Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238383a3a2f34372d3438203d3e20323039353537.roa
File:                     323630323a666564613a6238383a3a2f34372d3438203d3e20323039353537.roa (raw, json)
Hash identifier:          CEuwGX9Fyj1yVUxV9JrV+R67ziEqZ8dhHtKlg5lpt04=
Subject key identifier:   90:16:D8:D7:1F:3A:DC:97:30:08:BC:7B:D8:2C:2C:7A:FB:89:3C:18
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       533A981BFA975D8EDA435119E9504DC39D74D47F
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238383a3a2f34372d3438203d3e20323039353537.roa
Signing time:             Mon 28 Feb 2022 01:00:10 +0000
ROA not before:           Mon 28 Feb 2022 00:55:10 +0000
ROA not after:            Mon 27 Feb 2023 01:00:10 +0000
asID:                     209557
IP address blocks:        2602:feda:b88::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3a:98:1b:fa:97:5d:8e:da:43:51:19:e9:50:4d:c3:9d:74:d4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:10 2022 GMT
            Not After : Feb 27 01:00:10 2023 GMT
        Subject: CN=3082010A02820101009E5E50A9B5C403B8C04027DFC0F819558F38F2828010FDBB3EB7396C3D58158C60C1B4C31A4AF0D1F7207EAD867D7C4FC93A140FB196B4E98C67245DB828E7BFE14B19D79C73223B1355DCA2C0A9D4C8AE65A5DF86E06C4EB2A37A3A4BAC4C5E43C2148F6329BB0F5D6393786F12AE2875E42FF0BEFEEC599E76DAAAA4C65A84C3B0DD7BA201EA3BC6AF5977D846BA5DB1C8A7CB68307390B9BCD58DDFBBD3DC8721C0E499ACB8235D571E161A2DA92B20CB78EC95F0AF08CE7139AB394568111921405DF06335BDF11DA1B61B3A1198D876CA090D92198A82E531BE7DAE4C82C6D0B49302DF7262FA1A28038E45DEA1AA8111EF07A6A9851DB0595E0FF36BE30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:50:a9:b5:c4:03:b8:c0:40:27:df:c0:f8:
                    19:55:8f:38:f2:82:80:10:fd:bb:3e:b7:39:6c:3d:
                    58:15:8c:60:c1:b4:c3:1a:4a:f0:d1:f7:20:7e:ad:
                    86:7d:7c:4f:c9:3a:14:0f:b1:96:b4:e9:8c:67:24:
                    5d:b8:28:e7:bf:e1:4b:19:d7:9c:73:22:3b:13:55:
                    dc:a2:c0:a9:d4:c8:ae:65:a5:df:86:e0:6c:4e:b2:
                    a3:7a:3a:4b:ac:4c:5e:43:c2:14:8f:63:29:bb:0f:
                    5d:63:93:78:6f:12:ae:28:75:e4:2f:f0:be:fe:ec:
                    59:9e:76:da:aa:a4:c6:5a:84:c3:b0:dd:7b:a2:01:
                    ea:3b:c6:af:59:77:d8:46:ba:5d:b1:c8:a7:cb:68:
                    30:73:90:b9:bc:d5:8d:df:bb:d3:dc:87:21:c0:e4:
                    99:ac:b8:23:5d:57:1e:16:1a:2d:a9:2b:20:cb:78:
                    ec:95:f0:af:08:ce:71:39:ab:39:45:68:11:19:21:
                    40:5d:f0:63:35:bd:f1:1d:a1:b6:1b:3a:11:98:d8:
                    76:ca:09:0d:92:19:8a:82:e5:31:be:7d:ae:4c:82:
                    c6:d0:b4:93:02:df:72:62:fa:1a:28:03:8e:45:de:
                    a1:aa:81:11:ef:07:a6:a9:85:1d:b0:59:5e:0f:f3:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:16:D8:D7:1F:3A:DC:97:30:08:BC:7B:D8:2C:2C:7A:FB:89:3C:18
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6238383a3a2f34372d3438203d3e20323039353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b88::/47

    Signature Algorithm: sha256WithRSAEncryption
         89:df:be:cc:41:ec:5a:c7:e7:2a:ba:38:5b:19:b2:ba:ff:29:
         7c:a5:ad:fa:fc:b4:67:d7:39:7b:1d:34:d4:6f:ef:ee:d5:30:
         87:10:87:78:5c:f6:b4:3a:a6:2a:e6:03:2a:b7:ff:18:fa:9a:
         1c:8f:49:de:0d:bc:62:b5:ef:82:72:c8:10:a6:57:70:67:de:
         cf:6d:22:36:a1:fb:c8:57:4b:52:cf:51:63:5b:31:46:ef:9c:
         2d:f3:79:5c:e8:a0:f8:13:41:e5:dc:64:36:f7:c9:52:29:62:
         d9:99:26:92:4b:eb:9f:83:70:6c:8a:d2:ef:0a:69:85:6b:b5:
         81:10:fd:a6:85:17:15:28:d6:75:c7:6a:92:f0:24:09:ab:60:
         79:a2:2d:4f:94:c2:58:f9:0e:d8:b2:15:ee:94:62:b4:63:bc:
         e2:3b:0c:dd:45:17:07:40:46:ba:ab:02:2a:ef:f5:a3:cf:a9:
         ec:b8:71:d0:44:26:75:d8:44:56:ec:5d:c7:d3:82:0f:bc:e3:
         55:5e:4d:71:4f:ec:61:6f:ca:33:ca:98:25:5f:8e:df:83:69:
         80:0b:34:b5:8f:d6:89:e8:2e:14:ff:25:72:50:8d:99:01:0d:
         42:49:d8:26:38:88:1d:44:ab:ad:fb:4e:ff:65:64:9c:43:3e:
         8d:7f:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----