Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS201445.roa
File:                     AS201445.roa (raw, json)
Hash identifier:          3hmldGhuv26g3tLyiSXzay3Nlhwr5cffXRTGq47lk2M=
Subject key identifier:   3C:23:56:79:B3:3A:FD:C8:24:49:15:96:6C:51:D1:D4:98:6B:7A:5E
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       1D710D93829AA08B1338561D4CE68EA27D711F9F
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS201445.roa
Signing time:             Wed 09 Nov 2022 17:03:40 +0000
ROA not before:           Wed 09 Nov 2022 16:58:40 +0000
ROA not after:            Wed 08 Nov 2023 17:03:40 +0000
asID:                     201445
IP address blocks:        2a12:dd47:816f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:71:0d:93:82:9a:a0:8b:13:38:56:1d:4c:e6:8e:a2:7d:71:1f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Nov  9 16:58:40 2022 GMT
            Not After : Nov  8 17:03:40 2023 GMT
        Subject: CN=3C235679B33AFDC8244915966C51D1D4986B7A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:87:09:78:0f:01:df:8f:30:c0:6b:fb:77:
                    a7:a0:f3:f4:f6:f5:d5:b8:21:1b:71:7b:31:ec:db:
                    ab:ea:5d:47:36:dc:26:f2:a4:b2:2a:7a:c9:42:1c:
                    6d:4c:a6:25:e6:f3:98:1e:8b:bb:d6:fd:5e:64:f4:
                    32:be:fc:24:1b:fe:a0:41:29:ca:2a:25:fa:eb:e8:
                    d2:c7:a8:85:46:04:46:c8:a9:54:ac:23:4a:fd:d3:
                    37:5e:f9:0d:cc:30:f8:d4:53:9b:8d:0a:0b:51:21:
                    d3:f9:6c:58:c9:f9:f4:5b:64:26:f8:77:0a:2e:95:
                    b6:cc:1d:bc:bd:ad:ab:da:38:de:38:d6:9c:15:bf:
                    be:6d:a6:c2:5f:98:fa:99:d0:0c:e0:03:c5:a4:20:
                    26:31:40:35:c2:58:81:fb:81:ad:87:b3:7d:3b:19:
                    ef:31:f9:47:78:94:b7:03:66:2b:8c:72:7d:64:4d:
                    c0:44:5e:16:29:15:36:b9:7f:30:09:17:b9:4d:97:
                    28:51:64:13:71:6d:b3:d6:2f:0a:4c:fb:59:78:9a:
                    c1:ee:55:32:d5:90:4c:1d:4b:c1:a0:fa:c8:24:ed:
                    0e:16:70:ec:18:0e:98:77:16:13:42:de:b8:9a:a2:
                    bc:54:4a:4c:95:32:a9:93:45:8b:31:d3:2b:2b:83:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:23:56:79:B3:3A:FD:C8:24:49:15:96:6C:51:D1:D4:98:6B:7A:5E
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS201445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816f::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:85:c5:80:ee:d6:83:f0:35:cc:73:75:44:83:a0:78:3c:2c:
