Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa
File:                     323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa (raw, json)
Hash identifier:          LeL49zPh/ndJ/Gw6CykcxD6rawcnv5/cGRWr9QD4G+w=
Subject key identifier:   DB:2D:D6:A4:6C:CF:27:2F:2F:F6:77:96:B2:F0:FA:63:15:C3:35:C2
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       4EFCA5F7AAF6BF48BF9A3E8A96DC25C29803303B
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa
Signing time:             Mon 28 Feb 2022 01:00:07 +0000
ROA not before:           Mon 28 Feb 2022 00:55:07 +0000
ROA not after:            Mon 27 Feb 2023 01:00:07 +0000
asID:                     140727
IP address blocks:        2602:feda:afa::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fc:a5:f7:aa:f6:bf:48:bf:9a:3e:8a:96:dc:25:c2:98:03:30:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:07 2022 GMT
            Not After : Feb 27 01:00:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:1d:6c:63:f5:92:4c:81:e7:92:08:64:bd:
                    de:5b:b6:70:96:ad:78:7f:c7:c0:97:90:c2:0e:0c:
                    ba:bf:59:5d:91:3c:69:31:6a:0c:f5:35:62:7a:f5:
                    fa:32:65:76:25:34:bc:3d:bc:02:10:74:36:05:97:
                    13:58:25:f9:68:0a:84:00:55:53:55:93:a8:9c:95:
                    5b:5d:d7:ab:58:6e:cf:8d:9b:af:a8:e8:62:9f:2b:
                    d2:d4:8b:2d:7b:ee:98:2d:5f:b8:6b:6b:9d:1c:90:
                    b2:f5:32:66:35:f9:9d:4b:f5:ee:6d:9d:06:f4:55:
                    43:b6:fe:90:6b:3c:a7:3f:61:50:ce:69:b6:61:a2:
                    27:a8:8a:b5:e4:56:1a:3f:26:a9:7d:04:ad:54:33:
                    07:80:e8:37:d9:90:94:e5:f7:49:a0:f8:33:e0:70:
                    82:97:6b:c0:d8:0e:1f:c4:90:67:65:c1:1c:e6:df:
                    9b:64:a8:9e:fd:b1:c9:dd:3c:e3:74:3f:d4:2b:95:
                    d8:73:b6:7c:bd:81:07:64:c3:27:63:e8:3a:ce:2c:
                    08:76:b5:92:5f:bc:7a:e6:de:c0:de:d3:6c:db:b9:
                    83:c3:9b:07:35:ad:71:da:08:a6:75:56:ad:fa:4f:
                    2e:7b:70:40:77:27:33:1e:00:76:a7:f3:4c:dc:f7:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2D:D6:A4:6C:CF:27:2F:2F:F6:77:96:B2:F0:FA:63:15:C3:35:C2
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:afa::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:81:de:fc:c6:d1:d6:83:34:40:b2:0f:fa:a0:22:39:c9:
         f1:43:e3:44:81:3a:b5:10:ac:6f:4d:6b:a9:f9:bb:43:b8:93:
         7b:b0:18:50:15:6c:18:e3:98:d2:0a:a5:26:ef:3b:b9:bb:2d:
         0a:1b:35:5b:ed:c2:66:95:95:ab:a5:83:10:0d:a0:63:59:fd:
         2a:ee:d5:d4:d8:a9:a4:04:46:32:72:07:e7:90:d5:a0:56:63:
         a9:35:c9:11:91:ee:2c:82:f0:0c:11:56:05:04:5c:57:64:ec:
         ad:bc:15:9d:f0:31:0e:c9:26:e4:c1:e8:b0:89:4f:63:f1:df:
         73:bd:c8:09:76:ad:ab:e8:5d:98:e2:1a:c2:fe:77:92:10:da:
         7a:a4:bf:74:1c:9a:d7:4d:c6:5d:f9:97:7e:26:f9:c0:b5:04:
         f2:b6:81:8d:4d:e8:62:5c:45:06:38:96:1e:76:32:a2:ff:4f:
         03:90:19:42:86:2f:58:e5:50:92:56:a5:b6:5a:ac:3a:39:94:
         1c:bc:c5:e9:54:69:d1:a7:7b:94:68:86:59:8d:3e:b3:53:8f:
         58:a1:b3:c9:0f:95:81:b1:b4:19:21:00:b3:8e:f0:18:d9:09:
         17:c5:55:3a:5f:02:07:d2:ca:73:df:11:13:a8:15:9a:1d:7f:
         c4:f6:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----