Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS202685.roa
File:                     AS202685.roa (raw, json)
Hash identifier:          mA5Pcf2RaahMnDJmaYV0m5Pzf/g0jY/ZyBzUPvxSu3s=
Subject key identifier:   4E:05:8D:37:83:33:09:85:86:B0:EF:45:9F:32:55:C8:C0:15:46:34
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       29373F5FEA9A4C980AF185B13679E4B8ADBD0A8F
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS202685.roa
Signing time:             Wed 28 Sep 2022 06:31:43 +0000
ROA not before:           Wed 28 Sep 2022 06:26:43 +0000
ROA not after:            Wed 27 Sep 2023 06:31:43 +0000
asID:                     202685
IP address blocks:        2a12:dd47:8500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:37:3f:5f:ea:9a:4c:98:0a:f1:85:b1:36:79:e4:b8:ad:bd:0a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 28 06:26:43 2022 GMT
            Not After : Sep 27 06:31:43 2023 GMT
        Subject: CN=4E058D378333098586B0EF459F3255C8C0154634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:67:05:96:e2:0f:84:5e:e2:15:ab:85:98:06:
                    54:f6:3d:4c:92:cd:3e:35:df:b8:d5:0d:19:12:6e:
                    ed:b3:ca:38:dc:1a:fc:6c:c5:a4:d1:6e:eb:7e:49:
                    51:e1:47:85:34:15:25:53:7f:2f:57:9b:e0:f7:73:
                    72:29:dd:e2:2d:ff:dd:52:0e:6e:5c:2b:9e:12:53:
                    c0:c9:70:9a:85:2b:c8:5c:79:31:97:b7:02:11:8b:
                    05:a1:43:20:0b:78:13:e4:5d:03:84:49:f8:cd:9f:
                    e0:b5:a8:fc:3f:df:21:88:8f:42:37:a0:f0:b0:b0:
                    33:12:85:f6:86:b8:51:67:af:4a:48:29:1d:15:04:
                    36:a2:80:9a:3a:bd:92:06:34:36:08:b1:60:38:f6:
                    96:ee:c5:44:a2:86:e6:e1:a6:39:e1:31:dc:c2:06:
                    c5:ba:66:9b:87:d3:c5:e7:42:01:0d:9a:50:52:65:
                    41:16:c3:69:7a:90:77:5d:43:11:87:5b:1a:3d:40:
                    98:c6:8b:b2:28:2e:1f:75:af:2b:34:20:3a:9c:5b:
                    6f:a0:72:dd:a3:6f:86:9c:e6:25:68:8b:3b:3b:e4:
                    ce:41:a0:80:ad:3b:8c:f9:d7:64:ec:f3:bd:6d:8f:
                    5f:1a:68:33:d2:b5:fa:16:c6:f5:9b:e9:7d:38:a8:
                    9c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:05:8D:37:83:33:09:85:86:B0:EF:45:9F:32:55:C8:C0:15:46:34
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS202685.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:31:3a:a3:a1:3f:4e:e1:18:74:4b:99:6b:ac:64:07:e9:9f:
         81:70:b8:ba:1f:2e:c1:5d:91:80:9e:f9:73:33:e3:fc:d3:77:
         cf:b4:dd:c4:a5:a2:2a:47:52:8e:3a:e1:f6:3d:69:a4:3f:f3:
         1d:fc:5b:2d:9c:ed:57:06:16:95:6b:16:d3:0b:b9:5d:43:f1:
         71:f0:27:98:59:9f:6f:53:6d:f1:37:fd:90:e4:e2:5e:97:02:
         92:83:58:4f:88:47:ba:fd:9f:f1:92:3d:a2:cc:27:dd:dc:5b:
         3d:bd:e3:ae:b9:45:ab:03:e0:e5:f3:6b:d4:17:4f:24:81:fa:
         e2:75:75:0d:88:27:9b:3f:11:c1:23:e8:ef:c9:ac:69:fd:61:
         05:07:e7:10:03:be:03:20:42:4b:62:a8:29:a1:cc:c5:41:1d:
         aa:b1:61:67:80:e4:dc:1d:e6:01:6e:a4:5a:1c:5b:c2:9d:bd:
         99:e1:05:af:22:79:8a:c9:70:d2:52:bc:8c:b1:5d:29:b5:af:
         14:79:78:20:e0:c1:51:77:e7:58:b6:44:b7:41:61:99:b0:ce:
         a6:48:7a:27:cd:83:7a:70:5d:67:11:4c:c6:79:bd:3c:df:e2:
         d8:03:44:82:15:cb:81:28:ec:30:b2:81:ae:c7:9e:3e:a3:e3:
         eb:8b:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----