Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS207941.roa
File:                     AS207941.roa (raw, json)
Hash identifier:          2QXcKtykSCaUrM9R4DSpRDh0Jj2snrin/y/Flw4v+9I=
Subject key identifier:   2B:DB:66:44:C5:4A:09:D8:4C:76:30:7B:26:74:5D:EA:8F:9E:E8:E2
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       4BBCFBDC06F294C0D062D6A240381581A3FC88F4
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS207941.roa
Signing time:             Fri 23 Sep 2022 23:04:14 +0000
ROA not before:           Fri 23 Sep 2022 22:59:14 +0000
ROA not after:            Fri 22 Sep 2023 23:04:14 +0000
asID:                     207941
IP address blocks:        2a12:dd47:8005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bc:fb:dc:06:f2:94:c0:d0:62:d6:a2:40:38:15:81:a3:fc:88:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 23 22:59:14 2022 GMT
            Not After : Sep 22 23:04:14 2023 GMT
        Subject: CN=2BDB6644C54A09D84C76307B26745DEA8F9EE8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d7:ba:1a:d6:e2:1f:8f:9a:3a:e7:d7:49:a6:
                    03:49:1a:4c:da:c4:48:74:a8:95:61:34:6b:b9:ce:
                    12:b1:b3:bf:a4:10:98:74:c6:10:69:34:19:5d:43:
                    10:4f:8e:14:8c:5c:e7:49:9d:be:d4:d9:a3:52:cb:
                    6f:9a:14:95:ab:ba:84:37:de:f9:ad:88:a8:ee:1d:
                    d4:a7:80:aa:ec:81:38:57:7b:b5:af:3b:72:40:f8:
                    0a:5f:31:cc:7a:2c:0a:cd:38:16:75:6b:fe:2b:67:
                    ec:00:7b:f4:83:3b:90:93:42:3f:71:a0:36:bf:51:
                    a6:29:a0:22:63:ff:ae:69:5e:5b:e2:86:31:b1:b8:
                    17:77:c3:46:ff:8c:d0:c9:e7:1b:41:b1:03:82:bd:
                    57:22:83:06:67:93:b6:36:04:c4:e6:fc:98:e9:8b:
                    95:ae:00:42:8d:28:70:bd:f3:32:64:c7:27:41:65:
                    84:90:50:60:91:61:27:61:e3:96:6c:9a:80:39:0f:
                    15:4b:6f:fd:33:ae:82:5c:a4:e9:fc:9c:16:bb:6d:
                    10:a7:ad:04:8b:66:95:8b:7c:38:b0:40:a5:5b:31:
                    4f:bf:43:d8:cd:fb:b9:ce:3d:9b:36:27:e9:bf:17:
                    35:1c:c5:c2:1f:b0:65:8f:46:14:38:99:2d:16:29:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DB:66:44:C5:4A:09:D8:4C:76:30:7B:26:74:5D:EA:8F:9E:E8:E2
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS207941.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8005::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:d3:77:89:b1:99:cb:87:72:0b:33:be:f9:0a:87:48:db:71:
         54:b7:80:e1:ce:9b:e2:9e:c9:be:a1:79:71:bb:00:f9:3f:ed:
         ba:1a:b1:c8:bb:d5:07:f8:d0:25:70:aa:9c:3b:3c:60:ca:a6:
         d7:f6:e7:cc:b1:66:1b:4e:51:a2:94:9a:dd:ba:47:51:71:ff:
         9d:c1:5e:4e:f2:6c:b5:c1:c7:2b:51:e1:9c:f1:d5:bb:21:d1:
         fc:ef:6a:db:93:99:db:01:8f:2a:d8:f7:74:59:98:f9:51:42:
         6a:65:0f:aa:f3:5e:d5:99:5a:81:46:61:05:53:cd:cf:ef:ee:
         8a:9a:50:9d:8b:ca:fc:b8:1a:49:b5:6c:00:33:6c:94:28:2c:
         18:18:31:a5:4a:8f:14:1d:f6:c4:29:d4:c1:27:bf:5e:53:d3:
         73:cf:72:43:4e:2a:35:a6:42:52:b0:da:40:d8:6b:28:24:44:
         3f:c1:f1:a4:f4:1c:18:f7:61:26:b4:6f:43:55:24:f7:81:6b:
         8c:7c:a8:c8:84:83:6e:90:8d:11:b5:13:1b:0c:a2:9b:05:4a:
         4f:c1:9c:ca:0c:7a:48:33:6e:db:9f:58:a9:ad:d4:3b:18:44:
         cd:e7:4b:5d:e7:cc:db:01:c2:9e:e1:66:0c:ba:8a:54:2e:34:
         21:a2:33:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----