Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa
File:                     326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa (raw, json)
Hash identifier:          LjOl32oV5q4r9xXasWYx65jhB6Apwq87O0hT9TEQFWo=
Subject key identifier:   34:21:D7:BD:DE:9B:02:1E:05:F0:7A:69:21:2B:57:78:98:0F:7F:2C
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       1071DF050815E4C5D5C0F9DEB77957C09196C513
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa
Signing time:             Tue 17 Oct 2023 16:13:35 +0000
ROA not before:           Tue 17 Oct 2023 16:08:35 +0000
ROA not after:            Tue 15 Oct 2024 16:13:35 +0000
asID:                     207941
IP address blocks:        2a12:dd47:8005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:71:df:05:08:15:e4:c5:d5:c0:f9:de:b7:79:57:c0:91:96:c5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 17 16:08:35 2023 GMT
            Not After : Oct 15 16:13:35 2024 GMT
        Subject: CN=3421D7BDDE9B021E05F07A69212B5778980F7F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:5d:92:fe:d3:5b:b9:54:a6:4a:1c:20:fb:
                    40:29:17:79:e5:b4:a7:21:b8:5c:98:22:66:15:1f:
                    3b:93:68:58:c0:fa:1b:9b:f5:31:43:ea:ab:48:48:
                    e8:5d:62:11:ab:9b:2e:6a:d2:f2:e8:f1:6a:04:89:
                    62:c4:2e:2d:93:50:e7:52:fd:17:c3:c2:cc:c7:4c:
                    c7:25:a2:7d:fc:13:34:5f:81:5e:c4:d9:58:62:74:
                    7f:f8:f6:89:91:7e:92:be:de:0e:b2:79:80:38:40:
                    1c:35:7b:c9:9c:4b:7d:e3:92:a9:d2:05:2c:8d:dd:
                    1f:ff:3f:ad:62:f7:e6:dd:46:d3:ba:1f:f4:97:ae:
                    6a:2b:b8:08:69:17:4d:69:d5:1f:ae:bb:ba:81:00:
                    8e:a1:ea:7b:c7:1d:c2:32:3f:11:ce:90:92:9b:e8:
                    fc:68:82:aa:11:40:f2:79:8b:90:3b:06:75:0a:a5:
                    79:7c:f7:5f:21:3b:f9:54:40:05:94:31:3d:b3:3b:
                    ed:c1:15:30:bb:eb:3f:a9:da:e9:74:d3:40:46:cd:
                    d6:36:6f:a6:ed:38:ce:2c:48:f6:bd:8a:72:ab:b6:
                    cf:f6:28:69:32:8c:9f:46:96:a9:ab:9d:d0:51:74:
                    50:f2:57:39:93:4c:6b:bb:d0:c8:7c:e9:4d:b7:4e:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:21:D7:BD:DE:9B:02:1E:05:F0:7A:69:21:2B:57:78:98:0F:7F:2C
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a383030353a3a2f34382d3438203d3e20323037393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:af:62:22:7b:74:7d:8e:2c:db:61:85:71:ad:20:6b:3b:8d:
         5f:df:bb:cd:5f:b9:62:9c:08:94:49:f3:ed:2d:7d:1b:24:07:
         20:47:55:dd:7f:8b:2a:2e:5c:eb:4d:71:e0:f4:77:78:dc:18:
         6b:3b:1b:9b:94:1a:7e:d8:84:50:80:84:5b:5e:0d:2b:8a:31:
         d5:b3:7e:84:45:da:10:89:a3:18:a7:24:4d:2c:62:b9:9c:ca:
         04:6e:97:9e:43:db:fc:d3:a1:2d:a4:5c:b6:12:9b:71:e4:bd:
         37:4e:90:38:57:99:d3:f4:14:9a:17:11:e0:c5:fd:9b:65:51:
         6d:50:b3:ab:5d:c9:4c:bc:fb:fa:89:ca:6b:a1:0b:2d:27:fa:
         85:ae:b5:36:8a:68:0e:05:f0:ca:a4:b1:df:e3:54:59:0c:80:
         77:09:ed:d1:e0:8c:47:08:c1:e4:8c:eb:3f:b3:04:7b:a2:64:
         46:74:65:88:9e:7a:9a:66:ed:60:9e:a5:5b:e9:21:ac:8f:30:
         f8:71:fe:75:08:0e:98:c1:cc:07:86:41:22:d0:c1:0e:42:16:
         59:c3:97:4f:d2:2f:a2:34:79:ff:a5:e7:7e:ea:fb:bf:98:f7:
         9f:cf:bb:52:38:8a:d8:c5:d6:69:23:e1:7a:4a:fa:67:b4:6d:
         bc:6f:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----