Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS35913.roa
File:                     AS35913.roa (raw, json)
Hash identifier:          QK4l9k6lZBQbVfUIZXURp2hpKXkAIF7uDvAFPuhDISE=
Subject key identifier:   CB:07:84:96:2E:19:BE:67:D1:0A:05:D2:BA:03:D7:C5:C6:32:90:42
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       39F56DCEE96D771451E0E9EB0BDFF30F801CCC5B
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS35913.roa
Signing time:             Fri 23 Sep 2022 23:04:37 +0000
ROA not before:           Fri 23 Sep 2022 22:59:37 +0000
ROA not after:            Fri 22 Sep 2023 23:04:37 +0000
asID:                     35913
IP address blocks:        2a12:dd47:804b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f5:6d:ce:e9:6d:77:14:51:e0:e9:eb:0b:df:f3:0f:80:1c:cc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 23 22:59:37 2022 GMT
            Not After : Sep 22 23:04:37 2023 GMT
        Subject: CN=CB0784962E19BE67D10A05D2BA03D7C5C6329042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:7b:c8:d9:37:dd:9c:b8:fe:88:a5:ec:88:
                    0c:bd:00:c1:5b:08:9e:54:2b:83:ee:cf:bf:88:0e:
                    79:ff:c8:a2:4e:63:ac:41:26:d7:01:d1:ee:5c:7d:
                    fe:db:bd:49:7f:4c:0a:e4:66:23:f9:28:29:dd:9f:
                    23:ec:ca:90:13:88:4b:ef:73:00:03:dd:a9:93:7f:
                    d7:c9:f2:11:66:4c:fd:16:ad:0f:9d:e9:a7:02:95:
                    9a:33:ce:21:e0:dd:f2:f3:04:c9:9d:28:e9:0e:c3:
                    dd:41:ee:97:2f:57:8a:ef:9f:b0:1d:1d:8f:5f:f9:
                    02:0d:97:d7:6e:99:c8:49:b1:57:d8:22:f5:74:0e:
                    45:64:1a:e0:8b:2e:9b:b2:cd:a4:18:c1:65:b2:33:
                    b8:66:b5:7f:0b:d6:13:af:86:f5:12:b5:f3:f4:a7:
                    4d:df:f9:c3:a8:3e:4c:1e:ee:e5:fa:ad:a9:9c:ff:
                    c7:89:d5:15:97:32:07:98:4c:bb:7d:07:16:d1:90:
                    4c:3a:fd:30:89:e6:fb:50:e2:ce:0f:01:29:22:e2:
                    5c:9f:07:86:ce:e1:ec:48:a2:43:22:95:57:d0:62:
                    3f:0b:de:9f:05:f5:f0:d4:24:9f:64:72:5f:f4:c2:
                    55:c9:3f:15:d8:4f:1e:e7:18:3b:77:5f:31:f8:13:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:07:84:96:2E:19:BE:67:D1:0A:05:D2:BA:03:D7:C5:C6:32:90:42
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS35913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:f2:53:b2:19:4a:33:58:15:0f:b2:48:c6:23:fb:7c:23:b1:
         88:3b:c3:62:32:1f:64:17:f8:03:7c:08:ac:38:d3:c8:dd:79:
         ea:fc:ca:cc:1e:bb:e7:df:5d:9d:90:f7:23:fd:b7:2f:c8:4e:
         a1:2c:a4:86:5d:14:8c:d6:be:a5:ab:76:a6:30:81:f8:34:2f:
         fc:f6:43:fb:30:44:75:4d:2c:44:9c:80:48:f6:5d:58:64:f9:
         ec:fc:4c:3a:eb:eb:4c:c7:22:1c:ae:8e:52:72:40:9e:0a:2f:
         72:d2:91:ab:02:ce:e4:bf:c8:9f:9e:a4:97:b5:62:3e:68:71:
         a9:63:bf:a8:b6:db:d7:ef:fa:aa:fd:bf:60:01:87:e3:3e:b3:
         a1:8b:25:12:34:9d:63:93:46:54:d3:be:06:88:58:23:57:c7:
         61:a3:eb:e1:6d:23:15:21:fa:27:7e:a5:8c:ff:87:42:7c:c2:
         2f:1d:61:f9:52:be:a1:3c:2b:86:4a:3c:91:07:53:5a:8c:e1:
         a8:ae:8f:2c:df:dc:84:b9:82:d5:a7:f6:fa:f4:8d:45:87:8d:
         c6:6c:8a:d4:43:50:c5:a5:b7:b8:13:b0:12:8c:65:10:13:1a:
         73:a8:18:f4:a5:80:ec:95:03:e6:c8:a6:8d:63:c6:0a:90:35:
         e9:3b:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----