Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/AS47449.roa
File:                     AS47449.roa (raw, json)
Hash identifier:          El9bw+UZJUfN7q+umJO+arkCVhIleI30iukvVl1SmoI=
Subject key identifier:   8D:2C:A2:D0:8E:28:BB:DD:1F:4E:F5:00:43:D4:C9:2F:02:90:41:AE
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       74D71FB02BBDE3BE70C7553AA14CA8F3221DE58B
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/6/AS47449.roa
Signing time:             Mon 28 Nov 2022 12:30:48 +0000
ROA not before:           Mon 28 Nov 2022 12:25:48 +0000
ROA not after:            Mon 27 Nov 2023 12:30:48 +0000
asID:                     47449
IP address blocks:        2a12:dd47:8010::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d7:1f:b0:2b:bd:e3:be:70:c7:55:3a:a1:4c:a8:f3:22:1d:e5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Nov 28 12:25:48 2022 GMT
            Not After : Nov 27 12:30:48 2023 GMT
        Subject: CN=8D2CA2D08E28BBDD1F4EF50043D4C92F029041AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:e4:f7:51:19:f0:73:2f:ad:82:b4:76:e3:
                    3e:b9:e3:e2:29:e2:14:95:73:12:81:50:c3:02:fd:
                    36:23:ed:02:21:42:0f:04:78:47:c8:03:89:42:5f:
                    a1:f5:5b:63:18:d0:47:56:8e:26:0e:77:18:37:23:
                    45:89:3d:c7:27:dc:4c:9b:d8:87:1f:22:18:dd:b8:
                    d1:5c:8b:07:37:b1:f7:6b:b0:96:be:61:0c:58:54:
                    78:74:e9:42:a5:11:03:89:1c:c1:c2:06:c8:72:e3:
                    05:90:71:fd:c1:02:0a:6b:61:15:e4:45:34:de:92:
                    ef:99:0a:26:20:7f:e0:16:af:14:c4:17:27:4b:e9:
                    01:e6:66:ac:60:bf:56:aa:db:17:2a:50:60:b9:e5:
                    cd:79:17:4c:b6:99:6a:61:31:81:b4:a8:69:f9:76:
                    11:0c:3c:89:ec:45:53:68:a7:84:41:c3:60:3b:54:
                    ea:85:4a:c7:e5:14:53:ec:6c:52:7b:06:ac:e5:a9:
                    80:28:12:45:83:fd:3d:9c:c8:16:4c:05:be:2c:f1:
                    89:f4:e6:da:ba:fd:81:d1:1f:06:4b:96:70:2c:25:
                    02:ee:aa:64:99:79:aa:b1:21:a7:35:9b:0c:90:dd:
                    72:17:43:de:a8:c5:3c:80:f4:a1:e8:a2:b1:8c:a2:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2C:A2:D0:8E:28:BB:DD:1F:4E:F5:00:43:D4:C9:2F:02:90:41:AE
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/6/AS47449.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8010::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:89:ff:7c:26:dc:1d:1c:94:af:a4:67:75:3a:35:a8:dc:2d:
         42:b4:64:ab:ac:d8:2f:b0:df:f4:51:14:84:7a:ac:84:15:cc:
         03:9d:45:85:d1:bd:81:00:5b:a4:a6:b1:62:d2:1a:f0:c8:50:
         be:74:f6:81:c8:93:7c:d2:ac:bb:67:a0:81:a5:ee:d6:d0:0c:
         be:43:01:31:9c:92:1a:31:86:ea:33:47:d7:21:2a:f4:0c:f8:
         f8:9a:e9:10:66:7b:ad:a0:5f:c9:46:e7:8d:ca:f7:1a:f3:22:
         56:6b:3c:06:2e:dc:54:18:1b:93:0d:26:d2:08:0b:37:fc:89:
         f8:d1:7a:8c:ea:1f:e9:8f:45:49:77:03:89:3b:49:d8:fd:62:
         dd:f9:36:db:f2:34:8f:63:35:c2:36:2c:34:77:4a:87:0a:8a:
         7b:8b:6f:dd:32:e6:ee:15:e4:fe:22:b1:40:53:92:60:c3:7b:
         c8:97:10:2f:6a:16:0f:07:e0:9e:14:a8:60:36:3f:bc:c7:4b:
         4f:ae:41:10:db:98:e2:c9:be:ea:c4:84:3c:a1:6d:cd:7b:e5:
         89:9d:95:18:79:b7:a6:e1:d4:43:af:53:bf:99:20:d4:10:68:
         bd:ef:b0:33:54:08:60:d7:24:e5:7d:9c:4c:47:e8:ae:c4:9c:
         98:0e:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----