Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/0/323630323a666332333a3330303a3a2f34302d3438203d3e2037343830.roa
File:                     323630323a666332333a3330303a3a2f34302d3438203d3e2037343830.roa (raw, json)
Hash identifier:          qIdISBZiQa4SPcRttwb2Yp63p5d/K0vx0zfZsuIu4Cs=
Subject key identifier:   D8:DF:47:8E:ED:D6:EC:1B:B7:A9:FE:7F:82:9D:C8:B9:03:D3:9D:66
Certificate issuer:       /CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
Certificate serial:       1A11314EB0CFC9B3757F9FEA314A1497402BB5B0
Authority key identifier: 32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/0/323630323a666332333a3330303a3a2f34302d3438203d3e2037343830.roa
Signing time:             Mon 29 Aug 2022 17:54:10 +0000
ROA not before:           Mon 29 Aug 2022 17:49:10 +0000
ROA not after:            Mon 28 Aug 2023 17:54:10 +0000
asID:                     7480
IP address blocks:        2602:fc23:300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:11:31:4e:b0:cf:c9:b3:75:7f:9f:ea:31:4a:14:97:40:2b:b5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
        Validity
            Not Before: Aug 29 17:49:10 2022 GMT
            Not After : Aug 28 17:54:10 2023 GMT
        Subject: CN=D8DF478EEDD6EC1BB7A9FE7F829DC8B903D39D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:75:54:35:3e:39:00:09:b7:ad:51:4a:1b:
                    a3:a8:6f:83:ff:d9:55:19:27:21:3f:cc:04:53:d3:
                    52:b2:10:99:37:0b:9a:20:19:96:a6:31:0a:38:2a:
                    e2:c8:6b:a2:0d:54:4b:1c:b7:fe:e5:7e:6b:9c:c4:
                    84:4e:91:d4:5d:80:2b:fa:38:ba:9e:fa:3e:64:4b:
                    00:a3:19:ac:bf:a0:33:6d:b2:cc:a3:29:3d:94:31:
                    e6:67:69:2d:98:cc:cc:17:8e:38:cb:df:a2:15:be:
                    f3:7c:24:27:22:8b:ea:e8:fb:c2:01:10:58:94:f9:
                    e3:5f:c9:46:92:25:88:03:39:39:18:ec:6a:05:d8:
                    3f:89:e8:1b:ec:7a:3c:43:11:b1:b9:65:70:b2:87:
                    ba:7a:3c:7b:81:90:d2:d3:30:3d:04:75:5e:01:70:
                    fe:f6:f5:17:f8:3a:ac:6b:b4:23:e5:6a:55:b3:fc:
                    32:1b:0a:13:66:a7:4b:3d:c5:b8:bb:37:94:fc:10:
                    73:9e:d1:c1:e4:05:23:e0:bb:d2:32:9b:50:9c:34:
                    98:75:46:b7:9d:57:6c:ed:e2:ea:7c:15:de:32:01:
                    0b:c7:13:32:49:ad:f9:0f:43:50:63:52:91:65:f7:
                    e8:91:4e:bc:18:3e:d7:4b:4a:cf:94:1d:62:14:5d:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:47:8E:ED:D6:EC:1B:B7:A9:FE:7F:82:9D:C8:B9:03:D3:9D:66
            X509v3 Authority Key Identifier:
                keyid:32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/0/32716AA161C2B0D16D116432E37909639E3CA672.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/0/323630323a666332333a3330303a3a2f34302d3438203d3e2037343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:84:1b:b2:ea:2c:22:01:c1:45:be:b2:1f:c5:e9:0b:88:ce:
         6d:92:f8:1a:33:4b:15:33:55:1d:80:cf:8a:df:08:60:41:28:
         59:91:01:e9:c6:01:24:de:9c:19:9b:24:83:8a:84:e7:eb:64:
         63:45:93:56:3e:9e:8b:0a:e7:af:42:c2:a0:1a:6d:ef:84:ef:
         a7:99:ad:3d:6f:ca:8a:cc:c4:9f:d7:50:22:7f:e3:c9:bb:e2:
         cc:a0:8a:f2:50:3b:09:19:29:59:cc:ff:6b:e6:db:52:6c:1a:
         c6:1e:7f:bb:95:78:63:06:b3:e9:95:4d:3f:11:e0:a3:cb:75:
         f6:fb:ee:78:46:4d:cb:ff:d5:99:e6:4f:c3:06:bf:33:8f:a0:
         fc:be:06:a5:a9:df:d9:9e:27:1e:74:59:5d:95:50:07:8a:d0:
         fb:11:6a:62:e5:ff:0b:1c:95:d8:0c:9b:f2:95:ac:9a:9b:cd:
         52:d8:21:06:e0:43:2b:bd:5d:27:45:dd:75:df:96:31:4f:55:
         b5:53:c6:7d:e0:76:5a:f9:c3:52:88:e2:8e:e7:28:3b:26:50:
         5a:3d:86:b7:2b:a9:3a:67:a9:40:17:0c:55:4d:eb:db:57:97:
         4a:e3:4e:cd:ed:a7:8f:4f:57:1a:e1:ec:ea:97:d7:c3:96:a6:
         76:77:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----