Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/6/AS50842.roa
File:                     AS50842.roa (raw, json)
Hash identifier:          GcmsVY6NYdDwFiUAQliJOdSkUaa5oPrUi9reh/4zS9M=
Subject key identifier:   BA:E4:6E:4E:13:41:DC:D6:74:B0:A4:86:B6:84:37:4C:DC:CA:62:A7
Certificate issuer:       /CN=9498119e15f8108abad9d5e153018fb4665ca630
Certificate serial:       0A36D8D6D3D25F605D0E1F7EC6CEA4D6A0D5680E
Authority key identifier: 94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/6/AS50842.roa
Signing time:             Mon 28 Nov 2022 12:30:52 +0000
ROA not before:           Mon 28 Nov 2022 12:25:52 +0000
ROA not after:            Mon 27 Nov 2023 12:30:52 +0000
asID:                     50842
IP address blocks:        2a12:dd47:81a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:36:d8:d6:d3:d2:5f:60:5d:0e:1f:7e:c6:ce:a4:d6:a0:d5:68:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9498119e15f8108abad9d5e153018fb4665ca630
        Validity
            Not Before: Nov 28 12:25:52 2022 GMT
            Not After : Nov 27 12:30:52 2023 GMT
        Subject: CN=BAE46E4E1341DCD674B0A486B684374CDCCA62A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:60:76:03:df:81:1b:97:81:5d:a0:37:dd:
                    39:e1:30:9d:83:1b:20:ca:48:47:cb:57:15:ae:a8:
                    94:6c:03:b9:c3:b3:37:85:e0:e6:d6:37:c0:bb:d4:
                    39:42:19:94:21:85:b5:b1:2c:1b:44:3c:9e:65:ca:
                    82:bc:6c:d8:51:9a:a2:9d:07:00:76:00:fd:11:6f:
                    6c:47:48:13:9f:ad:69:28:18:8c:c9:f7:56:07:c7:
                    64:e2:2c:92:67:fa:6b:ac:ee:2a:32:7c:5a:09:a4:
                    88:74:56:12:b5:66:c2:81:b4:42:3f:80:0f:79:9c:
                    8e:34:0c:0b:2f:4e:3f:d0:68:ed:a7:39:7f:eb:a2:
                    81:bd:01:2a:46:cc:8d:c9:ff:35:4b:e2:b6:32:0c:
                    d8:1e:81:91:c8:63:3a:8e:3a:9c:52:b6:cc:95:1a:
                    b0:56:bb:5d:d2:00:2e:ad:71:98:d8:65:19:13:88:
                    90:0d:c7:98:ce:ab:97:4f:68:47:a1:bf:e4:ee:8d:
                    a3:03:13:c1:eb:92:dc:43:7b:35:df:fa:b0:a7:d9:
                    03:17:41:35:ff:56:01:83:f8:ec:51:82:f0:0a:26:
                    72:32:66:a2:bc:d1:47:ce:9c:05:0e:fb:3a:68:f9:
                    dd:d7:1d:55:00:62:8d:33:36:21:b2:60:74:9c:1d:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E4:6E:4E:13:41:DC:D6:74:B0:A4:86:B6:84:37:4C:DC:CA:62:A7
            X509v3 Authority Key Identifier:
                keyid:94:98:11:9E:15:F8:10:8A:BA:D9:D5:E1:53:01:8F:B4:66:5C:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/6/9498119E15F8108ABAD9D5E153018FB4665CA630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgRnhX4EIq62dXhUwGPtGZcpjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/6/AS50842.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:29:df:b3:8d:39:c1:4a:40:4a:ff:3a:6b:dd:7f:6b:2d:d2:
         20:f5:c8:6f:98:c6:39:2f:64:96:42:d5:a7:c8:74:85:4d:fc:
         da:ca:32:cd:a9:ab:97:40:c9:a7:2b:75:94:1c:7b:18:45:44:
         ba:c9:a8:56:f5:4c:ed:09:86:7c:99:18:0a:3a:60:9f:9e:01:
         53:4e:e1:eb:f6:29:b4:78:24:68:ed:51:40:58:8d:07:93:b4:
         64:8e:7d:e1:70:c0:90:c1:a7:13:a3:25:ff:5c:6e:22:5b:b1:
         8a:0c:2a:b4:06:98:64:4e:0e:c4:89:95:00:e1:90:ad:39:ea:
         11:1e:89:8a:e7:b0:83:44:b7:2d:7f:b4:ed:47:41:85:2d:c8:
         8e:77:4c:51:22:43:c2:a8:56:5d:ff:5c:db:6b:40:f0:1d:c3:
         55:50:b3:eb:23:b1:5c:2d:e5:10:ca:db:39:9b:9e:2c:3f:db:
         b0:42:55:50:a9:6b:b2:6b:4a:9a:0e:3f:6b:e0:b3:20:89:d1:
         64:8a:fc:c0:90:6a:c3:65:07:e1:a1:95:c2:6d:ff:34:7a:ae:
         e0:cc:c7:e6:52:16:c3:b8:5e:67:cd:95:52:91:35:d9:18:d1:
         8b:2b:ed:51:70:dc:7c:4b:ec:05:4c:1a:35:c0:48:0a:3d:53:
         49:1d:cf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----