Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS204291.roa
File:                     AS204291.roa (raw, json)
Hash identifier:          jQF0KW3NxV91MBi+WBfBBjY1HXXzvg+Uy/J0G7MCp7E=
Subject key identifier:   66:D5:5D:BC:FD:F1:AA:8B:3D:F4:69:5A:C7:C1:4F:89:27:5D:E8:8F
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       5007B0F0A228FEE237261492C5D4B723B4C10377
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS204291.roa
Signing time:             Fri 23 Sep 2022 23:04:32 +0000
ROA not before:           Fri 23 Sep 2022 22:59:32 +0000
ROA not after:            Fri 22 Sep 2023 23:04:32 +0000
asID:                     204291
IP address blocks:        2a12:dd47:8002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:07:b0:f0:a2:28:fe:e2:37:26:14:92:c5:d4:b7:23:b4:c1:03:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 23 22:59:32 2022 GMT
            Not After : Sep 22 23:04:32 2023 GMT
        Subject: CN=66D55DBCFDF1AA8B3DF4695AC7C14F89275DE88F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:eb:d1:e6:c8:5f:28:5f:b3:a0:03:48:df:
                    b1:1f:c0:a2:8f:17:ee:07:68:51:a4:02:62:dc:1c:
                    97:0e:b0:de:2d:e0:c8:5b:48:e4:5b:78:98:f2:3b:
                    1d:1c:78:ad:13:d1:42:39:5e:35:f4:a4:52:ab:85:
                    1e:2e:fd:0e:ec:83:d6:33:a5:dc:92:15:ba:2c:7c:
                    71:d1:ac:0a:75:61:ef:0d:dd:a8:20:e0:da:cf:5f:
                    19:3a:d9:c4:fb:48:0e:23:e6:ff:1a:6f:15:2e:f0:
                    9a:10:e6:f1:6e:6c:54:75:da:96:6a:b7:4a:0f:30:
                    0a:a6:89:bc:62:d9:f5:bd:9a:30:1a:d4:63:0a:9b:
                    16:d2:85:90:ab:e0:5c:41:6d:f3:95:5f:06:b5:d2:
                    32:d2:2a:7f:12:b4:b6:18:ac:5e:61:17:9d:2e:ea:
                    b6:83:77:8b:99:66:be:9e:03:c2:46:5b:00:f7:67:
                    aa:2a:aa:d2:7c:18:42:1e:b2:de:9e:81:a4:23:cd:
                    6c:e6:50:6c:11:50:d1:60:22:aa:df:72:66:38:3e:
                    69:88:3f:f6:a4:19:33:52:42:ab:ec:c5:1d:9b:87:
                    90:3b:d7:ca:2e:f7:a9:22:44:49:8e:bb:55:34:03:
                    41:4f:f1:dc:27:d0:50:fa:ea:6d:03:c2:45:0e:f7:
                    8c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:5D:BC:FD:F1:AA:8B:3D:F4:69:5A:C7:C1:4F:89:27:5D:E8:8F
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS204291.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:bf:b2:c6:6e:5c:c0:ba:0d:a6:28:4b:42:bc:09:90:64:86:
         6f:d3:2b:65:d9:83:23:2b:c7:ac:92:88:c1:86:db:b5:e6:08:
         ec:fc:02:01:1b:18:17:95:11:94:07:a7:ea:15:54:a3:f2:3d:
         7b:1f:e0:44:91:42:0f:7d:4f:24:52:b2:90:62:0f:73:25:6f:
         f6:8c:e0:23:43:20:3b:70:cf:32:39:50:e2:32:23:8d:56:47:
         5c:68:92:0e:48:09:c2:bf:bb:db:85:f5:17:9c:93:74:5e:31:
         03:f9:21:c3:9f:cb:ad:dd:99:02:8e:cb:16:22:e5:ec:c1:9f:
         91:e2:77:ef:eb:1b:fb:6e:13:35:35:95:9a:b6:c8:a5:24:8a:
         3b:e6:48:67:37:fa:16:75:ee:15:1f:bb:98:9c:bc:7d:c6:a9:
         e4:e3:a1:76:55:7c:90:3d:b8:99:d6:ad:41:59:fb:a0:3b:ca:
         79:65:69:dd:ac:be:f7:31:c7:ea:3e:e3:12:ba:38:ca:b5:77:
         aa:b8:84:6f:71:40:94:91:ef:10:80:84:84:0e:01:08:79:03:
         91:14:7b:bf:97:5c:a3:41:69:25:9f:00:19:fc:72:b3:0b:cc:
         1a:a8:5f:a2:96:e3:e1:cf:fe:50:d1:f9:1a:5b:41:65:e2:03:
         8c:3a:95:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----