Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/AS201242.roa
File:                     AS201242.roa (raw, json)
Hash identifier:          GqZtB9EtG22GWCLxCjquibWpaFRoGafcAQlBo7bc5qU=
Subject key identifier:   4F:EA:C4:03:C7:DF:13:A3:FA:5B:DF:B0:3F:8D:B6:E0:1D:7F:3F:0D
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       0161B3B1FF7BF8630CF4C77944B8C3447879D2D5
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/6/AS201242.roa
Signing time:             Mon 28 Nov 2022 12:30:58 +0000
ROA not before:           Mon 28 Nov 2022 12:25:58 +0000
ROA not after:            Mon 27 Nov 2023 12:30:58 +0000
asID:                     201242
IP address blocks:        2a12:dd47:80e1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:61:b3:b1:ff:7b:f8:63:0c:f4:c7:79:44:b8:c3:44:78:79:d2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Nov 28 12:25:58 2022 GMT
            Not After : Nov 27 12:30:58 2023 GMT
        Subject: CN=4FEAC403C7DF13A3FA5BDFB03F8DB6E01D7F3F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:79:c3:7e:d8:9a:51:04:18:37:af:a6:2d:
                    e0:49:c0:92:94:33:ba:1b:70:1e:3a:30:14:75:1e:
                    ba:c7:be:ae:59:b4:b7:c7:bb:ca:0b:ce:c0:dd:61:
                    8d:1f:e1:9d:c3:2c:a8:40:7a:a6:c1:5b:c1:1d:35:
                    11:65:83:34:12:c8:7c:90:87:c2:5c:84:54:1c:a2:
                    21:2e:a6:fa:48:75:5a:a6:4e:58:bb:00:23:42:bb:
                    4a:1d:20:38:a4:97:e3:32:00:77:c9:69:34:15:77:
                    eb:06:f5:48:a2:58:d7:fd:0a:f5:fd:c4:6c:7b:8a:
                    8e:97:db:f2:ef:2d:24:88:b1:1c:e6:cf:94:67:51:
                    17:fe:51:71:60:07:ca:15:cd:cb:da:54:87:b0:ba:
                    99:27:15:d2:90:ec:42:90:44:c6:6a:aa:fb:b2:ba:
                    e2:27:3a:9c:f1:d7:6b:02:56:ed:07:1c:c3:d7:62:
                    a9:e1:24:41:02:8c:5d:54:d8:61:26:28:ab:b9:9c:
                    e4:f9:29:de:09:94:0d:a1:60:2a:88:b8:31:9a:c1:
                    6a:fa:fd:e5:78:a7:f5:c8:c3:56:f3:d1:11:ae:60:
                    52:a5:6b:fd:2b:38:42:43:51:f5:b7:3e:5d:03:86:
                    b6:d3:35:b4:8f:5f:16:cc:67:a0:a5:27:a5:d9:9b:
                    cb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EA:C4:03:C7:DF:13:A3:FA:5B:DF:B0:3F:8D:B6:E0:1D:7F:3F:0D
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/6/AS201242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:9a:7a:7a:94:0f:4f:20:74:12:82:fb:22:4e:ef:5b:d9:
