Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/AS202256.roa
File:                     AS202256.roa (raw, json)
Hash identifier:          YjXO1wz7LrzBAx+iysx+B0Th9umCtOximUN5XwWpeqg=
Subject key identifier:   90:AF:04:53:4E:DD:7D:73:38:C0:DB:11:D3:A7:6C:34:73:21:59:86
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       3CD333C8D6AC778E0EEF583B21B1897790C47FF4
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/6/AS202256.roa
Signing time:             Sat 11 Mar 2023 08:34:51 +0000
ROA not before:           Sat 11 Mar 2023 08:29:51 +0000
ROA not after:            Sat 09 Mar 2024 08:34:51 +0000
asID:                     202256
IP address blocks:        2a12:dd47:4000::/36 maxlen: 48
                          2a12:dd47:6000::/36 maxlen: 48
                          2a12:dd47:7000::/36 maxlen: 48
                          2a12:dd47:c000::/36 maxlen: 48
                          2a12:dd47:e000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d3:33:c8:d6:ac:77:8e:0e:ef:58:3b:21:b1:89:77:90:c4:7f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Mar 11 08:29:51 2023 GMT
            Not After : Mar  9 08:34:51 2024 GMT
        Subject: CN=90AF04534EDD7D7338C0DB11D3A76C3473215986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:27:01:c4:18:00:e6:a0:fc:b3:f9:81:12:
                    78:14:ae:52:09:f8:52:42:64:40:36:7a:f2:c7:f3:
                    c4:aa:bb:98:25:fa:0a:b0:1c:0c:75:e7:0c:75:6e:
                    f4:76:fd:9c:2e:3d:44:fa:24:29:e7:02:72:a5:01:
                    17:2a:3c:62:84:94:d8:d5:64:fc:30:eb:a0:f6:84:
                    bd:a5:0b:fc:3a:18:d0:d2:97:01:8e:60:83:ca:6b:
                    b2:77:4b:bd:02:3c:c1:db:0d:22:eb:e4:4d:6f:4d:
                    66:c4:4a:67:b9:d3:79:39:f2:0f:a0:d7:3a:f6:41:
                    6c:e7:63:28:46:a0:bd:ea:67:60:2b:51:4c:ca:3c:
                    e2:1c:62:72:75:1d:ab:47:33:8f:e1:80:39:6d:fa:
                    90:3d:ed:c5:1c:9f:ed:f1:ae:77:17:45:18:7b:9a:
                    42:2a:d5:24:d5:8d:d1:a5:3d:06:ae:df:d5:38:b6:
                    68:76:a8:10:a4:85:c9:ac:e0:07:eb:05:48:c2:44:
                    44:04:50:74:59:6f:e7:5d:d9:8c:11:42:ca:27:f0:
                    23:ed:e2:e1:7b:94:f4:ef:fc:4e:21:fb:79:88:35:
                    87:55:11:1e:83:c7:05:e7:97:95:4d:05:92:3e:cb:
                    7c:1d:bc:69:d5:63:15:22:79:9a:8d:82:d2:c4:ac:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AF:04:53:4E:DD:7D:73:38:C0:DB:11:D3:A7:6C:34:73:21:59:86
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/6/AS202256.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:4000::/36
                  2a12:dd47:6000::/35
                  2a12:dd47:c000::/36
                  2a12:dd47:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:f8:21:ca:e6:5a:8f:42:25:e8:aa:eb:09:ff:84:ce:05:23:
         59:79:3a:89:6b:79:98:ce:7b:df:b8:5d:90:a5:fa:ea:3b:17:
         99:0e:9b:31:3e:a8:1c:56:54:26:48:92:44:f3:42:cd:55:81:
         0f:1c:38:15:de:99:7d:3d:f3:78:a7:1c:94:a9:65:ce:5a:db:
         8c:b1:b7:23:18:f6:9e:ee:9d:e1:62:6d:73:5b:5f:77:51:c2:
         a6:89:1e:1a:d2:a4:21:b1:24:35:b5:e2:74:c2:91:9c:f2:cf:
         7f:27:ca:9d:bf:ec:df:37:50:4e:1d:b4:b0:7a:28:47:0a:94:
         bf:cf:e6:3a:95:a1:63:01:91:02:b1:52:82:c8:68:4f:24:18:
         42:2d:17:eb:61:52:c3:ae:5e:cc:0c:40:a4:68:af:4a:a0:21:
         56:27:b1:bc:3f:77:8f:14:2e:a3:d7:01:e3:d5:85:33:5c:80:
         07:4e:30:33:96:19:98:86:4f:a5:5d:a3:d2:1b:7f:0a:98:f3:
         2f:f5:60:8b:de:0f:da:4c:36:53:bd:84:0e:a6:d6:5b:37:c3:
         4f:e5:de:d1:4b:0a:49:21:7d:ff:75:86:77:b0:5c:90:95:72:
         48:2c:27:0b:e9:6c:f7:bd:9f:56:e4:db:5e:56:13:d4:90:1b:
         de:32:e2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----