Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa
File:                     326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa (raw, json)
Hash identifier:          b542A6PqytgoBn/Kb8rzL31x8deU80nPCHFZX4yZa2I=
Subject key identifier:   C3:CE:FE:86:E3:19:11:0F:55:11:37:DB:E5:34:25:30:1F:57:D9:08
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       17C9BE5AD5291AF6FED1EA10807AE05F66B42F4C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa
Signing time:             Tue 17 Oct 2023 16:13:31 +0000
ROA not before:           Tue 17 Oct 2023 16:08:31 +0000
ROA not after:            Tue 15 Oct 2024 16:13:31 +0000
asID:                     204518
IP address blocks:        2a12:dd47:8080::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c9:be:5a:d5:29:1a:f6:fe:d1:ea:10:80:7a:e0:5f:66:b4:2f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 17 16:08:31 2023 GMT
            Not After : Oct 15 16:13:31 2024 GMT
        Subject: CN=C3CEFE86E319110F551137DBE53425301F57D908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:ed:4a:2c:21:89:9a:9b:17:d1:f2:99:f8:
                    d0:8e:4f:83:42:20:90:89:5a:00:c0:9c:be:cd:82:
                    10:68:f6:74:b9:67:63:25:d5:4a:ee:ad:e9:4f:09:
                    8b:22:27:c0:df:2f:19:0a:ec:08:30:ac:6d:f4:c7:
                    6e:79:d5:5c:80:7a:1d:5a:d9:fa:77:d8:68:3e:cf:
                    67:56:4d:d0:8a:4a:79:cc:d4:b7:75:e7:1c:8e:80:
                    6a:2c:0e:85:79:f2:c5:ec:8c:c7:8b:af:d9:09:3c:
                    ec:f6:54:e5:b7:8f:73:5c:81:6d:84:89:1d:87:d6:
                    94:14:6b:e1:d2:2c:63:f0:3c:ad:30:15:1c:d1:ea:
                    58:6b:2d:3a:0c:f6:ad:8f:30:a7:ed:35:97:19:be:
                    71:41:e1:fe:54:74:0c:7e:09:41:56:e0:b4:af:53:
                    72:94:eb:28:cf:34:98:80:5e:d1:c7:3b:b6:d7:4c:
                    27:65:28:77:17:64:07:fb:99:4c:b7:8a:be:45:eb:
                    f9:34:1f:30:11:fb:fb:a8:62:de:89:48:8e:d3:41:
                    17:05:07:d2:b9:34:38:5a:94:97:df:70:c7:12:2c:
                    3b:5f:62:88:d9:45:0a:08:c5:ea:48:23:9e:f7:14:
                    93:75:06:51:4d:9a:c2:52:0e:f7:db:0b:20:8a:96:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CE:FE:86:E3:19:11:0F:55:11:37:DB:E5:34:25:30:1F:57:D9:08
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a383038303a3a2f34342d3438203d3e20323034353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8080::/44

    Signature Algorithm: sha256WithRSAEncryption
         bb:9f:e7:6f:8e:c7:67:62:d9:68:72:91:00:d3:16:7a:97:5e:
         a8:c4:bc:bd:2f:2e:bc:b4:af:69:bc:28:8b:03:c2:23:1c:2f:
         e7:8f:79:20:eb:97:1a:fc:a2:07:ba:0b:61:b9:8b:8c:8d:df:
         eb:d5:3e:1f:30:19:ac:ba:82:04:c2:81:07:04:80:3f:b2:0a:
         a3:16:3e:64:17:b0:9f:00:9c:f1:9f:77:c6:8d:08:2c:3a:67:
         cb:b4:eb:0b:5e:30:67:3c:25:b0:36:4d:29:81:c7:9e:c4:1a:
         ec:01:03:c4:6a:10:84:78:7e:17:7e:2f:28:5d:1c:77:f2:05:
         9d:94:c0:9f:6d:5f:13:d2:8d:8e:f5:38:cb:92:dc:56:cd:90:
         ae:cb:1f:84:dc:f2:ed:13:8e:a6:ef:e3:ad:6d:3c:c3:aa:af:
         3e:f3:1b:18:0c:a4:44:1b:81:0e:c1:ee:58:7c:2a:e0:3d:53:
         7c:45:af:ac:1c:d4:bf:d8:43:3d:bb:14:0d:e3:52:0c:24:d9:
         f6:ca:90:4d:a1:f7:74:1c:fa:25:31:ff:85:2c:04:57:07:be:
         d1:94:50:38:e3:a8:56:e3:9c:e8:2f:6f:47:24:3c:00:76:ba:
         44:6b:6f:9a:17:f5:a2:5d:03:82:ea:5b:86:d8:b1:dd:82:bc:
         20:fe:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----