Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/13/323630363a623063303a3a2f33322d3332203d3e203530303538.roa
File:                     323630363a623063303a3a2f33322d3332203d3e203530303538.roa (raw, json)
Hash identifier:          ApJi+2hItZWeuq2tjF6u3Io19cGH9Ygu3iNro2eBB3g=
Subject key identifier:   C2:36:D1:15:BB:CB:F6:6D:D9:0A:57:C1:C5:04:18:5B:AC:42:1D:A3
Certificate issuer:       /CN=62f3d0af16a34f325ae1d4970ed464d06b7604fc3d0634f78b
Certificate serial:       6FDC74FBD4467B3653EA854D18137BD447B6654D
Authority key identifier: AE:89:08:F6:40:33:49:88:97:69:A2:00:41:8D:9D:27:BE:64:1B:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16a34f325ae1d4970ed464d06b7604fc3d0634f78b.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/13/323630363a623063303a3a2f33322d3332203d3e203530303538.roa
Signing time:             Sun 30 Oct 2022 16:14:44 +0000
ROA not before:           Sun 30 Oct 2022 16:09:44 +0000
ROA not after:            Sun 29 Oct 2023 16:14:44 +0000
asID:                     50058
IP address blocks:        2606:b0c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dc:74:fb:d4:46:7b:36:53:ea:85:4d:18:13:7b:d4:47:b6:65:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16a34f325ae1d4970ed464d06b7604fc3d0634f78b
        Validity
            Not Before: Oct 30 16:09:44 2022 GMT
            Not After : Oct 29 16:14:44 2023 GMT
        Subject: CN=C236D115BBCBF66DD90A57C1C504185BAC421DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0d:98:0e:0b:11:ce:88:9b:2d:f2:be:e0:da:
                    31:82:b9:f5:e7:33:1e:b2:c3:50:32:c5:cd:93:e7:
                    3d:ab:c5:71:c1:5e:cf:1f:a9:a6:7c:30:fd:ce:1f:
                    ad:a4:c1:17:e9:f7:ab:54:1e:b7:2d:4a:09:77:b8:
                    43:bd:19:a7:de:70:29:06:e8:cd:41:c6:8d:04:50:
                    de:23:44:e7:33:6e:2f:15:68:a0:7e:88:c9:ee:a0:
                    8e:06:74:9e:bf:97:a3:98:a8:27:ba:3c:84:ff:55:
                    5b:ce:9e:68:a9:9a:b1:20:ef:48:85:4d:ba:7a:5c:
                    08:78:9f:2e:17:e6:8c:e9:b0:b6:3a:0f:c9:21:22:
                    e1:6b:34:a0:44:cc:36:9b:ef:07:e3:b4:00:19:99:
                    df:39:8a:9b:05:38:7d:17:48:89:d2:f3:c2:b3:0d:
                    de:92:ae:70:71:81:99:b6:10:1e:d5:ca:1c:8f:1f:
                    b7:9b:3d:47:11:e2:ca:49:ca:11:c6:91:e7:0f:b1:
                    2d:6c:d4:d2:ab:49:24:4a:ca:d1:e5:cb:a0:75:35:
                    89:c3:f0:4d:24:a0:0a:53:af:bd:a0:95:a8:24:8a:
                    6f:44:7c:22:16:d2:f5:a7:88:7d:05:f6:a5:54:85:
                    ca:d1:f8:a5:41:de:d6:33:2f:99:0c:90:7a:e2:6c:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:36:D1:15:BB:CB:F6:6D:D9:0A:57:C1:C5:04:18:5B:AC:42:1D:A3
            X509v3 Authority Key Identifier:
