Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS203867.roa
File:                     AS203867.roa (raw, json)
Hash identifier:          xh0lNImntbzVluKcebzS1dIwan6IaH5ayN73R7huBjM=
Subject key identifier:   6D:25:79:DD:C4:94:69:16:65:51:8E:7A:5C:57:64:A4:4F:8C:C0:BE
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       6FE9A10A2095E7607FF0FAF69FBAB918AEEC8891
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS203867.roa
Signing time:             Fri 23 Sep 2022 23:04:16 +0000
ROA not before:           Fri 23 Sep 2022 22:59:16 +0000
ROA not after:            Fri 22 Sep 2023 23:04:16 +0000
asID:                     203867
IP address blocks:        2a12:dd45:b00b::/48 maxlen: 48
                          2a12:dd47:8170::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e9:a1:0a:20:95:e7:60:7f:f0:fa:f6:9f:ba:b9:18:ae:ec:88:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 23 22:59:16 2022 GMT
            Not After : Sep 22 23:04:16 2023 GMT
        Subject: CN=6D2579DDC494691665518E7A5C5764A44F8CC0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0f:c1:f0:72:87:4a:2c:78:a4:64:46:00:aa:
                    19:63:74:60:43:ec:87:fe:65:58:7d:56:11:a8:ab:
                    41:09:a3:cb:c1:8e:38:cd:01:0a:81:f0:6e:d4:8a:
                    af:50:72:30:c1:dd:e7:87:30:ee:07:eb:a2:ce:af:
                    99:ae:6b:bd:27:dc:ad:42:7f:fc:0a:17:68:74:04:
                    93:08:20:cf:c8:e6:78:43:b5:47:7d:52:c9:bd:e1:
                    a6:fb:3a:50:4b:18:17:f8:c1:99:b6:7a:e6:1d:73:
                    f9:23:d2:23:4a:a6:da:91:b4:79:c4:06:cb:a6:fc:
                    de:a9:ea:5a:ee:ee:15:b9:3a:d2:90:ed:0e:0e:93:
                    db:b0:a2:4f:e5:97:77:7e:10:cc:1b:9c:5b:81:e6:
                    fa:fb:44:de:62:29:43:ed:ef:44:a4:42:c3:e1:65:
                    a1:b4:12:1d:67:06:51:9b:b1:77:e6:1e:3e:51:53:
                    7d:94:e4:1b:a3:23:96:82:46:11:54:37:0e:8b:b0:
                    9b:24:cc:25:e6:8f:25:33:3a:52:a9:a9:e6:0b:b6:
                    7a:a6:4a:8e:44:65:da:62:a8:35:a3:ea:5b:c6:f3:
                    6e:4a:f6:9e:57:dd:6d:f6:3d:ba:8a:7b:44:a1:57:
                    a6:c6:70:f9:9d:d4:ba:6a:4e:2a:af:db:40:25:bf:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:25:79:DD:C4:94:69:16:65:51:8E:7A:5C:57:64:A4:4F:8C:C0:BE
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS203867.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd45:b00b::/48
                  2a12:dd47:8170::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:8d:b7:11:1e:57:f5:c3:9f:fb:32:b0:fd:01:4c:50:be:41:
         7f:af:18:7c:f1:73:e6:d1:b4:a0:37:c5:0c:26:20:5d:68:bc:
         bb:26:a6:eb:8c:a0:13:68:ae:f5:c2:e6:99:2e:12:3a:4b:df:
         50:88:a3:f6:ae:ef:78:df:f5:76:d1:aa:00:a1:4e:da:2f:f4:
         2d:3c:89:0e:53:8c:cd:77:75:c9:7f:d2:54:04:95:8c:65:b0:
         b1:56:2f:36:4f:23:0c:5b:64:18:75:3f:75:64:32:c3:0d:48:
         6e:6b:ab:3e:12:13:00:9e:99:ff:7f:6a:f3:a9:24:b4:38:b3:
         c1:8f:b6:cc:a3:c3:1e:9c:39:20:b8:95:24:f5:19:88:cc:05:
         d5:f5:50:46:d4:35:fa:d3:ba:6e:51:c7:9a:0f:90:d8:3a:7c:
         38:00:87:7f:d4:69:da:33:b8:25:3a:2c:1a:bc:a3:e5:c6:61:
         1a:6a:89:b1:90:c3:2c:bc:fd:c9:dd:cb:ba:c9:5e:f2:1e:e7:
         ac:41:b9:ec:0c:7e:00:a7:25:a9:c5:d6:ec:b9:dd:ca:da:15:
         40:a0:4d:11:c2:58:f0:49:28:03:8d:ed:4d:bf:88:95:7c:d8:
         07:74:db:6f:e2:c9:df:c1:0c:73:4e:c5:c1:13:a8:9e:10:69:
         fa:ec:d9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----