Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS206271.roa
File:                     AS206271.roa (raw, json)
Hash identifier:          qZlKOtseORBhqENcVNPK0REuor/X1r+YCbVo3lFviGs=
Subject key identifier:   DC:D7:1C:22:7C:94:5A:19:C6:86:FA:03:C5:E1:68:6D:51:A8:5E:7F
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       352E0D77840816F3028F6AA917EE4E528D521DFE
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS206271.roa
Signing time:             Fri 23 Sep 2022 23:04:34 +0000
ROA not before:           Fri 23 Sep 2022 22:59:34 +0000
ROA not after:            Fri 22 Sep 2023 23:04:34 +0000
asID:                     206271
IP address blocks:        2a12:dd47:8071::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2e:0d:77:84:08:16:f3:02:8f:6a:a9:17:ee:4e:52:8d:52:1d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 23 22:59:34 2022 GMT
            Not After : Sep 22 23:04:34 2023 GMT
        Subject: CN=DCD71C227C945A19C686FA03C5E1686D51A85E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:50:ae:53:cf:f8:57:81:7e:8c:97:f2:6d:
                    c2:37:d4:cd:ff:8f:13:d3:10:53:a6:e0:29:f5:b5:
                    f1:ab:b3:ab:f2:13:33:69:b8:52:b1:e6:b2:01:02:
                    0d:03:ff:67:8a:c9:82:ca:84:7c:ea:da:f7:b8:6c:
                    2e:0e:8b:db:fd:64:2e:48:d2:03:60:79:eb:d5:37:
                    c1:d7:31:8a:d3:bd:c0:d7:5d:89:47:a4:20:2d:49:
                    f4:04:b1:6e:fa:3f:78:03:5b:f4:03:3c:05:71:33:
                    32:14:fb:22:ce:80:3e:06:df:57:a4:62:5b:b3:a7:
                    7d:59:e5:fb:a3:2c:db:0b:5f:da:3b:b3:f3:40:b9:
                    7e:e4:b0:5f:d9:7a:bd:ed:e9:cb:0f:22:7c:f6:ec:
                    f2:32:d4:da:e6:38:f5:26:12:39:ae:6e:0a:b5:4c:
                    d8:11:e6:53:e7:77:0c:9f:cd:48:ce:55:4a:db:f1:
                    41:a1:5c:9a:2b:9a:4b:5b:61:5a:fc:3c:47:dd:68:
                    5f:0f:c5:a8:0e:61:c4:07:86:c3:16:f3:a1:d2:d5:
                    5b:5f:72:5b:11:6e:87:9c:b2:43:e8:87:2c:d5:5e:
                    ca:1a:37:ec:0a:ec:45:ad:06:43:4f:15:78:6f:56:
                    f9:af:3a:52:35:ca:1e:6d:02:e7:31:05:52:60:ae:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D7:1C:22:7C:94:5A:19:C6:86:FA:03:C5:E1:68:6D:51:A8:5E:7F
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS206271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8071::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:a8:b1:1f:36:8a:f7:a2:39:72:d2:cd:3e:ce:d8:a7:d0:
         41:ae:8f:d3:1c:5c:e8:23:6f:de:b1:d0:f3:5c:d2:ea:8d:57:
         7d:f7:cb:14:37:14:cd:ed:13:de:21:66:d2:53:c2:d9:ec:ce:
         c5:3d:3c:f8:9a:15:53:e1:ad:76:c3:fb:bd:4d:f1:51:09:66:
         ad:d9:e2:ce:6a:82:4c:93:20:61:be:b1:07:e7:35:03:a5:26:
         e6:63:14:2d:7d:66:91:03:86:8f:54:cf:ee:66:b7:0d:94:af:
         fc:5c:46:67:f8:8f:f6:f9:bb:c1:67:68:14:aa:96:36:1d:2b:
         e5:4e:78:14:c9:f7:0d:dd:3a:71:1f:09:0e:d5:0d:c9:3d:78:
         f6:49:89:a8:e8:b3:f8:e4:3f:9e:43:8d:39:f2:49:c1:50:fb:
         96:51:cf:cf:b9:8b:10:71:e1:80:76:38:c3:9a:8f:93:d8:d9:
         3a:6f:3c:8b:1a:fa:51:1e:5c:5a:43:ad:d3:0a:dd:dd:0f:11:
         e3:8a:b6:7d:97:fa:5a:08:c6:94:00:0a:e7:ad:79:b4:7b:d9:
         ef:0c:cc:bb:c5:83:52:76:87:fb:40:be:ba:73:b4:4b:02:9d:
         c6:da:a2:23:cd:46:f8:4b:0c:25:49:06:8b:f0:f2:4b:bb:6b:
         0e:dd:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----