Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS212483.roa
File:                     AS212483.roa (raw, json)
Hash identifier:          NkphzBOQN3lkkSGfi2BBYKBUWqcJU8qAQuLI/s6e++Y=
Subject key identifier:   26:E9:FC:F8:9A:3E:D2:FD:1E:5B:D2:86:D1:8A:26:3E:4E:A0:D3:94
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       6146CD21404CE360EC2D22AC280230B7F2017F54
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS212483.roa
Signing time:             Fri 18 Nov 2022 09:27:07 +0000
ROA not before:           Fri 18 Nov 2022 09:22:07 +0000
ROA not after:            Fri 17 Nov 2023 09:27:07 +0000
asID:                     212483
IP address blocks:        2a12:dd47:80b0::/44 maxlen: 48
                          2a12:dd47:8f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:46:cd:21:40:4c:e3:60:ec:2d:22:ac:28:02:30:b7:f2:01:7f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Nov 18 09:22:07 2022 GMT
            Not After : Nov 17 09:27:07 2023 GMT
        Subject: CN=26E9FCF89A3ED2FD1E5BD286D18A263E4EA0D394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:51:a1:58:41:fc:6f:75:79:60:63:98:70:
                    1f:b1:6c:10:79:53:93:fc:49:99:0f:04:d4:55:06:
                    93:40:9c:b6:ec:2f:4d:a5:f5:7d:c5:90:12:c3:84:
                    00:1b:89:70:94:7d:52:3c:3a:54:02:76:11:b6:e4:
                    ba:c7:1d:e7:79:b0:a6:2a:ef:d5:02:fd:b6:0c:b4:
                    1d:3b:d7:6a:62:8d:ca:88:0b:d7:5c:e3:f0:46:68:
                    4a:63:40:57:be:fe:77:1a:fe:aa:8a:69:50:59:36:
                    6e:20:c6:7c:7a:f3:11:14:a4:21:a6:9e:ff:79:0b:
                    cc:6d:76:af:99:ea:58:6a:59:a2:e0:63:e0:29:0e:
                    80:7e:1b:b9:b6:eb:33:52:70:d8:ba:9b:ef:68:f1:
                    2c:a5:69:9f:9c:6c:64:97:8d:14:e8:d7:61:ed:f3:
                    87:d6:ac:02:60:29:ec:b3:69:22:5c:97:ed:00:7e:
                    5d:12:71:19:25:48:e1:3a:ee:ba:53:e0:1c:7d:0a:
                    5c:29:1f:20:e8:13:9c:ec:16:13:78:0b:0d:6a:a4:
                    e5:a2:94:ca:f2:e7:a8:f5:36:2c:18:c7:30:da:fd:
                    ef:3e:df:ad:e5:4f:02:36:c6:f5:f0:2d:fc:3f:cd:
                    89:4e:ea:cb:d9:e0:7c:6d:34:e6:93:d3:a1:37:50:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E9:FC:F8:9A:3E:D2:FD:1E:5B:D2:86:D1:8A:26:3E:4E:A0:D3:94
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS212483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80b0::/44
                  2a12:dd47:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:9f:77:75:79:b2:ed:07:12:61:3a:d7:8a:f3:4c:f7:39:00:
         ba:1d:64:af:b2:be:5d:bf:af:f6:86:64:98:9a:05:ae:0d:c8:
         7b:70:f5:a1:c1:48:fa:27:0f:80:97:d4:9a:fb:50:67:50:95:
         e4:c8:b3:59:ed:a7:b3:f5:d3:a7:e9:21:96:f3:7c:a0:c6:88:
         dd:67:ea:37:a8:25:d1:30:a3:0e:65:bb:74:c3:79:4c:84:f7:
         65:af:85:45:22:89:b4:95:33:35:e8:e3:38:6e:e4:7a:0b:54:
         84:98:ba:95:f1:7f:68:37:5d:66:e3:d6:6f:f8:7f:3c:ef:36:
         25:2f:8b:bc:3b:46:19:10:5c:c7:53:7f:bf:7d:b2:87:d5:eb:
         80:f3:81:b3:bf:fd:43:45:c9:87:49:77:20:8a:b5:18:63:76:
         18:f1:5e:02:45:fd:91:fd:7b:d0:35:d6:ed:85:a8:4f:30:a9:
         84:c8:a6:3e:e9:cd:99:49:72:52:99:bf:92:be:57:9a:59:c5:
         48:7e:c0:67:38:7a:bf:97:1e:10:24:46:41:8a:53:a2:f4:93:
         0c:da:06:d8:f3:a0:ae:e5:e5:dc:71:cd:b3:40:03:e3:33:67:
         03:12:aa:27:3c:b7:58:f7:7b:24:89:5a:21:5a:3e:c3:64:e2:
         b5:9e:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----