Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa
File:                     323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa (raw, json)
Hash identifier:          xtAgDoXZdmgSXkUVfD5+s6TsZMFzBT2D0o2axPThhi4=
Subject key identifier:   0A:FF:48:BC:2A:43:97:79:3F:21:F7:11:44:85:DA:47:C2:B3:3F:A6
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       7F31DE683D0E9D78D62246B6E77384B3D9405C5E
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa
Signing time:             Mon 28 Feb 2022 01:00:07 +0000
ROA not before:           Mon 28 Feb 2022 00:55:07 +0000
ROA not after:            Mon 27 Feb 2023 01:00:07 +0000
asID:                     135395
IP address blocks:        2602:feda:ba0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:31:de:68:3d:0e:9d:78:d6:22:46:b6:e7:73:84:b3:d9:40:5c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:07 2022 GMT
            Not After : Feb 27 01:00:07 2023 GMT
        Subject: CN=3082010A0282010100B32795BE9A22D4E3F285B4F626C751EC3335F6E842435B82BA795D59960C608CF9478950F22DF83D95889CA068F0D18B697DACD3A8C1F74F585D4200CBD858760173A297A55E56F96BFCBDEAB8F93F881248DC3E9317FA6E14D78FDC74AE8C657283F9075B441F956B67ED4DDD19D7D1B12AE032B0D48C8AC80759029CE94D776286BA00F7C25064F5C0E3D683F35C56FF8BAA854322BCC14F664D1315D30E9399497EC01EB3E697793C52DBF51F8E3C52A9699310CCA35F2DE8D90CF41039B3A99ADA644ABDE2F3C73A851573685E5DF44E8912BF07CEC9D3E1D9CC022BE20FF4D3FFC34911DD069B7C27F7B85A0B53C0D3E6FA23D869B8565F70F61ACEFD8F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:95:be:9a:22:d4:e3:f2:85:b4:f6:26:c7:
                    51:ec:33:35:f6:e8:42:43:5b:82:ba:79:5d:59:96:
                    0c:60:8c:f9:47:89:50:f2:2d:f8:3d:95:88:9c:a0:
                    68:f0:d1:8b:69:7d:ac:d3:a8:c1:f7:4f:58:5d:42:
                    00:cb:d8:58:76:01:73:a2:97:a5:5e:56:f9:6b:fc:
                    bd:ea:b8:f9:3f:88:12:48:dc:3e:93:17:fa:6e:14:
                    d7:8f:dc:74:ae:8c:65:72:83:f9:07:5b:44:1f:95:
                    6b:67:ed:4d:dd:19:d7:d1:b1:2a:e0:32:b0:d4:8c:
                    8a:c8:07:59:02:9c:e9:4d:77:62:86:ba:00:f7:c2:
                    50:64:f5:c0:e3:d6:83:f3:5c:56:ff:8b:aa:85:43:
                    22:bc:c1:4f:66:4d:13:15:d3:0e:93:99:49:7e:c0:
                    1e:b3:e6:97:79:3c:52:db:f5:1f:8e:3c:52:a9:69:
                    93:10:cc:a3:5f:2d:e8:d9:0c:f4:10:39:b3:a9:9a:
                    da:64:4a:bd:e2:f3:c7:3a:85:15:73:68:5e:5d:f4:
                    4e:89:12:bf:07:ce:c9:d3:e1:d9:cc:02:2b:e2:0f:
                    f4:d3:ff:c3:49:11:dd:06:9b:7c:27:f7:b8:5a:0b:
                    53:c0:d3:e6:fa:23:d8:69:b8:56:5f:70:f6:1a:ce:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FF:48:BC:2A:43:97:79:3F:21:F7:11:44:85:DA:47:C2:B3:3F:A6
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ba0::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:60:92:37:35:8f:39:a8:23:c4:33:ff:ab:bf:a9:8a:74:29:
         fb:1a:1e:78:d4:bd:e5:2a:29:33:f0:6e:54:5b:1a:4f:e7:9c:
         72:1b:ef:5e:eb:4c:34:67:97:18:6c:70:a2:62:dc:77:17:c0:
         48:e2:4f:60:a2:df:2f:ad:1c:71:fe:2a:a2:49:23:7a:d8:8f:
         fa:79:81:a1:ad:9f:ab:f3:fc:40:90:90:64:27:24:d3:45:c0:
         0d:e3:e2:9a:eb:69:fe:f1:86:5a:a3:54:39:d2:d1:1f:e6:78:
         d4:a7:47:b8:35:09:a8:b9:c7:77:ae:78:09:14:be:d5:1d:db:
         e9:c8:4f:4e:ed:8d:79:5d:16:02:b1:a4:b2:e7:15:bc:d0:b9:
         84:2a:86:c7:ba:ed:31:f3:ab:76:e5:3a:47:01:f4:77:fd:85:
         ef:72:b1:a1:3d:af:01:b6:e1:e4:70:47:dd:fa:40:01:97:0a:
         26:93:b8:94:af:03:06:a5:17:d3:36:72:c0:e5:70:c1:bf:70:
         b3:57:cd:bd:6e:16:59:30:c2:ce:66:b9:eb:6d:8a:a9:7d:38:
         ca:c3:1d:b2:58:48:38:12:b8:56:a4:e1:ca:a9:ef:fc:a9:49:
         cc:0e:5a:40:f2:3e:aa:ab:32:7a:0c:17:74:ba:28:51:50:47:
         a4:20:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----