Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a386530303a3a2f34342d3438203d3e20323031333938.roa
File:                     326131323a646434373a386530303a3a2f34342d3438203d3e20323031333938.roa (raw, json)
Hash identifier:          /rx4d/YhJDimsrJDoSRnYhgSjoiBq+2i5rGljHu9IfU=
Subject key identifier:   3E:9E:E9:F2:44:18:E1:B4:81:44:2A:08:6A:6D:1F:76:C4:12:C0:E2
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       18F655C2781509C03E4B390A9E0C3B8C31FA9A9D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/326131323a646434373a386530303a3a2f34342d3438203d3e20323031333938.roa
Signing time:             Tue 17 Oct 2023 16:13:25 +0000
ROA not before:           Tue 17 Oct 2023 16:08:25 +0000
ROA not after:            Tue 15 Oct 2024 16:13:25 +0000
asID:                     201398
IP address blocks:        2a12:dd47:8e00::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f6:55:c2:78:15:09:c0:3e:4b:39:0a:9e:0c:3b:8c:31:fa:9a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 17 16:08:25 2023 GMT
            Not After : Oct 15 16:13:25 2024 GMT
        Subject: CN=3E9EE9F24418E1B481442A086A6D1F76C412C0E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:60:4c:b2:e8:33:2b:73:78:d2:21:88:10:
                    ce:0e:f2:e6:4a:cf:bd:f1:cc:05:ac:56:7d:ad:f8:
                    56:69:86:db:72:b7:aa:3f:40:bb:cb:49:1f:79:ec:
                    f0:55:9b:92:ed:b7:9e:36:cb:26:58:38:66:5c:15:
                    12:d1:0e:96:fc:f7:72:e1:c5:ef:65:45:d8:36:e7:
                    a7:18:9a:01:3b:cf:01:2e:4a:e5:8e:ff:e6:97:19:
                    a3:5a:f8:47:04:cf:5d:74:5d:84:b0:6b:87:3d:ed:
                    bd:66:50:76:ca:7a:29:fb:d6:ca:90:b5:c7:1d:0f:
                    5c:0e:43:d2:23:b3:64:72:49:46:67:0b:a3:e4:dd:
                    00:e3:83:f8:e8:3b:a5:fc:8f:5a:4b:3d:b9:17:53:
                    14:fa:76:64:6c:41:91:51:58:87:3c:55:f6:1e:77:
                    0a:61:a8:8f:5f:2f:05:76:6c:bb:96:83:61:19:5e:
                    89:f4:9c:b7:e9:eb:9d:0a:88:fb:c1:ab:71:2e:7f:
                    db:af:28:33:62:69:76:03:4b:12:d9:c4:90:b0:64:
                    07:e4:44:c9:ec:b7:1b:66:7e:64:b0:75:96:22:66:
                    f1:89:5f:a3:9f:ef:a2:ea:54:66:f4:39:fd:68:f6:
                    01:9c:22:0e:47:34:77:94:68:39:15:58:02:3f:a9:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9E:E9:F2:44:18:E1:B4:81:44:2A:08:6A:6D:1F:76:C4:12:C0:E2
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a386530303a3a2f34342d3438203d3e20323031333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         14:80:32:fc:cd:aa:53:67:51:81:09:1b:d7:c1:bc:19:65:2e:
         fa:48:10:d1:32:24:84:0c:2f:f2:e2:5c:a5:b1:6d:65:1c:d6:
         a1:2e:bf:9c:e1:b2:49:19:06:c6:6f:35:f2:47:b5:3f:4a:4c:
         c3:0a:c8:19:47:ed:66:84:0a:42:87:4f:1f:b9:02:4c:7f:59:
         44:80:b3:2a:58:33:ed:09:63:2f:4f:c3:96:7b:65:b2:db:7a:
         8f:af:67:5e:39:b8:86:b6:fd:49:2f:df:84:b0:b7:89:a4:1f:
         5c:71:20:a4:f2:ae:21:57:f1:61:c1:e2:f4:6c:e6:e3:d1:4e:
         aa:f2:99:11:09:37:11:38:c4:58:d4:44:ac:62:56:9a:52:a9:
         66:42:2f:36:24:83:76:85:1a:85:2b:cb:57:f1:4c:32:ba:c1:
         d0:96:55:60:f9:42:71:b7:24:42:bb:96:2b:09:7e:41:bf:e0:
         47:a2:d2:f2:e4:af:6c:7c:23:b2:e0:6c:4b:ca:39:bb:fb:aa:
         9a:ae:0d:34:e4:59:b8:e9:d7:ff:83:88:d1:f5:89:39:05:bd:
         13:80:e5:db:e4:e8:d7:36:39:ea:a1:d7:0a:22:50:77:fa:43:
         da:3f:fd:75:01:70:fa:07:96:f5:87:bb:bf:f5:8e:16:11:f4:
         74:43:fb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----