Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/0/323630323a666332333a3132303a3a2f34342d3438203d3e203630343338.roa
File:                     323630323a666332333a3132303a3a2f34342d3438203d3e203630343338.roa (raw, json)
Hash identifier:          KZO9mlWcUYnWwxxepOXpXeZYUA0GN4TF4uxInzxLhu4=
Subject key identifier:   96:9A:70:7C:E9:E2:8A:CE:E6:76:D8:BA:D0:2F:F6:7C:12:04:1D:9A
Certificate issuer:       /CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
Certificate serial:       4D688D07C5A0437B751508E94DB8B244CA6492E8
Authority key identifier: 32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/0/323630323a666332333a3132303a3a2f34342d3438203d3e203630343338.roa
Signing time:             Wed 09 Mar 2022 19:11:29 +0000
ROA not before:           Wed 09 Mar 2022 19:06:29 +0000
ROA not after:            Wed 08 Mar 2023 19:11:29 +0000
asID:                     60438
IP address blocks:        2602:fc23:120::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:68:8d:07:c5:a0:43:7b:75:15:08:e9:4d:b8:b2:44:ca:64:92:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
        Validity
            Not Before: Mar  9 19:06:29 2022 GMT
            Not After : Mar  8 19:11:29 2023 GMT
        Subject: CN=969A707CE9E28ACEE676D8BAD02FF67C12041D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:08:37:fd:86:0c:06:f6:61:34:f3:18:35:
                    0a:d5:be:e6:8d:d4:74:37:17:0b:41:12:70:00:35:
                    c1:16:bf:e3:a4:c1:42:b5:69:ae:b3:cd:dc:69:30:
                    f8:eb:cc:cf:2f:88:4a:4b:41:2c:fc:a8:32:36:e4:
                    f6:68:c1:02:a1:58:ff:47:89:d6:7b:aa:eb:52:1c:
                    ff:ee:44:39:2b:d3:2f:90:ee:c3:7c:63:12:34:cb:
                    33:74:62:98:01:b9:b0:17:f3:3d:63:ed:24:a9:9c:
                    3b:cc:ed:d9:36:76:2a:d0:60:4b:e4:17:d8:33:5b:
                    e6:a8:64:ab:f4:16:fa:51:46:68:83:10:ca:2a:cc:
                    fc:de:8c:fc:6e:b6:b5:69:a9:22:10:92:1c:46:50:
                    13:3a:fa:ec:6c:22:de:ae:54:e6:09:17:43:b1:c3:
                    8c:bb:67:27:75:67:5d:89:b2:88:f3:08:f2:0a:77:
                    ab:aa:07:3a:0b:9b:8d:6c:a6:6e:b1:c7:38:e4:86:
                    df:01:7f:e3:9e:69:9b:63:79:8e:62:9e:18:69:a9:
                    c4:e6:a8:e0:32:4d:a0:53:0f:d4:2b:fc:dc:28:45:
                    fb:e7:7e:e9:fd:7e:b5:5e:c7:f4:a7:86:83:92:53:
                    92:44:64:96:f0:f0:c2:63:47:52:ff:b4:2c:74:7a:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9A:70:7C:E9:E2:8A:CE:E6:76:D8:BA:D0:2F:F6:7C:12:04:1D:9A
            X509v3 Authority Key Identifier:
                keyid:32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/0/32716AA161C2B0D16D116432E37909639E3CA672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/0/323630323a666332333a3132303a3a2f34342d3438203d3e203630343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         b7:65:f8:0f:89:5f:1e:c1:3b:fa:4a:6f:ff:0f:af:17:d3:5d:
