Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/10/32332e3133392e34302e302f32332d3233203d3e203530303538.roa
File:                     32332e3133392e34302e302f32332d3233203d3e203530303538.roa (raw, json)
Hash identifier:          8uxBPMmhgQsOUK2I6j281ShfsogCSof4azYe+EMckg0=
Subject key identifier:   BD:54:83:C6:D8:C8:B5:CB:BA:40:D0:39:FC:09:88:B8:31:46:ED:AD
Certificate issuer:       /CN=7e6381cf35e8c092457f998162a6fe3923448c05258928c6af
Certificate serial:       7F004A0464558B1B2BE00B7DC148E29592005CA4
Authority key identifier: 7A:98:8B:FD:DF:3E:BD:C1:2A:66:26:E2:E2:D6:9F:A3:20:55:01:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35e8c092457f998162a6fe3923448c05258928c6af.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/10/32332e3133392e34302e302f32332d3233203d3e203530303538.roa
Signing time:             Thu 21 Jul 2022 21:57:09 +0000
ROA not before:           Thu 21 Jul 2022 21:52:09 +0000
ROA not after:            Thu 20 Jul 2023 21:57:09 +0000
asID:                     50058
IP address blocks:        23.139.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:00:4a:04:64:55:8b:1b:2b:e0:0b:7d:c1:48:e2:95:92:00:5c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35e8c092457f998162a6fe3923448c05258928c6af
        Validity
            Not Before: Jul 21 21:52:09 2022 GMT
            Not After : Jul 20 21:57:09 2023 GMT
        Subject: CN=BD5483C6D8C8B5CBBA40D039FC0988B83146EDAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:4e:22:59:cd:26:7f:86:81:8a:4b:e0:ba:
                    50:56:f3:f0:72:e0:3f:10:97:bf:bb:44:b6:1a:f9:
                    54:31:e4:7c:d3:17:93:a4:24:eb:a2:ce:55:41:f7:
                    0a:38:f5:ab:e2:13:f6:1f:33:64:ec:b0:04:9f:62:
                    ed:a0:41:f0:82:8e:3b:fc:75:2f:1a:c3:01:23:08:
                    19:5f:b3:04:3c:a5:39:5f:3b:f5:ff:f0:25:9e:86:
                    31:7e:55:88:b3:19:70:dd:5f:10:2b:db:a6:30:b2:
                    8d:fa:66:31:86:95:9d:61:41:60:e2:e1:cc:b4:4f:
                    73:72:e5:c7:ae:c1:cb:5c:58:18:33:87:25:1e:5c:
                    93:b9:6e:fb:96:2b:c3:0f:fc:ff:46:29:64:3b:a0:
                    ec:bb:33:80:eb:97:04:87:e0:b1:56:d6:17:6b:c3:
                    c0:ed:16:cd:58:18:7d:ad:d8:be:b5:d5:25:ed:b2:
                    62:63:e1:0b:83:cb:af:3b:08:12:73:4d:65:75:0d:
                    6f:52:5d:8f:51:09:ae:64:a9:08:df:67:26:84:00:
                    53:96:42:58:92:4d:6b:0d:ca:a0:58:0b:d2:75:4b:
                    3a:c1:d0:fb:cf:d9:60:ca:8f:bb:9c:52:2a:f0:48:
                    63:29:15:5a:c1:cf:a8:30:ec:e9:c4:be:bd:1e:f5:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:54:83:C6:D8:C8:B5:CB:BA:40:D0:39:FC:09:88:B8:31:46:ED:AD
            X509v3 Authority Key Identifier:
                keyid:7A:98:8B:FD:DF:3E:BD:C1:2A:66:26:E2:E2:D6:9F:A3:20:55:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/10/7A988BFDDF3EBDC12A6626E2E2D69FA3205501D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35e8c092457f998162a6fe3923448c05258928c6af.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/10/32332e3133392e34302e302f32332d3233203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:8a:f3:a0:f9:f1:12:4b:dd:42:76:7e:b5:9f:dc:7b:23:f0:
         cc:eb:5c:66:a4:57:54:fe:81:f4:35:84:92:f6:40:a0:d9:23:
         05:54:e5:fb:e7:09:d4:19:ad:30:4f:14:51:bd:1d:bd:c3:13:
         a7:24:91:85:3a:de:f6:77:0d:fc:74:03:2d:74:02:84:8e:e1:
         46:9b:b9:f4:16:71:fb:39:c4:94:02:37:a9:e1:bb:ff:80:94:
         43:a2:65:2e:c8:11:17:69:ea:e5:1e:c3:21:28:47:f7:33:4f:
         fc:25:49:a1:1f:a8:36:42:d1:24:6c:1f:a2:a8:82:34:bb:53:
         f8:af:91:84:0c:df:2a:5d:98:09:02:58:34:27:2c:00:be:3c:
         7e:a0:75:90:41:85:31:5f:85:15:37:27:ee:fe:48:7b:01:ee:
         2b:13:ea:9b:46:b0:20:41:6b:29:65:e7:57:aa:48:c0:d0:41:
         c5:90:8a:a6:2d:c1:e3:64:47:a9:5e:28:fc:44:38:e2:83:27:
         99:23:f1:74:47:f1:a1:dd:78:55:d3:a6:07:40:61:f4:df:4f:
         73:16:a9:11:f8:01:1c:c8:96:78:39:c5:25:2e:29:2a:9b:8d:
         f2:3c:a6:9c:4b:73:0e:20:43:c3:b4:be:4b:5b:a0:5a:b0:c8:
         c5:a5:ca:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----