Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS31898.roa
File:                     AS31898.roa (raw, json)
Hash identifier:          HQ1henQHyLmsayrsNaH+JsK5IUmRFolqthN+5s2AKfI=
Subject key identifier:   A7:9B:DE:99:F8:24:D8:40:15:42:97:FB:C3:78:0A:7C:57:4F:4B:6B
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       6CF418286DCABD32DBAF8B3A3BA9E36EC48B3D11
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS31898.roa
Signing time:             Wed 09 Nov 2022 00:09:14 +0000
ROA not before:           Wed 09 Nov 2022 00:04:14 +0000
ROA not after:            Wed 08 Nov 2023 00:09:14 +0000
asID:                     31898
IP address blocks:        2a12:dd47:8047::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f4:18:28:6d:ca:bd:32:db:af:8b:3a:3b:a9:e3:6e:c4:8b:3d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Nov  9 00:04:14 2022 GMT
            Not After : Nov  8 00:09:14 2023 GMT
        Subject: CN=A79BDE99F824D840154297FBC3780A7C574F4B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:31:fd:6a:b7:78:8b:fd:85:7d:49:5c:be:
                    49:a3:9f:c0:1f:25:df:12:81:cd:49:d7:c3:6a:c5:
                    c3:f0:29:58:7d:cc:d0:b8:d9:4e:4e:0f:1c:0e:3b:
                    c8:ba:b6:94:64:09:11:3b:de:df:27:08:15:e7:0f:
                    fe:73:e6:a1:79:cb:fb:a8:7d:d4:50:15:35:b0:76:
                    f3:76:63:1c:41:ce:af:ba:55:5a:b9:0d:33:c9:ca:
                    52:e5:a9:27:e2:ff:4c:19:73:92:fd:88:3c:2d:ae:
                    8c:f7:f8:f3:92:52:75:70:71:f2:3f:f7:38:32:50:
                    b6:29:de:f8:c1:6d:87:6f:1e:26:7f:47:83:ba:37:
                    29:a0:dc:cc:e0:27:dd:12:6f:84:ae:cd:6d:77:da:
                    e7:a0:d9:0e:c5:1e:d0:d9:e5:d8:ba:0c:d5:83:4e:
                    70:c2:fd:50:7b:3c:3f:7a:e7:56:47:07:57:81:7d:
                    f5:25:00:17:73:08:af:e2:0a:ad:27:89:4e:37:a5:
                    d3:0c:b4:95:27:c5:0b:b9:0f:dd:51:a3:a2:40:bb:
                    e7:58:b0:45:04:01:5a:c8:2c:7f:a7:e8:1f:b7:f5:
                    63:31:4d:54:83:9b:e9:ab:02:c1:67:e0:1c:3a:bc:
                    6d:eb:0b:c8:67:e0:c5:5c:75:55:4e:bb:dc:9d:f7:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9B:DE:99:F8:24:D8:40:15:42:97:FB:C3:78:0A:7C:57:4F:4B:6B
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS31898.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8047::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:3b:ff:46:89:7b:d3:75:d3:d6:25:29:6d:bc:1c:82:68:93:
         a3:6f:23:d6:78:c9:7d:b0:06:39:01:40:99:b3:b7:70:21:10:
         91:e0:0f:f8:5a:68:96:81:ca:f9:ca:ad:76:07:95:8f:38:27:
         23:6f:b7:4a:49:07:ad:2a:39:36:5b:54:5e:d0:31:8f:b0:5e:
         16:d4:3f:05:35:53:5b:52:08:01:49:2a:35:84:08:17:4b:4c:
         e9:c7:40:1a:97:b1:11:82:e5:93:33:5a:c2:7f:4f:a8:e5:0b:
         25:33:97:6f:37:d9:5d:e4:05:22:cf:d7:f5:a1:24:83:b3:d1:
         20:fa:67:d6:44:05:40:74:46:47:fe:2b:91:8b:55:1c:b6:b2:
         bc:b5:63:61:a5:ce:88:b9:2d:c3:38:c1:cb:b0:50:50:d4:21:
         ab:49:c8:53:70:e4:36:ac:ef:ea:b6:3b:2f:c8:df:12:90:b3:
         9d:04:7c:ec:84:b3:f3:ca:3d:a9:1f:96:6b:80:61:76:f9:3a:
         f2:25:40:6f:97:19:81:5d:00:f0:48:43:b7:ac:90:7c:0d:a2:
         70:3e:b4:bb:02:01:76:f0:a7:14:2b:3f:8f:38:81:c1:ad:2c:
         c5:6b:02:64:39:01:8e:42:69:59:e0:97:22:52:95:30:a7:f6:
         a5:68:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----