef:8e:15:d8:0d:10:67:a8:
                    98:62:3a:e9:88:07:95:4b:d0:a5:cf:b0:a2:ee:4d:
                    f4:f7:ee:84:57:3b:e7:7b:db:a9:6d:a6:15:2a:1a:
                    54:cf:4f:af:09:98:8d:ac:59:82:ec:89:9a:25:1a:
                    c7:3a:1b:2a:f5:41:51:62:8d:52:0f:fb:bf:2b:59:
                    74:03:da:ff:b3:26:f8:34:ed:09:dd:7c:19:7f:9d:
                    02:a8:4f:f5:d2:eb:43:17:90:37:4f:81:b4:93:81:
                    36:9c:bf:87:3a:57:3e:89:2d:96:91:2c:c0:05:81:
                    97:42:98:8a:38:20:d6:3c:7b:bf:a1:87:87:e4:a0:
                    f1:06:13:7a:e5:e5:31:3f:0e:3c:c6:ff:2d:9f:85:
                    5c:df:c4:67:60:9f:01:d7:60:a5:29:10:b6:dc:9a:
                    8f:17:4b:19:0f:4b:0f:3d:ec:35:ab:11:3a:34:95:
                    73:b0:03:05:e8:b4:2a:b4:97:8c:10:53:09:c3:a7:
                    b4:3b:a7:9b:f3:b1:a4:13:c1:c2:5e:75:a1:47:ef:
                    d1:09:f8:5c:b7:12:16:47:c1:ce:8b:9f:a1:74:ae:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:47:98:EA:43:B9:6D:EF:96:CF:C7:FF:3A:4E:3D:82:D3:E9:F3:2F
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:bd:0a:56:8e:1e:33:3c:a5:d4:74:9c:70:c9:6e:f1:70:
         95:df:91:13:60:dd:fa:75:92:68:fb:66:a0:20:fb:16:dd:c6:
         21:1b:34:b3:71:d3:15:c9:8a:8d:80:78:43:2a:d7:3f:46:5b:
         13:78:2e:d7:81:43:4c:a5:93:40:33:74:bd:9e:15:45:2b:f9:
         6b:12:7c:1e:c7:b0:c6:55:8b:82:4a:14:27:94:6c:f5:e9:36:
         5d:39:40:12:64:a4:7e:5e:1f:98:18:17:46:e3:62:6e:ad:67:
         d0:84:a3:6d:90:c2:b4:2c:a2:f0:18:d6:99:a7:01:32:7e:0c:
         5b:44:db:00:75:15:3c:4f:6d:cd:e1:9d:5d:51:6c:b7:2e:9b:
         1b:a2:a1:b1:54:38:d9:20:bb:d8:19:50:c0:6b:ce:e0:5d:f0:
         5e:31:84:46:0b:7e:03:9b:df:a6:2f:c7:7b:a5:23:e7:4b:bb:
         e3:0b:0c:1b:b0:9e:77:ef:e3:6a:69:ad:c3:4a:b9:62:a8:f7:
         d0:f7:c2:6f:dc:10:4b:de:aa:d4:df:21:f7:bc:d1:c7:3d:17:
         7e:73:7c:06:62:e7:0f:cd:f9:da:67:77:df:63:26:94:ff:ab:
         2a:c8:2d:ea:e8:33:86:97:99:49:a8:8e:ae:8c:02:0b:62:fa:
         82:43:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----