Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS203458.roa
File:                     AS203458.roa (raw, json)
Hash identifier:          c9mfX8hod+mTvtNom1AUkintfhlfaxbpICUVuqIs/OU=
Subject key identifier:   AC:C2:29:B0:2E:06:E3:AB:A4:EC:79:C4:9B:EA:BC:57:23:A3:F5:03
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       3B19D3E528622305658743A9D3F588CDDF079D30
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS203458.roa
Signing time:             Fri 23 Sep 2022 23:04:19 +0000
ROA not before:           Fri 23 Sep 2022 22:59:19 +0000
ROA not after:            Fri 22 Sep 2023 23:04:19 +0000
asID:                     203458
IP address blocks:        2a12:dd45:b00b::/48 maxlen: 48
                          2a12:dd47:8110::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:19:d3:e5:28:62:23:05:65:87:43:a9:d3:f5:88:cd:df:07:9d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 23 22:59:19 2022 GMT
            Not After : Sep 22 23:04:19 2023 GMT
        Subject: CN=ACC229B02E06E3ABA4EC79C49BEABC5723A3F503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4a:95:fb:a1:4f:c1:86:9b:e6:2f:9f:6c:29:
                    86:6f:25:e4:4b:8e:59:09:2b:c0:1a:88:2c:23:c9:
                    1f:9d:7a:e3:82:aa:dd:ed:91:41:dc:c5:91:44:0d:
                    8b:9c:67:9c:45:76:ee:21:ea:aa:0d:7a:8b:89:f2:
                    ce:d0:f6:69:da:40:d3:64:8d:20:8d:01:15:fe:6b:
                    36:7e:6c:1c:2e:48:d6:c9:f0:64:fd:36:93:b6:81:
                    63:58:72:aa:de:d5:65:7e:6c:3c:f0:2b:2a:b3:5d:
                    a8:92:5c:74:7b:bf:78:25:02:32:74:77:5d:4a:19:
                    07:85:c3:dc:92:79:2a:77:0e:2c:01:15:95:39:87:
                    86:b1:c5:a5:94:77:25:25:00:45:2b:70:3d:31:5c:
                    e5:19:12:2e:db:11:0a:00:1c:38:ec:4b:72:59:e0:
                    d8:84:01:98:e4:de:92:69:02:e7:60:1d:68:f7:d3:
                    b8:19:10:53:d5:b7:3b:c8:f7:df:01:b7:75:a7:78:
                    90:66:4e:90:3a:25:94:c1:91:e5:f2:ec:32:12:4c:
                    77:7e:54:e9:c1:c4:bf:9e:7f:54:ce:42:90:12:35:
                    0e:51:d7:3f:94:f9:77:f2:12:1f:60:8b:af:75:8b:
                    89:3c:b2:8a:58:4b:d0:93:e5:34:60:40:80:75:31:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C2:29:B0:2E:06:E3:AB:A4:EC:79:C4:9B:EA:BC:57:23:A3:F5:03
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS203458.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd45:b00b::/48
                  2a12:dd47:8110::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:ea:af:67:c9:04:ae:10:7d:b5:72:17:32:24:81:42:53:46:
         27:04:a6:5f:92:f9:52:6c:bb:3f:c0:ee:0a:89:13:59:9c:00:
         81:0e:7c:66:a1:5e:2e:b3:f1:12:58:2f:38:2d:fa:41:98:85:
         0f:39:cf:29:19:20:80:05:20:fa:44:41:dd:57:d4:e3:36:9f:
         2c:3d:a7:4d:f5:4d:97:e1:84:d5:c4:fc:f4:7e:cc:00:1c:e9:
         6d:36:21:77:95:d1:41:b5:a8:5c:67:e0:ac:96:ef:e7:a6:fd:
         c1:f6:c4:a8:ec:3d:86:38:b9:8e:45:e8:bb:5c:2a:77:bd:28:
         6b:9b:96:e2:3b:af:2b:ba:7f:0f:02:b1:12:9d:65:77:7e:0d:
         d9:79:4b:82:25:6f:1f:26:19:c1:c5:d4:18:5e:6d:52:2a:5b:
         6b:0f:24:14:fe:fd:2e:dc:4a:f9:f3:7a:30:5e:85:e3:fb:41:
         26:02:73:cc:11:b0:79:9b:2f:11:23:a2:d5:30:c3:25:3f:e4:
         5d:bf:07:14:e4:4e:93:76:05:46:2d:af:77:51:63:c5:5e:ff:
         dd:2b:05:17:14:3c:10:49:1b:2c:b5:5d:51:e6:25:bf:46:91:
         1b:3a:e8:3c:ec:ae:61:0b:9c:d5:2e:f5:f3:07:7e:84:21:f2:
         53:89:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----