Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34342d3438203d3e203630363134.roa
File:                     323630323a666564613a6362303a3a2f34342d3438203d3e203630363134.roa (raw, json)
Hash identifier:          VoBNsVCi5UEq/V6gEFAihM++qPqjtkOsG+sOdzBQ2KM=
Subject key identifier:   44:A1:78:5D:C3:25:53:6F:BA:19:28:5B:C3:DE:2D:E7:F9:76:DF:9C
Certificate issuer:       /CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
Certificate serial:       633A5619E9FD61BB0D7D42FD4BA7AE8E9BDA8C95
Authority key identifier: 01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34342d3438203d3e203630363134.roa
Signing time:             Mon 28 Feb 2022 01:00:04 +0000
ROA not before:           Mon 28 Feb 2022 00:55:04 +0000
ROA not after:            Mon 27 Feb 2023 01:00:04 +0000
asID:                     60614
IP address blocks:        2602:feda:cb0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3a:56:19:e9:fd:61:bb:0d:7d:42:fd:4b:a7:ae:8e:9b:da:8c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0108398CA988382C2A509BFDB39E146A76CF9DE0
        Validity
            Not Before: Feb 28 00:55:04 2022 GMT
            Not After : Feb 27 01:00:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:d4:20:79:84:c7:ce:3a:f1:e7:03:63:c5:
                    e8:6f:7c:99:9c:ec:8f:22:c3:69:4a:db:e1:58:b3:
                    0c:47:29:bc:9a:87:a3:26:86:35:32:0c:fe:11:6c:
                    2b:13:c5:0b:6b:d0:ca:f9:9e:a3:a5:72:46:4c:01:
                    f0:27:99:79:26:6a:44:8c:87:c9:2e:0f:b4:e1:4c:
                    0a:9c:ff:f1:75:0b:99:fd:8d:70:4c:51:c6:87:cc:
                    32:16:d1:cd:fb:23:0e:5e:70:e6:b1:ed:e6:04:c8:
                    c2:83:2c:90:f3:af:b1:3a:90:1d:df:f3:f0:80:26:
                    70:f0:40:73:63:15:4d:eb:40:8f:8e:b3:40:5d:e5:
                    45:1d:9b:08:da:ec:66:ec:88:2b:fc:a5:cc:71:c1:
                    02:bc:f3:5e:14:ef:3b:e9:db:90:02:88:9a:dc:38:
                    57:4a:e4:74:85:1e:e8:d5:11:90:56:3b:68:d4:06:
                    82:a4:a4:84:8c:d6:59:33:60:34:36:4c:06:86:87:
                    9a:da:4b:38:f5:f7:84:89:25:70:c4:eb:24:2b:e7:
                    3d:d9:74:aa:26:71:53:93:c8:c1:9a:99:3d:d1:99:
                    08:5f:c0:3b:ea:fb:0a:34:06:c9:02:ea:38:62:02:
                    b0:d4:2b:94:e4:b8:c7:f0:5b:dc:89:08:67:5a:d3:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A1:78:5D:C3:25:53:6F:BA:19:28:5B:C3:DE:2D:E7:F9:76:DF:9C
            X509v3 Authority Key Identifier:
                keyid:01:08:39:8C:A9:88:38:2C:2A:50:9B:FD:B3:9E:14:6A:76:CF:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/0/0108398CA988382C2A509BFDB39E146A76CF9DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9114E750000/0/323630323a666564613a6362303a3a2f34342d3438203d3e203630363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:cb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a7:c2:9c:ef:42:f5:e5:f0:48:2b:4a:a9:53:48:2a:d6:b6:74:
         af:32:c0:f6:6f:36:a3:8d:ef:6c:9c:d8:f8:ac:b1:c1:27:fa:
         a2:da:ef:99:95:0d:5b:b5:bb:1a:d6:e8:dc:42:19:3f:f3:46:
         28:05:c5:32:df:ae:b1:df:a6:b2:7a:62:b0:bf:21:7a:54:48:
         a9:77:5d:3d:0d:c8:39:3b:23:f3:b6:fa:f8:cb:94:43:83:a3:
         ad:9b:17:84:01:e7:de:68:48:cd:e5:cb:cc:68:b0:a1:55:d4:
         50:52:1c:fd:17:2d:3f:8f:28:69:ec:29:27:db:6e:3e:02:91:
         85:9d:f3:e6:4c:9b:66:fd:3e:57:aa:ab:ad:ff:cc:89:ea:2f:
         d4:3c:ad:92:3e:d6:0e:11:9c:54:75:21:5f:01:a3:8a:66:fb:
         a0:af:8a:99:8b:40:57:b8:b7:3f:bc:78:47:7c:31:1f:69:8f:
         7d:e7:c7:89:41:ed:0b:22:64:9d:b0:96:7d:f8:0b:ee:7f:e8:
         97:08:d1:d0:21:61:de:14:9e:de:be:b4:19:0f:8b:63:7b:de:
         8c:e2:92:a3:59:47:50:87:07:8a:6e:98:19:4c:93:78:a1:1c:
         ef:e0:4b:27:86:25:47:c6:38:43:11:ff:64:1f:fc:99:50:6e:
         a9:51:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----