Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/10/32332e3133382e3233322e302f32342d3234203d3e203530303538.roa
File:                     32332e3133382e3233322e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier:          4H1t76N/wsjtIQ6UeCl9k5E4JXsiatEPkDFD3cAtWSo=
Subject key identifier:   82:D3:3A:0F:39:6E:A9:94:6E:14:59:04:6C:64:62:7A:B6:99:75:4A
Certificate issuer:       /CN=7e6381cf35e8c092457f998162a6fe3923448c05258928c6af
Certificate serial:       7281D12EAC1C01F9D9E7D0BCA33674B071842FF5
Authority key identifier: 7A:98:8B:FD:DF:3E:BD:C1:2A:66:26:E2:E2:D6:9F:A3:20:55:01:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35e8c092457f998162a6fe3923448c05258928c6af.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/10/32332e3133382e3233322e302f32342d3234203d3e203530303538.roa
Signing time:             Fri 04 Nov 2022 22:51:56 +0000
ROA not before:           Fri 04 Nov 2022 22:46:56 +0000
ROA not after:            Fri 03 Nov 2023 22:51:56 +0000
asID:                     50058
IP address blocks:        23.138.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:81:d1:2e:ac:1c:01:f9:d9:e7:d0:bc:a3:36:74:b0:71:84:2f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35e8c092457f998162a6fe3923448c05258928c6af
        Validity
            Not Before: Nov  4 22:46:56 2022 GMT
            Not After : Nov  3 22:51:56 2023 GMT
        Subject: CN=82D33A0F396EA9946E1459046C64627AB699754A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:be:47:04:f6:c9:5f:a4:f7:75:21:c7:87:
                    d3:dd:1c:cd:f2:ad:2f:1f:0f:c1:45:5b:62:ff:40:
                    91:91:60:40:61:bb:6b:bc:0f:32:74:9f:72:df:f6:
                    98:66:f0:cf:e8:47:d0:c9:d1:06:0d:da:f2:b1:77:
                    fd:31:b1:44:6e:d1:c0:19:6b:71:94:a8:54:69:3a:
                    71:db:c4:a9:d9:34:75:af:fc:ec:27:33:88:42:72:
                    9a:aa:75:bb:36:49:ac:a5:0b:0b:38:d5:71:b0:af:
                    7f:bb:9f:75:74:ad:2d:21:e7:87:e9:07:83:81:27:
                    58:41:c9:2f:49:f9:8d:bf:43:d3:34:6e:32:12:75:
                    f0:36:7a:27:7a:75:f7:32:14:7c:ff:ed:6c:ad:d4:
                    ef:eb:34:c9:29:70:8b:0b:70:15:db:7e:31:d3:55:
                    a9:36:d9:4b:16:df:7a:a9:81:79:82:b4:a3:a6:48:
                    7c:cb:ce:ad:f0:df:d5:12:8e:f3:92:5e:ab:5f:fe:
                    a6:43:c0:10:90:b5:75:40:c6:ab:a9:dc:fd:67:3d:
                    aa:44:1e:d3:13:18:b6:74:0d:ba:fe:6a:45:37:3b:
                    27:be:a2:18:ba:0c:c0:d9:b1:e3:08:c1:db:90:f0:
                    f0:d7:ea:7f:8e:60:35:de:89:e5:13:6c:c4:69:e3:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:3A:0F:39:6E:A9:94:6E:14:59:04:6C:64:62:7A:B6:99:75:4A
            X509v3 Authority Key Identifier:
                keyid:7A:98:8B:FD:DF:3E:BD:C1:2A:66:26:E2:E2:D6:9F:A3:20:55:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/10/7A988BFDDF3EBDC12A6626E2E2D69FA3205501D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35e8c092457f998162a6fe3923448c05258928c6af.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/10/32332e3133382e3233322e302f32342d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:f6:1c:d2:77:4a:c0:a9:2b:bf:2a:a0:16:cc:fe:d8:8a:54:
         68:77:e0:0d:32:02:25:b6:7f:9c:6f:c3:b8:8d:bf:56:e1:ab:
         04:37:61:c2:ca:80:5c:d3:02:95:7f:4c:89:41:07:04:e0:9c:
         39:57:5d:3d:88:84:87:7c:b1:21:c8:2c:c3:99:63:f5:ec:78:
         8d:09:43:af:2a:d9:d4:0b:a7:c7:1b:91:7e:10:77:cc:de:7b:
         8d:ad:c7:3a:b1:d3:36:bc:57:4d:05:bf:bb:f1:e0:f0:ce:1f:
         b7:61:9d:e7:fc:e6:5c:a6:26:6b:71:3f:5e:b8:e2:53:6b:93:
         bd:7f:35:51:2c:f6:53:66:d1:ed:b6:ad:90:4b:f2:af:b7:c9:
         ed:68:cb:db:b7:ab:12:db:01:a7:0f:de:03:da:fe:27:f0:2a:
         72:3b:02:41:e1:d4:74:ea:f9:79:da:eb:2d:d7:c8:94:e7:f3:
         b5:af:c5:44:cf:a4:36:ed:9a:2d:83:62:14:12:b4:9b:2d:ca:
         b7:92:3a:c3:7e:39:72:1a:2d:2c:16:53:c1:57:e0:13:0c:15:
         f1:56:8e:f7:9b:84:50:41:e8:c4:e6:be:37:1a:0b:91:62:45:
         2e:ca:dd:af:5a:e8:d7:d4:67:92:2a:94:96:66:bf:96:9c:21:
         9e:a9:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----