Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/10/32332e3133392e34302e302f32342d3234203d3e20323036343434.roa
File:                     32332e3133392e34302e302f32342d3234203d3e20323036343434.roa (raw, json)
Hash identifier:          noALcuEtU7Rnh5g72ueWMhdIr+fap2op05/0041YEfU=
Subject key identifier:   FB:77:F1:A9:C9:10:A5:1A:01:FD:23:96:7C:DE:05:0E:C9:A6:DB:9A
Certificate issuer:       /CN=7e6381cf35e8c092457f998162a6fe3923448c05258928c6af
Certificate serial:       4B2F55DBA7DCF5AEBE9B9F56B130F67CFEE0DC32
Authority key identifier: 7A:98:8B:FD:DF:3E:BD:C1:2A:66:26:E2:E2:D6:9F:A3:20:55:01:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35e8c092457f998162a6fe3923448c05258928c6af.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/10/32332e3133392e34302e302f32342d3234203d3e20323036343434.roa
Signing time:             Fri 22 Jul 2022 02:32:14 +0000
ROA not before:           Fri 22 Jul 2022 02:27:14 +0000
ROA not after:            Fri 21 Jul 2023 02:32:14 +0000
asID:                     206444
IP address blocks:        23.139.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2f:55:db:a7:dc:f5:ae:be:9b:9f:56:b1:30:f6:7c:fe:e0:dc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35e8c092457f998162a6fe3923448c05258928c6af
        Validity
            Not Before: Jul 22 02:27:14 2022 GMT
            Not After : Jul 21 02:32:14 2023 GMT
        Subject: CN=FB77F1A9C910A51A01FD23967CDE050EC9A6DB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2c:fb:b8:b7:80:05:e6:fd:65:fb:95:d9:78:
                    35:8b:38:34:06:a7:3c:7b:12:67:31:7d:50:86:db:
                    d8:1e:17:31:ee:41:44:e1:96:15:d6:ca:a4:54:1e:
                    1f:bd:1e:ca:13:7f:4c:17:45:07:45:f7:ef:85:cf:
                    40:66:69:df:b7:98:f1:d7:c9:2b:fd:69:d6:90:b0:
                    bb:6a:ec:a1:fe:57:23:c3:99:4a:e7:b2:70:2a:df:
                    df:64:c1:72:89:5d:48:6d:c9:ed:e0:71:58:ab:51:
                    01:72:a7:bd:b5:a0:0f:6d:b1:bb:e9:d6:7a:32:07:
                    a1:7b:53:9f:b1:91:18:a6:4d:5e:7c:64:24:e0:9f:
                    8c:9b:0e:ed:ee:74:8e:97:7f:4c:4b:bd:e1:2c:6f:
                    bb:5f:f0:41:23:60:f2:4f:c9:59:ac:1b:36:72:56:
                    b5:fe:44:5a:d9:96:16:29:99:25:71:2b:cc:74:12:
                    f6:f3:ed:c9:46:ae:85:71:db:61:04:08:5f:a3:e6:
                    85:14:8f:e4:26:23:80:a1:17:9d:4a:e8:92:c0:7e:
                    a4:50:6e:31:67:db:34:b1:07:eb:3f:af:7f:0f:c5:
                    a8:86:34:a7:ff:32:4c:d5:80:8a:42:d1:05:bd:ae:
                    58:6c:b0:d6:5b:a1:58:65:7f:31:b0:d8:ed:ad:00:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:77:F1:A9:C9:10:A5:1A:01:FD:23:96:7C:DE:05:0E:C9:A6:DB:9A
            X509v3 Authority Key Identifier:
                keyid:7A:98:8B:FD:DF:3E:BD:C1:2A:66:26:E2:E2:D6:9F:A3:20:55:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/10/7A988BFDDF3EBDC12A6626E2E2D69FA3205501D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35e8c092457f998162a6fe3923448c05258928c6af.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/10/32332e3133392e34302e302f32342d3234203d3e20323036343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:11:79:26:27:b9:5a:14:55:04:1f:71:2d:b8:45:4b:c1:51:
         23:82:a7:20:ad:b4:c3:b9:7b:21:4d:01:d8:42:c1:08:9d:f5:
         3a:1e:26:e7:da:62:bd:80:e5:86:3d:3e:c6:93:4d:56:2f:11:
         f7:0b:f5:67:52:f5:b5:fc:c4:b8:ce:66:b5:fa:9a:58:13:fa:
         6c:e9:70:1c:bb:8c:8b:3a:d8:4a:5b:65:43:64:69:61:da:57:
         aa:47:e8:8b:f9:89:81:e6:9d:ee:ad:93:54:66:42:88:93:7d:
         78:b7:fe:91:7c:de:63:e0:f6:1c:45:bf:48:1d:db:48:53:32:
         b3:26:85:d5:c5:64:4b:74:95:9b:60:30:0c:b8:e9:8e:9a:b6:
         01:dc:70:fb:89:46:4e:6b:50:7e:54:b6:95:22:14:ec:70:d8:
         b5:b6:3d:1e:c8:cb:b5:54:a2:b9:78:66:95:b7:1b:c4:47:3b:
         b0:7b:02:70:0e:02:ed:3e:5a:43:30:fc:34:25:df:52:56:f8:
         e9:cc:55:1f:c6:2d:99:0a:5b:3f:b5:63:a5:35:70:57:04:87:
         e4:db:49:b4:7b:c7:7a:ce:54:25:ca:9e:66:c2:0a:3c:8d:4f:
         6a:0d:80:51:54:6d:e8:c9:2e:11:29:68:53:3e:e2:57:51:03:
         f5:57:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----