Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/AS202222.roa
File:                     AS202222.roa (raw, json)
Hash identifier:          BKHS+e8xE2Xpk+39cBZ1DSnqtqWtrPNTjQ75PnNoXo8=
Subject key identifier:   54:05:8B:B1:77:BD:93:E7:32:C5:C0:B9:E1:92:4E:EE:C6:20:71:40
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       6EB3C55A33FA4BEEB00E469782824640B2DC7D3C
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/6/AS202222.roa
Signing time:             Mon 28 Nov 2022 12:31:00 +0000
ROA not before:           Mon 28 Nov 2022 12:26:00 +0000
ROA not after:            Mon 27 Nov 2023 12:31:00 +0000
asID:                     202222
IP address blocks:        2a12:dd47:8166::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b3:c5:5a:33:fa:4b:ee:b0:0e:46:97:82:82:46:40:b2:dc:7d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Nov 28 12:26:00 2022 GMT
            Not After : Nov 27 12:31:00 2023 GMT
        Subject: CN=54058BB177BD93E732C5C0B9E1924EEEC6207140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:22:58:57:80:c6:42:bd:f9:fb:69:e4:d9:
                    94:b9:d7:4b:0a:7e:06:d1:81:13:b7:37:19:f1:f4:
                    57:c6:99:45:46:00:d2:a9:2b:99:b3:ce:4d:e1:99:
                    e0:be:65:6a:0b:96:89:1d:32:c5:1f:fc:73:3a:d5:
                    ba:7b:31:0d:79:aa:b4:e8:be:2e:e4:8e:bb:cb:31:
                    cc:c7:82:0b:4f:fd:e9:7c:08:18:c7:6b:c2:54:bb:
                    2d:5d:c2:81:ce:f6:7f:d0:68:25:70:e5:52:99:7f:
                    ad:22:eb:54:91:fc:de:a9:90:00:33:af:c5:16:15:
                    88:e6:d1:ba:ed:44:f1:11:15:fb:4b:94:3e:77:80:
                    99:fe:5a:5d:fb:9d:9a:fa:e4:a3:02:85:a2:67:b6:
                    85:cf:ca:54:50:04:6f:a1:73:a1:ea:1f:24:5b:47:
                    f9:d6:ea:84:03:78:b2:7c:32:92:db:56:13:31:ca:
                    36:dd:1c:a3:f4:bc:ea:c3:01:9d:d9:60:60:2b:69:
                    fd:1c:be:eb:ce:4c:13:a1:db:bc:13:07:26:1d:be:
                    14:d2:bd:07:ed:9a:86:4e:b4:ca:11:a9:ef:cd:14:
                    52:62:9d:7f:b1:0f:70:54:8d:f6:6a:80:b6:e2:9a:
                    30:ef:e7:ef:61:2e:4e:40:6f:36:c9:02:1e:61:e9:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:05:8B:B1:77:BD:93:E7:32:C5:C0:B9:E1:92:4E:EE:C6:20:71:40
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/6/AS202222.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8166::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:03:05:95:4a:56:99:53:e4:99:59:02:c3:18:f8:8d:43:25:
         0c:cf:b7:91:31:42:62:44:c6:4a:8c:7e:a5:0d:d1:4f:27:f2:
         c4:0a:58:6f:00:7d:15:b7:96:68:e4:c1:d8:77:82:13:a6:5c:
         e6:60:aa:24:42:d6:38:47:1d:f8:9b:b3:c3:39:d7:2a:42:6d:
         a4:b7:17:e3:ff:e1:c0:7e:cf:83:0d:22:68:3c:41:ed:f5:0c:
         cb:c7:d3:f6:ec:d8:b9:2e:16:73:cc:0e:9e:b7:e0:a1:9f:25:
         a5:2f:28:a9:79:7b:fb:eb:19:a0:52:d6:cb:12:28:6e:6e:3a:
         76:ea:5a:9a:cf:f8:e7:d8:34:a9:ed:0a:78:0f:b7:0a:05:9c:
         9d:24:5f:90:c0:51:a5:5c:f7:6a:73:63:8d:c2:7c:c5:f8:fd:
         fd:89:52:61:8e:23:33:e4:00:52:3b:81:17:c5:55:76:20:4a:
         ea:72:08:da:f7:c5:16:1e:38:7c:7c:04:22:92:97:ad:8c:a5:
         9e:6f:70:c0:16:f9:1c:c9:ce:48:d2:17:00:c2:d9:34:f6:72:
         23:77:db:75:2b:62:31:4d:f0:39:bc:53:b8:e8:4c:6a:6f:e6:
         11:30:3d:d5:23:31:ef:67:25:93:b5:0c:c4:c8:01:74:cc:38:
         7f:2b:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----