Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa
File:                     323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa (raw, json)
Hash identifier:          JDyZcscjVToIes+Nf6gh1ZvwVdHMX1S3cMihak3dJ5E=
Subject key identifier:   4B:14:12:CA:47:77:B7:2F:BD:DF:68:23:DC:3A:A1:A6:6C:1B:57:A5
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       7D2106F22CE8E32D700BA08AAE605498F0FFEDAF
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa
Signing time:             Mon 15 Jul 2024 08:50:14 +0000
ROA not before:           Mon 15 Jul 2024 08:45:14 +0000
ROA not after:            Mon 14 Jul 2025 08:50:14 +0000
asID:                     46997
IP address blocks:        2602:feda:38::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:21:06:f2:2c:e8:e3:2d:70:0b:a0:8a:ae:60:54:98:f0:ff:ed:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:14 2024 GMT
            Not After : Jul 14 08:50:14 2025 GMT
        Subject: CN=4B1412CA4777B72FBDDF6823DC3AA1A66C1B57A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:ee:f8:6d:ba:af:ba:19:5f:b7:8d:82:15:
                    2e:4d:87:81:c7:f8:e2:07:d1:4c:8e:6a:80:71:60:
                    51:a7:fa:0e:43:25:1e:45:03:cf:60:81:09:f4:d5:
                    eb:bd:e6:83:1f:9c:80:d5:7b:46:53:08:16:1e:95:
                    ab:da:d9:e9:92:f4:09:f7:2a:d0:1a:48:2b:85:ad:
                    24:67:88:fb:00:b5:b7:ef:62:25:20:74:bf:bc:0e:
                    58:ca:ab:5f:0d:19:0c:7c:ad:ec:33:b3:fb:3a:96:
                    1d:66:96:76:62:e6:4e:54:5f:19:ea:c4:dc:77:5a:
                    9a:41:10:11:0e:1b:68:f6:f2:96:40:ba:e3:f8:8f:
                    be:8e:68:21:b2:c5:73:72:18:cd:c8:d4:fd:e8:15:
                    59:af:68:c7:c1:c5:0e:a8:91:05:af:79:82:0e:bd:
                    c9:b1:e3:3a:25:0f:36:e8:49:d5:77:86:8c:e8:d1:
                    39:ed:68:97:30:d5:8d:1a:ec:54:15:f8:66:55:8a:
                    24:46:9a:57:48:81:f5:c9:7a:cc:ad:f8:94:84:f3:
                    df:73:1d:17:9c:cf:af:48:d8:1d:1f:21:02:96:fb:
                    d7:c5:05:07:c7:59:b1:5b:91:54:ae:78:46:80:db:
                    11:64:46:13:f9:74:f1:9c:c9:72:34:b0:74:d1:21:
                    66:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:14:12:CA:47:77:B7:2F:BD:DF:68:23:DC:3A:A1:A6:6C:1B:57:A5
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:38::/45

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:1c:6d:50:2e:97:f4:4d:a9:72:86:f6:15:fe:4b:d1:31:
         5b:ef:28:ec:33:14:12:9b:3a:fa:91:97:c8:0b:33:66:cb:65:
         81:2f:ad:45:9c:15:9f:26:f6:47:21:ef:e3:37:ab:0c:11:3d:
         1a:10:49:bd:9a:0b:ec:7b:55:cc:ff:4b:10:47:91:23:0f:6f:
         69:8a:ee:ac:e6:13:01:11:b5:74:83:bb:e6:e6:65:d4:19:dc:
         ca:db:4b:ca:4e:b6:06:57:a8:e3:33:12:f7:da:22:49:a2:95:
         1d:32:c5:39:2b:b6:3b:df:a8:27:95:09:77:8c:2b:ab:d6:f5:
         88:87:b4:79:6d:4c:8e:ac:69:0c:f8:5a:23:fe:10:2a:a9:3a:
         a6:5f:fb:8d:92:56:98:fd:bb:59:5c:20:68:17:aa:67:f9:f1:
         f8:f6:12:1d:10:b1:9d:d1:73:a7:88:ca:47:c3:b5:45:1f:b7:
         1e:32:93:87:e7:fe:40:e7:0d:16:d8:99:2a:94:11:93:38:33:
         02:8b:33:38:04:36:2c:e7:ef:ca:5d:1d:56:bd:81:09:e5:5b:
         70:52:b3:c3:77:69:b8:69:96:2f:dd:91:c1:fb:ed:2e:5d:6f:
         cf:1d:e7:41:c3:a8:19:9f:b1:45:6b:c3:42:65:2d:ce:8f:82:
         40:86:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----