Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/localname/9/3231362e3134362e32382e302f32332d3233203d3e203437343439.roa
File:                     3231362e3134362e32382e302f32332d3233203d3e203437343439.roa (raw, json)
Hash identifier:          2ABR7c0FqU+6lzXKReLzagucMLZDTP5z7b+97zmMwlU=
Subject key identifier:   B4:78:D4:15:9D:C3:2D:82:08:DA:63:85:2D:BB:59:5F:3D:25:1F:F4
Certificate issuer:       /CN=eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb
Certificate serial:       6C60DD703C679B406D384541C866A22E590278BA
Authority key identifier: 5E:6C:57:98:EB:91:7B:F4:55:68:B2:4B:35:8F:DE:E7:E9:6E:B1:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb.cer
Subject info access:      rsync://rpki.august.tw/repo/localname/9/3231362e3134362e32382e302f32332d3233203d3e203437343439.roa
Signing time:             Tue 21 Jun 2022 18:32:34 +0000
ROA not before:           Tue 21 Jun 2022 18:27:34 +0000
ROA not after:            Tue 20 Jun 2023 18:32:34 +0000
asID:                     47449
IP address blocks:        216.146.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:60:dd:70:3c:67:9b:40:6d:38:45:41:c8:66:a2:2e:59:02:78:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb
        Validity
            Not Before: Jun 21 18:27:34 2022 GMT
            Not After : Jun 20 18:32:34 2023 GMT
        Subject: CN=B478D4159DC32D8208DA63852DBB595F3D251FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:23:57:e9:db:8c:72:db:38:be:56:dc:46:
                    7c:8b:83:71:d3:25:8f:ee:2e:6e:19:11:02:8c:41:
                    de:82:d4:ba:be:35:a8:01:0c:be:dc:76:b3:09:43:
                    00:f5:34:35:7a:61:0c:b9:0d:4d:c5:97:d4:53:7f:
                    2a:f3:13:ba:0d:31:e6:51:0c:7d:93:8f:1d:3e:78:
                    f9:b1:c1:e4:eb:4c:da:f4:72:96:3a:99:f0:ab:bd:
                    9b:33:b6:13:d2:bc:fb:c4:0f:64:8b:38:e8:7f:3a:
                    68:d2:be:97:1a:5b:65:c4:0c:9b:70:9a:b2:0a:13:
                    fa:d9:bf:ee:09:9d:47:6d:4f:2e:79:4c:7d:f6:95:
                    43:69:6e:e8:7a:3c:26:b0:69:a0:95:91:f5:14:06:
                    ca:a4:b4:ca:1a:89:5b:f4:45:91:55:93:f6:f3:82:
                    8f:62:4e:d3:9b:17:fe:84:5f:b2:94:9e:de:38:0b:
                    b3:26:66:df:60:18:7f:d5:81:95:77:a6:1f:c6:57:
                    d4:62:b3:17:ee:95:05:88:cc:71:1e:2f:cf:cb:d2:
                    c1:90:c0:b4:ed:38:74:56:10:82:d3:f0:be:3e:8e:
                    20:16:04:a9:11:e3:0c:64:97:39:d3:d9:b6:f3:6d:
                    55:7b:9e:05:15:65:75:79:71:e3:64:09:24:ca:12:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:78:D4:15:9D:C3:2D:82:08:DA:63:85:2D:BB:59:5F:3D:25:1F:F4
            X509v3 Authority Key Identifier:
                keyid:5E:6C:57:98:EB:91:7B:F4:55:68:B2:4B:35:8F:DE:E7:E9:6E:B1:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/localname/9/5E6C5798EB917BF45568B24B358FDEE7E96EB13A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919a8adf93827bfbf43ffa9676cf3a4b9c1a167aaeb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/localname/9/3231362e3134362e32382e302f32332d3233203d3e203437343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:f0:63:b0:a8:58:81:15:86:6f:e9:bb:eb:cd:eb:ab:2f:88:
         e9:d7:98:16:60:cc:46:6e:12:f4:76:93:85:cf:d8:eb:1a:f0:
         e2:cc:39:0f:39:51:00:c3:a2:80:86:95:4e:a7:2e:fa:6a:1b:
         7e:95:20:d9:f0:2a:8a:c9:dc:d3:60:6a:0e:4f:fb:ef:4c:5f:
         74:34:e6:1d:64:d5:8c:6b:1c:71:90:9f:9c:4b:79:3b:45:df:
         a3:47:7d:6b:d4:6b:2d:0b:fc:86:e1:73:a9:95:cf:59:e4:b9:
         97:58:ec:85:4a:e2:4e:92:35:15:ff:a0:b3:04:f5:f8:d0:f7:
         3d:6b:9c:1f:a8:6b:c0:8e:09:39:a7:66:62:73:c4:57:ae:fa:
         02:32:63:bf:96:5a:12:6d:c7:58:6f:65:cf:ae:5c:25:47:e0:
         5a:64:1c:e7:0c:86:23:2d:dc:f7:8c:d0:26:de:31:a4:27:e9:
         f6:24:ba:e0:14:99:e4:42:5e:66:5c:92:95:f2:b2:3d:13:6e:
         22:c6:59:8d:07:25:4b:44:76:fc:fc:6f:05:66:93:2e:32:01:
         d7:29:74:56:25:73:10:1a:47:21:e3:b8:00:28:b3:54:03:23:
         95:dc:94:0c:3c:a6:87:b9:3c:63:dc:d1:5c:1a:0a:fb:de:68:
         95:d9:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----