Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3438203d3e2037373139.roa
File:                     323630323a3233343a3a2f33322d3438203d3e2037373139.roa (raw, json)
Hash identifier:          wqjPzt0rLyMrTJnc1SG9QBkYpJObS1edubB1TmuUR5M=
Subject key identifier:   E7:32:2E:0E:B3:48:23:16:DA:03:68:20:46:69:FB:BA:3A:F6:BE:1F
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       59B9BF2705490FC5DE62F316E438D89724DB03B1
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://dev.tw/rpki/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3438203d3e2037373139.roa
Signing time:             Tue 14 May 2024 01:24:59 +0000
ROA not before:           Tue 14 May 2024 01:19:59 +0000
ROA not after:            Tue 13 May 2025 01:24:59 +0000
asID:                     7719
IP address blocks:        2602:234::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b9:bf:27:05:49:0f:c5:de:62:f3:16:e4:38:d8:97:24:db:03:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: May 14 01:19:59 2024 GMT
            Not After : May 13 01:24:59 2025 GMT
        Subject: CN=E7322E0EB3482316DA0368204669FBBA3AF6BE1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:c0:1f:cf:20:c7:85:bf:cf:01:82:e0:de:
                    5a:cf:b4:fc:44:ec:23:51:39:37:41:49:4f:7d:c0:
                    2d:42:10:4d:f9:00:12:4a:aa:2f:60:c5:14:30:27:
                    09:d0:25:60:fe:af:0f:24:84:03:59:5b:2e:38:a3:
                    ee:d0:bd:45:4e:3e:cd:03:c8:69:f3:45:22:42:fa:
                    57:66:74:55:ae:b3:1e:3c:40:64:ac:e7:36:4d:bd:
                    ab:72:d0:ae:dc:7c:9b:f1:f5:41:a7:b3:3a:0e:ab:
                    1c:e5:66:80:14:14:93:a1:8f:59:d4:f5:e8:a7:41:
                    2d:40:5a:b8:d1:26:b1:e1:f6:fc:d5:28:59:bd:44:
                    6d:ff:ef:b0:9e:8b:22:21:06:0d:98:3d:49:32:01:
                    56:56:ba:f4:07:e8:9e:6c:9f:e5:67:70:17:5b:26:
                    56:56:70:c6:4d:bd:3f:71:40:ae:0a:52:31:c1:a2:
                    8a:49:02:2a:b2:1d:76:d6:c3:38:4e:86:90:67:a6:
                    89:d5:00:b7:d0:0c:5f:9d:d6:1c:20:47:25:3e:9a:
                    1f:83:c8:ec:6d:73:c3:67:2e:6e:72:4e:25:7e:15:
                    4d:63:c3:7c:d6:19:76:40:84:c0:c7:10:7a:a1:fd:
                    0e:17:ff:9d:93:99:b4:6f:75:57:5f:37:44:d3:a6:
                    49:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:32:2E:0E:B3:48:23:16:DA:03:68:20:46:69:FB:BA:3A:F6:BE:1F
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/323630323a3233343a3a2f33322d3438203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:16:94:5b:f7:78:37:37:10:a9:0b:a1:9c:4c:eb:59:67:
         82:0e:45:bd:4d:ee:f7:e8:c1:4f:b5:2f:4f:12:98:af:a9:7c:
         cd:fd:10:7d:1a:22:22:f3:44:38:0d:5a:d7:05:ab:7b:70:d6:
         9b:00:67:92:ba:a2:16:e3:0f:dd:50:54:69:af:45:97:b7:e9:
         19:a1:48:10:1b:b2:d7:6f:58:1d:cb:6b:e2:3a:d1:b3:07:70:
         7e:22:83:9b:0a:3e:37:f0:7c:0b:dd:ed:3c:6f:f8:e9:8d:92:
         e5:24:66:3f:dc:9f:c7:29:d3:a5:f0:a9:71:b5:05:fb:a1:96:
         91:fa:e9:38:05:28:1b:5b:dc:73:9d:aa:21:39:21:81:c5:05:
         68:2d:d8:98:7d:90:ad:16:64:a7:fa:8f:b6:94:af:ba:9e:57:
         2b:8a:09:9f:82:43:19:65:6a:20:92:36:4f:82:5c:59:a4:22:
         d2:9b:c1:0a:93:f3:c2:e7:8e:39:d6:ec:7a:49:74:38:63:c1:
         36:21:a1:9b:95:1b:73:ec:d6:85:93:0d:6a:31:6a:06:06:a9:
         24:99:62:a7:96:08:04:32:c8:9d:73:0c:50:14:eb:5c:9d:31:
         6a:86:6a:6d:0a:c9:07:02:02:14:57:4f:a5:5c:2b:58:f7:06:
         7b:ff:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----