Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS201751.roa
File:                     AS201751.roa (raw, json)
Hash identifier:          XXeFIjhMnUD0GiWIFo+pERjcDA7iUXx68+bRGrAo61Q=
Subject key identifier:   2E:E1:3E:13:D1:8F:B0:99:BD:93:B3:C1:E1:4D:CB:EA:A4:4F:1C:25
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       5BACA6AA95AA5CDFE92FE5BE355AAB0C7183C34C
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS201751.roa
Signing time:             Tue 01 Nov 2022 12:13:43 +0000
ROA not before:           Tue 01 Nov 2022 12:08:43 +0000
ROA not after:            Tue 31 Oct 2023 12:13:43 +0000
asID:                     201751
IP address blocks:        2a12:dd47:83a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ac:a6:aa:95:aa:5c:df:e9:2f:e5:be:35:5a:ab:0c:71:83:c3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Nov  1 12:08:43 2022 GMT
            Not After : Oct 31 12:13:43 2023 GMT
        Subject: CN=2EE13E13D18FB099BD93B3C1E14DCBEAA44F1C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:45:03:76:e8:19:e6:6e:f2:c6:69:9f:d0:
                    7d:a0:fd:a3:c0:cc:51:d1:53:b1:e4:ff:1e:3f:da:
                    54:40:ab:3d:97:59:e8:3c:2a:d9:5b:b7:f7:2a:b5:
                    c5:0d:56:04:12:84:9c:2e:1a:2d:41:8d:ee:7c:a2:
                    f8:df:02:f5:81:b9:42:b5:0e:26:2c:94:4f:21:ba:
                    e7:a6:a5:9b:c2:b8:02:1c:4a:f7:38:76:5e:df:88:
                    73:5a:44:01:0a:1c:90:8d:a5:cc:2c:57:24:7d:30:
                    68:17:5c:3d:1a:51:96:04:16:da:2d:76:c5:45:3d:
                    e6:10:72:30:2a:4d:ec:06:28:34:03:4d:3d:ea:c3:
                    04:b0:5a:e0:8e:c0:50:2d:a1:4f:76:98:5b:91:08:
                    30:3a:58:a5:36:d0:0f:d8:ae:08:71:eb:76:8f:59:
                    46:a1:f1:62:54:45:73:94:18:fa:9d:85:5e:66:ab:
                    2b:8d:7a:29:c2:90:6c:7b:e0:1e:71:85:61:dc:7d:
                    45:17:24:17:58:7b:ff:fd:3b:5e:40:5c:3e:a7:0c:
                    bd:0c:01:16:d2:1f:f0:30:b0:1b:cd:b7:58:25:1f:
                    a9:39:b2:e0:da:e7:2c:98:45:3c:1c:d8:b0:87:11:
                    8f:08:12:56:30:38:9f:c1:71:1e:d8:c8:7a:79:14:
                    d1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E1:3E:13:D1:8F:B0:99:BD:93:B3:C1:E1:4D:CB:EA:A4:4F:1C:25
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS201751.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:83a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:86:9c:ef:0f:f2:68:d7:75:04:0a:66:75:d6:56:e1:06:22:
         94:26:8d:f2:1f:33:83:b4:52:d5:f6:97:52:bc:20:84:a0:50:
         9c:40:c5:98:d0:9c:52:41:a7:95:10:fe:43:f7:ed:60:f1:90:
         42:bb:e3:1e:f6:c1:20:22:b1:17:63:5e:e6:a1:3a:02:92:b4:
         ec:01:f3:30:55:8a:a3:39:5a:12:db:cc:80:92:0d:4a:5e:f6:
         8b:22:02:1f:bc:66:6d:33:64:3e:62:83:6c:d6:e8:27:dc:a7:
         d4:fa:4b:fb:2f:99:18:f1:04:64:d0:b3:71:17:7b:45:84:6e:
         b0:71:46:5a:66:37:35:bd:77:48:d9:c3:ad:5a:a9:5d:97:01:
         22:9b:36:b9:4e:6e:4d:b4:8b:6a:5a:eb:56:81:4f:82:f8:f5:
         ca:e1:c0:0b:39:06:01:14:5d:eb:50:1d:7c:ec:85:b2:f6:24:
         30:8b:91:17:38:18:28:bd:ff:d4:e3:7e:fa:07:a4:26:6a:f9:
         ad:49:df:b6:4b:b2:bc:fc:9f:96:8b:ff:51:75:a3:f2:99:fd:
         5a:94:69:8d:55:32:5e:3a:26:35:cb:e7:f2:82:fd:e6:82:f8:
         e6:15:24:4a:e9:df:50:e4:1f:df:99:29:2d:a9:28:7e:04:1e:
         b6:39:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----