Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa
File:                     323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier:          PuKfR5WoM1/IvuVapuTDNGTIIL0ueHMnNLxVasSZJBc=
Subject key identifier:   E3:79:D4:E1:42:20:D0:99:4C:8A:C1:D4:FA:61:D9:10:83:B2:04:20
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       4800623D97EA25B22F60B00D33EAACE7119A058A
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa
Signing time:             Mon 28 Feb 2022 01:00:10 +0000
ROA not before:           Mon 28 Feb 2022 00:55:10 +0000
ROA not after:            Mon 27 Feb 2023 01:00:10 +0000
asID:                     46997
IP address blocks:        2602:feda:ae5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:00:62:3d:97:ea:25:b2:2f:60:b0:0d:33:ea:ac:e7:11:9a:05:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:10 2022 GMT
            Not After : Feb 27 01:00:10 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c1:c9:e8:6c:a0:db:aa:5c:ce:3f:1d:13:ea:
                    47:76:70:88:b1:9e:9b:83:7a:de:36:08:8c:23:0a:
                    04:07:01:b2:f5:1e:38:2a:2c:30:b9:57:4a:e4:49:
                    57:a5:3b:ca:a8:79:91:fd:2d:ea:87:38:55:c6:a8:
                    c1:39:37:7a:65:45:00:99:9c:62:85:1a:c3:0e:04:
                    fd:8d:d6:f3:a6:5a:64:df:a7:3d:56:bf:be:84:65:
                    cb:be:b1:10:91:f0:25:63:6b:2f:d9:c7:0f:2b:ac:
                    4e:e4:e9:49:f2:4d:bd:66:4b:1b:2a:9c:c7:7b:29:
                    28:a3:60:8a:34:8a:32:49:c4:2c:a4:b0:1a:8c:53:
                    4e:2d:64:26:50:8b:2a:76:56:1f:51:2c:af:7c:94:
                    dc:d6:53:2f:84:82:ea:ac:2b:f5:22:15:c4:55:48:
                    ef:15:08:05:b5:16:04:5f:b7:7d:67:74:0a:56:01:
                    c9:05:f0:e0:91:42:93:d7:08:be:09:5f:e8:ee:b3:
                    97:fb:06:2d:0d:b2:1d:bc:44:bc:65:a5:0f:33:7d:
                    ec:b7:30:15:ac:31:0a:01:34:57:16:44:a3:cd:de:
                    7e:0a:a7:20:dc:df:d7:59:bc:62:82:ee:81:ab:5a:
                    49:fb:5e:f0:af:c1:44:82:84:60:73:93:7d:2d:9d:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:79:D4:E1:42:20:D0:99:4C:8A:C1:D4:FA:61:D9:10:83:B2:04:20
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6165353a3a2f34382d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae5::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:15:42:69:2c:42:fa:4d:72:cf:29:96:d9:46:73:42:b7:c6:
         a4:e7:20:e2:e6:78:c3:66:1c:82:d8:ab:26:01:ae:6e:aa:90:
         95:2e:ba:73:58:15:a9:05:71:41:7b:24:40:d0:18:cb:93:d5:
         bf:bb:93:d2:ab:36:10:92:2d:88:a9:5a:a9:e8:85:e5:9d:50:
         da:3a:6e:37:73:d6:ce:45:7b:3c:7b:1d:02:3b:aa:60:d5:0d:
         d9:40:58:d0:41:5a:ae:05:11:d4:d4:7b:f1:46:16:ab:f9:86:
         17:74:2d:99:a6:75:02:ba:55:d1:b3:0b:ed:fe:b7:5c:ff:a8:
         67:85:0f:14:08:fd:34:7a:40:42:78:9f:15:c2:c8:e9:9f:71:
         0a:a3:02:c5:06:4e:b0:f9:c5:92:62:a1:82:de:8b:b3:52:8e:
         fd:c6:11:a9:3b:bd:e1:7b:5d:f2:1a:0d:a1:4a:d6:81:df:5e:
         ea:5f:10:e6:98:58:0f:f4:cb:a9:25:0c:2f:66:d0:1f:1a:43:
         dc:4a:ca:3e:69:86:25:6b:dc:49:11:5d:c5:e0:71:3a:88:0e:
         4a:4b:a6:70:71:e3:20:d9:1f:49:6e:35:bc:40:1c:87:a3:23:
         79:3a:da:34:ad:7b:7d:87:83:96:7a:8c:30:8e:21:8c:f4:35:
         bb:2a:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----