Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa
File:                     323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa (raw, json)
Hash identifier:          58KzV9WCnBkC7LVn2+KFbxKnFbgpGJWzHVTapEY0FYo=
Subject key identifier:   68:51:BB:7D:0A:46:DA:84:9E:EA:71:D5:21:E4:FB:0E:C8:9A:87:10
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       65C0D7D86902BBA9858E265A2494AE1EE4F37D81
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa
Signing time:             Mon 28 Feb 2022 01:00:12 +0000
ROA not before:           Mon 28 Feb 2022 00:55:12 +0000
ROA not after:            Mon 27 Feb 2023 01:00:12 +0000
asID:                     131477
IP address blocks:        2602:feda:af3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c0:d7:d8:69:02:bb:a9:85:8e:26:5a:24:94:ae:1e:e4:f3:7d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:12 2022 GMT
            Not After : Feb 27 01:00:12 2023 GMT
        Subject: CN=3082010A0282010100C3EB4CB4EA7B5C30B20A989DD66963F52FA455D7B40E671FD56DE5CE9D2837943C01679B5184FE8452416ACA71FD5E7D222D2D37D82D8C3D68AC7AC13E07EB803240BE9FF8B3BB381BBB60552C37B6DC85D8153C54419CF50AAE8DFBADD559BA20788BB2E999E737B32F31DD2E8E18A41D2BE04FA0C9367603BBBD31E47BAEC476B4D106492E49A8A4B60EDED5B5E31BDCED9FDC27E3EEF54A25A0C333FBB1E18AC10F57BFFDE3FC363E409D8BDC354C91C541D3F7545D3151F1ABBBE1244386FAEA14F7E3CC569A79723B8723B0DB1067CF795C49C1C24E3D37BCE8CE5941AB4EBE333380A222D489D6A278CBAAFDA21412E17364561E7D6194A46B72AC7F390203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:4c:b4:ea:7b:5c:30:b2:0a:98:9d:d6:69:
                    63:f5:2f:a4:55:d7:b4:0e:67:1f:d5:6d:e5:ce:9d:
                    28:37:94:3c:01:67:9b:51:84:fe:84:52:41:6a:ca:
                    71:fd:5e:7d:22:2d:2d:37:d8:2d:8c:3d:68:ac:7a:
                    c1:3e:07:eb:80:32:40:be:9f:f8:b3:bb:38:1b:bb:
                    60:55:2c:37:b6:dc:85:d8:15:3c:54:41:9c:f5:0a:
                    ae:8d:fb:ad:d5:59:ba:20:78:8b:b2:e9:99:e7:37:
                    b3:2f:31:dd:2e:8e:18:a4:1d:2b:e0:4f:a0:c9:36:
                    76:03:bb:bd:31:e4:7b:ae:c4:76:b4:d1:06:49:2e:
                    49:a8:a4:b6:0e:de:d5:b5:e3:1b:dc:ed:9f:dc:27:
                    e3:ee:f5:4a:25:a0:c3:33:fb:b1:e1:8a:c1:0f:57:
                    bf:fd:e3:fc:36:3e:40:9d:8b:dc:35:4c:91:c5:41:
                    d3:f7:54:5d:31:51:f1:ab:bb:e1:24:43:86:fa:ea:
                    14:f7:e3:cc:56:9a:79:72:3b:87:23:b0:db:10:67:
                    cf:79:5c:49:c1:c2:4e:3d:37:bc:e8:ce:59:41:ab:
                    4e:be:33:33:80:a2:22:d4:89:d6:a2:78:cb:aa:fd:
                    a2:14:12:e1:73:64:56:1e:7d:61:94:a4:6b:72:ac:
                    7f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:51:BB:7D:0A:46:DA:84:9E:EA:71:D5:21:E4:FB:0E:C8:9A:87:10
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:af3::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:10:5e:3c:a8:69:9c:65:0e:36:72:a8:de:e6:3d:be:c6:cc:
         82:ce:8c:3e:9c:22:9f:05:81:2c:17:07:4d:be:26:3a:7d:1d:
         ba:d5:cb:e0:a1:ff:46:14:81:ce:91:c1:f3:fd:ba:af:57:ea:
         42:a2:0e:16:73:ee:a4:e6:57:19:8c:79:fe:af:4c:9b:a3:a5:
         14:51:b4:18:00:40:89:14:60:87:74:96:cb:6f:9a:80:f6:0e:
         47:9d:35:17:88:ff:c0:6e:63:a4:9f:be:79:d6:76:79:a0:12:
         2b:34:ef:f1:19:f3:b7:7d:d7:87:08:cf:30:61:8b:38:6f:56:
         3a:20:df:a8:e7:8e:90:28:62:ae:66:88:a7:d3:72:8f:66:91:
         e3:28:6d:4e:29:95:ab:68:72:fd:68:11:6c:64:8d:07:49:4f:
         6f:90:15:20:fd:e9:c2:37:30:d9:d8:2b:d4:2b:4a:25:f8:95:
         7d:93:66:ea:16:28:6a:3c:4d:3d:ba:01:73:9b:b9:b6:31:d3:
         9b:f6:33:cf:3d:4e:8f:64:95:77:47:fe:36:9c:cb:e2:da:be:
         c3:9a:8e:de:57:31:82:f2:ae:37:d5:c0:21:51:f3:3b:01:11:
         b5:d4:e2:b3:9c:f8:35:16:5c:b9:df:33:e1:0c:ba:9c:a7:bd:
         61:9f:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----