Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a333430303a3a2f33382d3338203d3e20323030383237.roa
File:                     326131323a646434373a333430303a3a2f33382d3338203d3e20323030383237.roa (raw, json)
Hash identifier:          cETeJOrdxVORxpc5LZUKodLEPF4yISBHkXqxT3iF5xs=
Subject key identifier:   EF:67:9E:B1:6A:E1:9F:B2:8D:84:87:65:AD:82:C2:0A:F0:F2:61:21
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       3435100EA91A89BAEBD1BF9A95A057AA200D9612
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/326131323a646434373a333430303a3a2f33382d3338203d3e20323030383237.roa
Signing time:             Tue 17 Oct 2023 16:13:35 +0000
ROA not before:           Tue 17 Oct 2023 16:08:35 +0000
ROA not after:            Tue 15 Oct 2024 16:13:35 +0000
asID:                     200827
IP address blocks:        2a12:dd47:3400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:35:10:0e:a9:1a:89:ba:eb:d1:bf:9a:95:a0:57:aa:20:0d:96:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 17 16:08:35 2023 GMT
            Not After : Oct 15 16:13:35 2024 GMT
        Subject: CN=EF679EB16AE19FB28D848765AD82C20AF0F26121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ef:3d:c4:f8:a7:b1:21:12:b8:b6:66:b6:3b:
                    93:0c:16:ad:d2:75:4b:4f:5d:fa:e7:2d:07:46:59:
                    4d:bb:69:59:62:ec:10:f7:b3:68:c6:9e:b1:6d:1e:
                    0c:27:fd:72:ff:43:ce:b9:8e:1f:0a:7b:a3:eb:e0:
                    ba:9d:93:5b:db:8e:12:b5:f8:4f:08:5b:e4:1f:e5:
                    95:42:f4:ac:87:a6:c0:4f:f4:a5:64:f0:25:33:aa:
                    14:65:a9:37:2d:3e:8f:af:25:c3:b8:13:9d:78:96:
                    76:1d:6f:c1:00:74:60:0c:2a:35:6e:84:e2:f0:8e:
                    c6:0c:30:ed:6f:56:ff:ff:0e:60:ee:36:8f:a0:8d:
                    d9:3c:36:59:1b:9a:4f:9f:84:7c:5a:0b:26:6a:8c:
                    83:b9:f9:94:c0:03:89:38:2b:1d:6c:c4:5a:7b:16:
                    14:7e:8e:c4:8f:94:de:21:55:3e:5e:3e:0b:e1:3f:
                    39:d4:3c:d6:fc:ab:d1:83:e9:53:21:dc:f5:93:3a:
                    ab:1c:0f:c9:c6:60:dc:ea:71:7c:f4:44:c0:6d:f4:
                    f1:8e:2c:ef:62:88:76:4b:6b:a1:be:e2:60:b1:44:
                    5b:2f:69:2c:7d:27:dd:f4:63:4d:92:e7:7a:0d:77:
                    c6:ed:f5:5d:82:ce:78:cd:65:65:db:54:87:94:c8:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:67:9E:B1:6A:E1:9F:B2:8D:84:87:65:AD:82:C2:0A:F0:F2:61:21
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a333430303a3a2f33382d3338203d3e20323030383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3400::/38

    Signature Algorithm: sha256WithRSAEncryption
         d5:af:bd:b2:15:61:4c:89:1c:5f:d0:d5:6f:48:96:41:b5:df:
         cc:a9:57:1b:f1:02:47:61:17:c7:59:a1:d8:8d:40:54:43:7d:
         50:1a:11:25:b7:1a:04:b1:dd:97:7c:e7:92:26:47:c0:94:b0:
         77:d6:3b:c5:2e:b4:0b:49:52:77:df:34:01:0e:1c:b2:4a:aa:
         11:70:51:38:3d:c7:0f:c8:1a:cd:84:84:35:38:73:c0:f6:50:
         f4:45:d3:51:96:ec:83:b6:c9:7e:da:a0:ce:75:be:f4:34:7c:
         f3:0e:e3:b3:ce:0e:fe:ea:84:a1:dd:5d:81:72:78:48:16:1a:
         ca:cb:4a:15:de:a2:fa:34:4c:7e:0b:eb:33:f1:d0:87:17:2f:
         07:54:3d:87:11:1b:59:c2:4b:bc:33:8c:0f:80:30:29:f4:a1:
         4c:aa:14:b7:5f:8c:b9:17:b4:8c:fd:51:a2:27:7c:9f:5a:d4:
         a3:de:e0:da:58:29:ba:22:e5:e8:f8:16:ed:a3:44:3f:8f:f5:
         42:9c:47:cd:ff:34:94:f1:37:bb:cd:ff:b6:33:a0:29:4f:19:
         d9:2e:9a:48:5e:df:bf:f2:88:58:5a:17:d4:4d:7c:d9:2a:bb:
         34:fe:5e:a2:1c:75:77:9e:c6:60:29:84:19:65:84:d3:3d:cc:
         6d:a3:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----