Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS398057.roa
File:                     AS398057.roa (raw, json)
Hash identifier:          1cvqRdEPAvcGR+8B+m7VxdjV9lUqBn2c2QvpABZ3/hQ=
Subject key identifier:   39:7D:A9:2E:29:45:D4:D4:7C:6D:E5:D3:E9:E9:5B:26:A1:08:FA:48
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       0D798024391744B3F18CCA685DE37ED877315950
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS398057.roa
Signing time:             Fri 23 Sep 2022 23:04:38 +0000
ROA not before:           Fri 23 Sep 2022 22:59:38 +0000
ROA not after:            Fri 22 Sep 2023 23:04:38 +0000
asID:                     398057
IP address blocks:        2a12:dd47:9000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:79:80:24:39:17:44:b3:f1:8c:ca:68:5d:e3:7e:d8:77:31:59:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 23 22:59:38 2022 GMT
            Not After : Sep 22 23:04:38 2023 GMT
        Subject: CN=397DA92E2945D4D47C6DE5D3E9E95B26A108FA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ca:27:74:70:db:dc:e2:ae:c4:61:7e:00:99:
                    47:6c:e4:1d:6b:f9:30:95:c9:4c:06:40:df:e1:a7:
                    c6:1e:21:fc:7b:1e:e1:b2:d1:04:07:d9:63:04:59:
                    20:7e:b8:ed:ae:a9:d1:fe:b4:85:f0:ac:8e:1a:0d:
                    1a:3a:1d:a0:01:88:c9:a4:f0:78:e9:43:d4:d5:e5:
                    a4:da:de:61:80:5e:24:7a:00:90:ab:7b:77:8c:0e:
                    45:10:05:7e:13:c3:80:92:1c:5b:73:58:a1:aa:b9:
                    21:88:b7:7c:d9:e1:80:d1:b9:49:98:78:f0:d7:43:
                    87:6d:6e:8c:12:7c:d7:04:b1:af:e4:43:bc:a7:c4:
                    e9:b2:6f:53:3f:af:79:31:16:90:f5:b1:4b:a2:a4:
                    3b:11:a3:a7:c6:ed:63:5e:b9:da:7a:3d:b8:a1:6d:
                    02:df:a8:20:dc:23:f8:6e:2b:f9:38:1e:36:ce:b1:
                    90:95:8c:a4:ad:a5:e5:dc:cb:ae:bf:a5:d0:17:b4:
                    f8:44:be:88:e5:fe:f0:f0:55:b9:d8:c1:da:3e:53:
                    77:d0:ac:db:7f:28:1a:f6:03:01:69:09:fe:2c:05:
                    cf:d3:34:e6:a8:17:52:16:1d:75:23:09:13:d9:ab:
                    09:7a:35:ba:69:8e:0f:7d:e7:31:d6:d7:2d:04:26:
                    cf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7D:A9:2E:29:45:D4:D4:7C:6D:E5:D3:E9:E9:5B:26:A1:08:FA:48
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS398057.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b4:9a:a7:f8:5b:13:d6:90:3c:ac:d6:be:65:29:0f:da:f9:f3:
         0b:1e:7d:20:ae:b8:ca:57:6d:b8:5d:71:42:e9:ec:6b:86:2c:
         a4:65:e7:17:27:6e:11:b8:ea:7d:82:36:87:ed:1e:5d:27:11:
         f5:f7:45:60:2a:20:b6:22:84:dc:84:e3:42:c1:09:cc:04:2b:
         ca:e5:57:d5:07:ad:ce:96:4a:86:25:17:4c:c8:ef:44:81:5e:
         24:f5:91:d1:9e:57:2b:4a:7d:2a:23:ee:8c:ba:f2:f4:e5:ea:
         5e:32:14:ca:dd:ba:c9:de:29:be:56:51:83:52:be:83:24:98:
         1c:cc:b5:09:09:4d:92:5f:96:db:d3:f4:79:3b:41:8f:3f:46:
         b6:d9:cc:92:9d:5a:9e:f6:73:b1:31:d1:f9:e1:a7:5d:d4:70:
         f8:80:a9:a0:7d:87:83:7d:ee:c5:66:45:4a:01:86:43:43:ab:
         4a:06:a3:62:3d:07:f4:66:81:62:1f:57:62:71:fb:4e:66:cd:
         c2:85:60:bd:27:04:46:07:96:ed:d0:03:81:da:67:c1:2c:0f:
         62:e3:a4:ad:d1:e5:0e:c4:1a:42:a2:24:2b:a1:af:9e:54:ad:
         8c:27:c2:ad:82:f7:06:0c:37:02:c4:ed:c8:8d:0c:26:41:46:
         da:d3:a5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----