Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/6/AS57957.roa
File:                     AS57957.roa (raw, json)
Hash identifier:          MZtS8PNEbYVC8IuPT7SanmursXlg/7fxSubVLdTWEPo=
Subject key identifier:   2E:2E:B4:FE:95:72:54:9E:8F:8D:E6:22:50:45:5C:C7:BD:9C:5C:F0
Certificate issuer:       /CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
Certificate serial:       2CAB084A70465E526B891CDEA51325DB75D2C694
Authority key identifier: 3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/6/AS57957.roa
Signing time:             Fri 23 Sep 2022 23:04:29 +0000
ROA not before:           Fri 23 Sep 2022 22:59:29 +0000
ROA not after:            Fri 22 Sep 2023 23:04:29 +0000
asID:                     57957
IP address blocks:        2a12:dd47:804a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ab:08:4a:70:46:5e:52:6b:89:1c:de:a5:13:25:db:75:d2:c6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b30a5b6475e0ea924572f2c8bd2438815c71081
        Validity
            Not Before: Sep 23 22:59:29 2022 GMT
            Not After : Sep 22 23:04:29 2023 GMT
        Subject: CN=2E2EB4FE9572549E8F8DE62250455CC7BD9C5CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:50:d3:c4:b8:0a:cf:8e:f7:49:07:6b:d8:cd:
                    57:6c:a2:08:f6:a7:63:c4:56:ab:05:2d:4a:c1:03:
                    32:1e:99:ea:b6:0e:2a:08:18:20:d7:dc:95:6b:e0:
                    5f:5e:ca:7e:20:2a:78:d0:b9:87:c4:18:13:3e:59:
                    2e:f0:96:62:e9:ee:65:6d:4d:ca:23:d3:e0:a8:b3:
                    eb:26:48:66:ef:1b:ad:aa:d1:07:7e:13:57:7d:82:
                    02:e2:a6:ec:1e:5d:e7:1b:db:a0:90:9a:8a:4d:16:
                    58:30:43:87:a6:fc:e7:b4:7b:c4:0f:b7:a3:87:c8:
                    4c:85:35:09:71:48:ab:a0:9a:07:a1:32:e6:09:f0:
                    a6:a6:2d:89:d2:d1:cd:1e:2a:0c:4e:01:14:85:f4:
                    15:80:d4:a2:2d:02:35:11:ca:4e:f0:18:cd:70:82:
                    50:59:a9:89:b6:56:1c:67:ac:92:72:c2:8b:8d:93:
                    7b:56:d9:e2:45:3e:85:a9:13:59:ac:3e:39:87:d7:
                    10:14:b8:e6:b5:32:fc:44:65:8d:f7:e9:b4:2d:4b:
                    fb:34:8c:6f:26:78:2e:9f:32:5b:7f:d7:87:3d:3a:
                    b7:a1:ff:52:2e:d1:85:9c:67:31:cf:9b:db:55:f8:
                    6e:67:ba:13:a4:ac:81:5a:f0:2d:ec:5a:9a:99:28:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:B4:FE:95:72:54:9E:8F:8D:E6:22:50:45:5C:C7:BD:9C:5C:F0
            X509v3 Authority Key Identifier:
                keyid:3B:30:A5:B6:47:5E:0E:A9:24:57:2F:2C:8B:D2:43:88:15:C7:10:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/6/3B30A5B6475E0EA924572F2C8BD2438815C71081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCltkdeDqkkVy8si9JDiBXHEIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/6/AS57957.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:804a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:a5:ef:07:96:16:d0:68:8f:ac:5d:59:04:b9:18:8c:73:52:
         58:a2:73:b3:13:ea:7a:a5:76:75:2a:ae:8b:3f:fe:2b:7c:ef:
         3b:de:5a:11:5f:0a:97:27:a1:e8:86:c4:a3:55:32:da:51:a2:
         3c:4a:c8:aa:19:d8:7e:d8:fb:8e:fc:2d:a1:90:26:4a:f0:bd:
         24:41:7b:20:25:b5:dd:35:29:65:e7:40:24:0b:3c:d5:36:b1:
         2f:66:9d:28:6b:7a:98:19:f2:08:56:1c:12:29:26:51:c7:15:
         29:5c:57:15:aa:5b:80:8f:29:fb:37:53:76:88:5d:5e:30:04:
         96:5a:3b:0b:43:4d:14:87:4e:80:f0:3b:51:e2:be:b0:24:f5:
         7b:60:1d:4d:b2:e8:bf:06:73:5c:3c:b7:54:58:b6:e3:38:6b:
         03:52:cc:ec:64:71:00:1b:1f:c3:67:dd:cd:b3:7e:81:af:4b:
         83:fc:63:7e:43:ee:df:07:33:6b:6e:a2:8e:19:21:00:88:0c:
         c6:99:f6:b1:28:dd:d4:3c:40:b0:22:0a:4d:e5:cb:35:0f:80:
         6c:a0:a6:7d:c6:74:f8:50:8c:74:a3:fc:c8:8e:3d:2f:80:39:
         0f:2f:53:c1:a0:d4:1d:a3:d7:86:e8:8a:c6:1c:87:fa:a1:e4:
         01:13:ad:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----