                keyid:AE:89:08:F6:40:33:49:88:97:69:A2:00:41:8D:9D:27:BE:64:1B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/13/AE8908F6403349889769A200418D9D27BE641BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16a34f325ae1d4970ed464d06b7604fc3d0634f78b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/13/323630363a623063303a3a2f33322d3332203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:dd:51:5f:d1:33:80:aa:97:9a:aa:24:a5:3c:50:ff:9c:c3:
         41:46:77:a3:57:94:26:1a:68:c3:75:df:8d:a1:e3:25:79:2e:
         ae:9c:78:6d:c7:1d:14:1a:a9:71:c5:1a:6c:8e:76:27:3f:e4:
         23:88:06:65:cb:d0:9b:2f:d3:51:41:5f:bc:73:8d:10:ac:b7:
         a4:73:c2:54:d0:1a:59:ed:98:95:16:cf:c3:57:59:d4:b1:47:
         0e:92:c8:c0:13:70:42:b0:63:82:93:82:7a:ed:ae:29:dc:3b:
         52:ff:76:39:a1:6d:80:03:f0:43:08:67:ac:13:84:df:0b:e2:
         ad:47:64:91:9a:6e:23:e6:8c:3a:6f:d0:c0:86:40:72:0d:e7:
         2b:59:65:5c:42:ac:b6:e5:e9:85:2b:2b:f3:cb:6a:83:c0:96:
         4b:54:46:84:39:d2:0b:bd:55:13:ba:ff:5c:ff:45:77:4e:56:
         50:53:c1:88:d5:ab:96:ef:91:50:b8:3b:5f:3d:ea:f7:d6:38:
         19:d0:42:b9:55:99:23:f4:ac:4a:ec:b0:ed:2b:b3:8e:a4:38:
         ea:ab:90:fc:0b:9b:fe:49:33:cd:b3:9e:44:41:05:1f:7c:33:
         ae:de:6b:f5:87:74:c0:63:7c:94:3b:59:2e:7b:c0:95:e3:26:
         25:e8:2e:e1
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUb9x0+9RGezZT6oVNGBN71Ee2ZU0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjJmM2QwYWYxNmEzNGYzMjVhZTFkNDk3MGVkNDY0ZDA2
Yjc2MDRmYzNkMDYzNGY3OGIwHhcNMjIxMDMwMTYwOTQ0WhcNMjMxMDI5MTYxNDQ0
WjAzMTEwLwYDVQQDEyhDMjM2RDExNUJCQ0JGNjZERDkwQTU3QzFDNTA0MTg1QkFD
NDIxREEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A2YDgsRzoib
LfK+4Noxgrn15zMessNQMsXNk+c9q8VxwV7PH6mmfDD9zh+tpMEX6ferVB63LUoJ
d7hDvRmn3nApBujNQcaNBFDeI0TnM24vFWigfojJ7qCOBnSev5ejmKgnujyE/1Vb
zp5oqZqxIO9IhU26elwIeJ8uF+aM6bC2Og/JISLhazSgRMw2m+8H47QAGZnfOYqb
BTh9F0iJ0vPCsw3ekq5wcYGZthAe1cocjx+3mz1HEeLKScoRxpHnD7EtbNTSq0kk
SsrR5cugdTWJw/BNJKAKU6+9oJWoJIpvRHwiFtL1p4h9BfalVIXK0filQd7WMy+Z
DJB64mznVQIDAQABo4ICbTCCAmkwHQYDVR0OBBYEFMI20RW7y/Zt2QpXwcUEGFus
Qh2jMB8GA1UdIwQYMBaAFK6JCPZAM0mIl2miAEGNnSe+ZBvuMA4GA1UdDwEB/wQE
AwIHgDBmBgNVHR8EXzBdMFugWaBXhlVyc3luYzovL3Jwa2kuYXVndXN0LnR3L3Jl
cG8vbG9jYWxuYW1lLzEzL0FFODkwOEY2NDAzMzQ5ODg5NzY5QTIwMDQxOEQ5RDI3
QkU2NDFCRUUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzIt
NGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTA1NGQxZS04MzI2LTQyYTctYjFhZC0w
MmIzMDI4N2I0ODMvNjJmM2QwYWYxNmEzNGYzMjVhZTFkNDk3MGVkNDY0ZDA2Yjc2
MDRmYzNkMDYzNGY3OGIuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4Zh
cnN5bmM6Ly9ycGtpLmF1Z3VzdC50dy9yZXBvL2xvY2FsbmFtZS8xMy8zMjM2MzAz
NjNhNjIzMDYzMzAzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzNTMwMzAzNTM4LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJgawwDANBgkqhkiG9w0BAQsFAAOCAQEAsd1RX9EzgKqXmqokpTxQ
/5zDQUZ3o1eUJhpow3XfjaHjJXkurpx4bccdFBqpccUabI52Jz/kI4gGZcvQmy/T
UUFfvHONEKy3pHPCVNAaWe2YlRbPw1dZ1LFHDpLIwBNwQrBjgpOCeu2uKdw7Uv92
OaFtgAPwQwhnrBOE3wvirUdkkZpuI+aMOm/QwIZAcg3nK1llXEKstuXphSsr88tq
g8CWS1RGhDnSC71VE7r/XP9Fd05WUFPBiNWrlu+RULg7Xz3q99Y4GdBCuVWZI/Ss
Suyw7SuzjqQ46quQ/Aub/kkzzbOeREEFH3wzrt5r9Yd0wGN8lDtZLnvAleMmJegu
4Q==
-----END CERTIFICATE-----