Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS212983.roa
File:                     AS212983.roa (raw, json)
Hash identifier:          mDAa/bt1SFa+w1JbNKpJtB3SPhAEP71CmkNg6M8rzwk=
Subject key identifier:   11:C0:27:EA:58:C3:60:20:A9:9E:4D:B6:F0:6B:2B:B5:70:E4:4C:E3
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       7C5EFF47813D9C32856F5DA58D318A47581C196E
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS212983.roa
Signing time:             Wed 19 Oct 2022 19:36:11 +0000
ROA not before:           Wed 19 Oct 2022 19:31:11 +0000
ROA not after:            Wed 18 Oct 2023 19:36:11 +0000
asID:                     212983
IP address blocks:        2a12:dd47:8169::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5e:ff:47:81:3d:9c:32:85:6f:5d:a5:8d:31:8a:47:58:1c:19:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Oct 19 19:31:11 2022 GMT
            Not After : Oct 18 19:36:11 2023 GMT
        Subject: CN=11C027EA58C36020A99E4DB6F06B2BB570E44CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e3:cf:b4:53:13:5d:b5:4e:ab:c2:59:53:bd:
                    d4:7d:1a:c5:a9:e3:c9:e9:85:15:97:d3:c4:3c:24:
                    5f:10:c1:5a:39:d7:3e:65:37:1e:7d:9e:c4:ab:ca:
                    82:3b:85:bf:12:2a:b9:ab:c2:7e:1d:b4:3f:58:13:
                    48:ea:44:8a:4a:dd:3e:5d:17:49:d2:dc:fc:6c:44:
                    9b:80:e6:e7:12:07:55:f3:90:58:f6:cf:5a:66:60:
                    3d:f8:03:2b:c7:86:af:7b:82:a1:e1:d0:f7:ff:b2:
                    04:cc:c8:37:19:c5:31:cc:10:14:f2:b9:18:d2:db:
                    36:a4:fe:fe:b8:7a:75:05:2e:7d:e5:0c:ed:28:c2:
                    30:02:6a:2f:e6:cb:2d:3a:ad:66:f7:6f:95:61:2b:
                    0f:6b:c5:ec:8b:19:d6:72:ef:fa:f4:d5:c4:ed:15:
                    d1:43:33:21:f5:73:dc:21:0d:2d:27:af:b5:91:a1:
                    23:9f:f2:2c:85:45:1c:91:aa:87:9e:1f:78:87:d0:
                    56:97:f8:f8:fa:8b:14:1c:45:d1:29:d9:3d:e8:87:
                    64:e3:e4:64:8d:00:b5:e6:68:35:2a:5b:3d:39:8f:
                    b1:e7:b4:4c:25:56:96:6e:b7:34:a1:6d:82:5b:52:
                    3c:40:25:18:da:60:d0:6d:a1:5d:fe:65:52:55:9b:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C0:27:EA:58:C3:60:20:A9:9E:4D:B6:F0:6B:2B:B5:70:E4:4C:E3
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS212983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8169::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:d3:d2:e7:4c:8e:a6:bf:54:35:2a:8f:56:f6:3a:b6:c0:b1:
         03:02:b0:4e:30:c6:ce:78:92:98:55:f8:f4:dd:ee:6e:75:cb:
         20:e6:9b:46:1d:f5:52:81:aa:4d:96:e7:c0:0d:0b:70:f0:22:
         70:81:59:2f:e8:af:8b:c3:ce:8d:da:12:8c:6d:04:50:37:8c:
         9a:15:d3:a7:14:c4:b4:65:5b:67:af:2e:a1:67:3b:1a:bf:cd:
         30:fe:f8:4e:13:9f:de:19:82:14:a4:2d:be:9c:b9:ec:e2:e0:
         e5:3a:52:ae:8d:b7:d5:c0:de:70:26:7d:34:f1:66:87:4d:67:
         f2:5e:ef:2f:47:6e:79:57:21:30:53:7a:8d:9c:22:04:75:99:
         d5:c1:e7:44:c2:d0:e1:a0:fd:af:79:8b:cb:48:5e:a1:fe:94:
         7f:4a:3e:89:a0:3b:b6:59:39:a6:55:c1:53:b2:77:67:28:95:
         8c:45:1d:a8:34:28:0f:cb:2c:e3:d7:71:8c:51:ab:c1:23:18:
         c5:2e:e6:b7:ce:8e:64:17:2a:2d:3e:c8:3f:19:6a:fc:cc:02:
         54:a1:24:b5:93:2e:a7:f4:2f:d4:e8:cd:f8:51:83:0c:08:35:
         36:24:73:8f:f5:90:ee:d8:33:75:12:72:8b:98:bb:fc:36:b3:
         69:1a:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----