         e7:7b:76:87:aa:22:59:25:7f:15:36:f7:15:d5:b7:55:50:78:
         1b:4c:de:e2:4b:21:1d:fc:7e:b5:36:11:83:96:f9:8a:a0:08:
         95:ea:79:64:b7:63:be:85:56:6c:9e:63:01:98:8a:b9:01:b9:
         b1:6b:f5:a3:fc:7d:6c:a5:c2:75:3a:38:9a:91:87:df:10:26:
         ae:08:8c:7e:74:87:c6:bc:cc:d1:10:56:03:a4:d5:bf:91:b5:
         f1:aa:23:7a:ea:3d:30:a2:c7:92:e4:85:48:8b:64:40:62:ff:
         41:3a:16:e9:f1:bc:2a:d8:12:8a:4f:62:4e:e1:8e:f5:07:2e:
         52:2f:d2:9c:29:7c:76:bf:ce:b9:94:29:0e:76:f9:21:6f:2f:
         5d:71:4e:d9:d0:d2:fb:95:3d:25:35:4c:44:80:de:f8:95:3f:
         eb:8e:60:8e:3c:48:f8:2a:db:e8:7a:6f:6d:ae:1c:f2:7f:dd:
         6a:81:84:56:5a:4c:0a:aa:ef:40:e5:2a:a9:cb:a3:a7:f5:e6:
         bc:a0:de:71:16:40:bc:26:49:c1:b6:5f:d8:0f:d8:80:f9:8a:
         37:51:62:a3:c5:8a:20:e6:0b:61:70:6a:b4:62:88:85:87:d0:
         e8:71:da:da
-----BEGIN CERTIFICATE-----
MIIEnTCCA4WgAwIBAgIUAWGzsf97+GMM9Md5RLjDRHh50tUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5ODExOWUxNWY4MTA4YWJhZDlkNWUxNTMwMThmYjQ2
NjVjYTYzMDAeFw0yMjExMjgxMjI1NThaFw0yMzExMjcxMjMwNThaMDMxMTAvBgNV
BAMTKDRGRUFDNDAzQzdERjEzQTNGQTVCREZCMDNGOERCNkUwMUQ3RjNGMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXB3nDftiaUQQYN6+mLeBJwJKU
M7obcB46MBR1HrrHvq5ZtLfHu8oLzsDdYY0f4Z3DLKhAeqbBW8EdNRFlgzQSyHyQ
h8JchFQcoiEupvpIdVqmTli7ACNCu0odIDikl+MyAHfJaTQVd+sG9UiiWNf9CvX9
xGx7io6X2/LvLSSIsRzmz5RnURf+UXFgB8oVzcvaVIewupknFdKQ7EKQRMZqqvuy
uuInOpzx12sCVu0HHMPXYqnhJEECjF1U2GEmKKu5nOT5Kd4JlA2hYCqIuDGawWr6
/eV4p/XIw1bz0RGuYFKla/0rOEJDUfW3Pl0DhrbTNbSPXxbMZ6ClJ6XZm8sBAgMB
AAGjggGnMIIBozAdBgNVHQ4EFgQUT+rEA8ffE6P6W9+wP4224B1/Pw0wHwYDVR0j
BBgwFoAUlJgRnhX4EIq62dXhUwGPtGZcpjAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS5hdWd1c3QudHcvcmVwby9IWVNQLzYv
OTQ5ODExOUUxNUY4MTA4QUJBRDlENUUxNTMwMThGQjQ2NjVDQTYzMC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL2xKZ1JuaFg0RUlxNjJkWGhVd0dQdEdaY3BqQS5j
ZXIwSwYIKwYBBQUHAQsEPzA9MDsGCCsGAQUFBzALhi9yc3luYzovL3Jwa2kuYXVn
dXN0LnR3L3JlcG8vSFlTUC82L0FTMjAxMjQyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLdR4DhMA0G
CSqGSIb3DQEBCwUAA4IBAQAavJp6epQPTyB0EoL7Ik7vW9nne3aHqiJZJX8VNvcV
1bdVUHgbTN7iSyEd/H61NhGDlvmKoAiV6nlkt2O+hVZsnmMBmIq5Abmxa/Wj/H1s
pcJ1OjiakYffECauCIx+dIfGvMzREFYDpNW/kbXxqiN66j0woseS5IVIi2RAYv9B
Ohbp8bwq2BKKT2JO4Y71By5SL9KcKXx2v865lCkOdvkhby9dcU7Z0NL7lT0lNUxE
gN74lT/rjmCOPEj4Ktvoem9trhzyf91qgYRWWkwKqu9A5Sqpy6On9ea8oN5xFkC8
JknBtl/YD9iA+Yo3UWKjxYog5gthcGq0YoiFh9Docdra
-----END CERTIFICATE-----