         cc:4f:e8:0f:59:76:35:50:57:e3:dd:2b:d7:a2:02:51:0b:ea:
         6e:4a:23:8c:2f:be:f2:d6:26:8b:74:c2:c7:97:43:5b:ed:80:
         03:9c:3f:88:f9:de:18:e9:dc:16:7b:e6:00:1a:a8:aa:95:46:
         73:82:47:a9:6d:10:f8:13:6c:0a:5c:4f:66:a6:36:9c:7d:af:
         a6:2b:f9:ba:18:eb:d6:3c:c4:54:5f:16:a7:d1:5a:99:31:d5:
         ca:1d:c4:a5:97:5c:07:09:6c:03:71:84:dc:4d:19:45:79:7e:
         18:2f:de:20:7f:48:46:8f:83:b7:8a:ee:88:ca:6a:7c:bd:f3:
         f0:cf:4c:9a:20:fc:01:84:4d:5f:c0:6c:33:99:c5:ef:86:12:
         4a:27:06:42:9e:bd:a8:2d:52:6c:c1:4a:01:90:0e:ba:66:06:
         56:a5:29:ec:09:6c:c4:79:ac:81:60:f4:e7:53:92:be:85:f8:
         1c:33:02:27:e7:94:7c:79:67:75:5f:7f:f1:cd:e4:d5:d9:a0:
         1c:d7:e7:71:ac:91:68:aa:b5:83:10:ec:d0:c7:1f:23:af:2e:
         d7:25:e8:fa:cc:5a:ca:56:4f:96:69:d6:a2:c6:23:87:a6:11:
         66:f9:57:98
-----BEGIN CERTIFICATE-----
MIIEpzCCA4+gAwIBAgIUHXENk4KaoIsTOFYdTOaOon1xH58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2IzMGE1YjY0NzVlMGVhOTI0NTcyZjJjOGJkMjQzODgx
NWM3MTA4MTAeFw0yMjExMDkxNjU4NDBaFw0yMzExMDgxNzAzNDBaMDMxMTAvBgNV
BAMTKDNDMjM1Njc5QjMzQUZEQzgyNDQ5MTU5NjZDNTFEMUQ0OTg2QjdBNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyocJeA8B348wwGv7d6eg8/T2
9dW4IRtxezHs26vqXUc23CbypLIqeslCHG1MpiXm85gei7vW/V5k9DK+/CQb/qBB
KcoqJfrr6NLHqIVGBEbIqVSsI0r90zde+Q3MMPjUU5uNCgtRIdP5bFjJ+fRbZCb4
dwoulbbMHby9ravaON441pwVv75tpsJfmPqZ0AzgA8WkICYxQDXCWIH7ga2Hs307
Ge8x+Ud4lLcDZiuMcn1kTcBEXhYpFTa5fzAJF7lNlyhRZBNxbbPWLwpM+1l4msHu
VTLVkEwdS8Gg+sgk7Q4WcOwYDph3FhNC3riaorxUSkyVMqmTRYsx0ysrg+DVAgMB
AAGjggGxMIIBrTAdBgNVHQ4EFgQUPCNWebM6/cgkSRWWbFHR1Jhrel4wHwYDVR0j
BBgwFoAUOzCltkdeDqkkVy8si9JDiBXHEIEwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraS5hdWd1c3QudHcvcmVwby9sb2NhbG5h
bWUvNi8zQjMwQTVCNjQ3NUUwRUE5MjQ1NzJGMkM4QkQyNDM4ODE1QzcxMDgxLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvT3pDbHRrZGVEcWtrVnk4c2k5SkRpQlhI
RUlFLmNlcjBQBggrBgEFBQcBCwREMEIwQAYIKwYBBQUHMAuGNHJzeW5jOi8vcnBr
aS5hdWd1c3QudHcvcmVwby9sb2NhbG5hbWUvNi9BUzIwMTQ0NS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACoS3UeBbzANBgkqhkiG9w0BAQsFAAOCAQEAsYXFgO7Wg/A1zHN1RIOgeDwszE/o
D1l2NVBX490r16ICUQvqbkojjC++8tYmi3TCx5dDW+2AA5w/iPneGOncFnvmABqo
qpVGc4JHqW0Q+BNsClxPZqY2nH2vpiv5uhjr1jzEVF8Wp9FamTHVyh3EpZdcBwls
A3GE3E0ZRXl+GC/eIH9IRo+Dt4ruiMpqfL3z8M9MmiD8AYRNX8BsM5nF74YSSicG
Qp69qC1SbMFKAZAOumYGVqUp7AlsxHmsgWD051OSvoX4HDMCJ+eUfHlndV9/8c3k
1dmgHNfncayRaKq1gxDs0McfI68u1yXo+sxaylZPlmnWosYjh6YRZvlXmA==
-----END CERTIFICATE-----