         0b:5d:c5:a3:53:5c:4a:f0:ac:1b:9b:64:53:8e:b8:16:04:07:
         e9:e3:73:7c:23:33:da:0d:08:02:82:cc:31:dc:4a:b1:58:9d:
         b2:3c:50:5d:d5:af:33:71:d9:37:35:74:88:1d:3b:ee:6b:ca:
         d2:3b:f4:44:e6:a3:3b:96:c6:ca:02:85:e4:78:97:46:11:a1:
         27:d0:1a:7c:46:7d:b9:c0:bd:59:7d:c4:17:2f:46:75:69:b3:
         61:d6:7f:04:26:61:c6:8c:51:e7:f6:68:3e:81:76:71:0d:38:
         b2:d3:a4:0f:e4:ff:d0:f4:77:4d:ff:5e:9e:25:c7:60:70:e6:
         c6:57:57:d0:4f:53:f6:4c:48:a5:b9:e5:6d:69:be:fd:2c:eb:
         44:64:03:2c:cb:2d:7d:a4:c4:00:c6:d4:45:da:8b:06:31:14:
         c9:0d:e4:a1:fb:57:36:39:c4:e5:f9:95:32:a2:98:d4:8e:ff:
         12:8b:ac:b5:d8:ea:30:16:dd:6e:1b:f8:e6:15:08:21:7c:b7:
         2e:c5:a7:e2:6a:a1:b0:4a:14:bd:4f:59:5b:3a:bc:86:27:c4:
         a8:b3:bd:52:c0:60:a8:95:05:6d:91:6d:97:f5:fc:4a:77:23:
         92:8d:60:16
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIUTWiNB8WgQ3t1FQjpTbiyRMpkkugwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGVmZmQ2ZDE1M2Y5Y2Q1MjljY2FhZDVk
YzQ5ZDE4ZjA4YTA4NTg3M2MwHhcNMjIwMzA5MTkwNjI5WhcNMjMwMzA4MTkxMTI5
WjAzMTEwLwYDVQQDEyg5NjlBNzA3Q0U5RTI4QUNFRTY3NkQ4QkFEMDJGRjY3QzEy
MDQxRDlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVQIN/2GDAb2
YTTzGDUK1b7mjdR0NxcLQRJwADXBFr/jpMFCtWmus83caTD468zPL4hKS0Es/Kgy
NuT2aMECoVj/R4nWe6rrUhz/7kQ5K9MvkO7DfGMSNMszdGKYAbmwF/M9Y+0kqZw7
zO3ZNnYq0GBL5BfYM1vmqGSr9Bb6UUZogxDKKsz83oz8bra1aakiEJIcRlATOvrs
bCLerlTmCRdDscOMu2cndWddibKI8wjyCnerqgc6C5uNbKZuscc45IbfAX/jnmmb
Y3mOYp4YaanE5qjgMk2gUw/UK/zcKEX7537p/X61Xsf0p4aDklOSRGSW8PDCY0dS
/7QsdHqPRwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFJaacHzp4orO5nbYutAv9nwS
BB2aMB8GA1UdIwQYMBaAFDJxaqFhwrDRbRFkMuN5CWOePKZyMA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kuYXVndXN0LnR3L3Jl
cG8vbG9jYWxuYW1lLzAvMzI3MTZBQTE2MUMyQjBEMTZEMTE2NDMyRTM3OTA5NjM5
RTNDQTY3Mi5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00
Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIw
NGZkZDY2M2YzNy82NTA2YTY2ZWQwZWZmZDZkMTUzZjljZDUyOWNjYWFkNWRjNDlk
MThmMDhhMDg1ODczYy5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpLmF1Z3VzdC50dy9yZXBvL2xvY2FsbmFtZS8wLzMyMzYzMDMy
M2E2NjYzMzIzMzNhMzEzMjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzYzMDM0
MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHBCYC/CMBIDANBgkqhkiG9w0BAQsFAAOCAQEAt2X4D4lf
HsE7+kpv/w+vF9NdC13Fo1NcSvCsG5tkU464FgQH6eNzfCMz2g0IAoLMMdxKsVid
sjxQXdWvM3HZNzV0iB077mvK0jv0ROajO5bGygKF5HiXRhGhJ9AafEZ9ucC9WX3E
Fy9GdWmzYdZ/BCZhxoxR5/ZoPoF2cQ04stOkD+T/0PR3Tf9eniXHYHDmxldX0E9T
9kxIpbnlbWm+/SzrRGQDLMstfaTEAMbURdqLBjEUyQ3koftXNjnE5fmVMqKY1I7/
EoustdjqMBbdbhv45hUIIXy3LsWn4mqhsEoUvU9ZWzq8hifEqLO9UsBgqJUFbZFt
l/X8Sncjko1gFg==
-----END CERTIFICATE-----