Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/14/326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa
File:                     326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa (raw, json)
Hash identifier:          e8mf/Ef37MFcYzYWSKLMf3x4aM/H4HiVkTLIRSKPsdg=
Subject key identifier:   08:E2:73:F5:EF:6D:49:43:59:B0:33:E7:F4:79:5E:48:F2:E0:78:3B
Certificate issuer:       /CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
Certificate serial:       47582F253E2705B585364BFF48E6A6EA25BB557D
Authority key identifier: 3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9
Authority info access:    rsync://dev.tw/rpki/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer
Subject info access:      rsync://rpki.co/repo/AS945/14/326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa
Signing time:             Thu 04 Apr 2024 15:36:17 +0000
ROA not before:           Thu 04 Apr 2024 15:31:17 +0000
ROA not after:            Thu 03 Apr 2025 15:36:17 +0000
asID:                     215165
IP address blocks:        2a05:dfc6:9400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:58:2f:25:3e:27:05:b5:85:36:4b:ff:48:e6:a6:ea:25:bb:55:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9
        Validity
            Not Before: Apr  4 15:31:17 2024 GMT
            Not After : Apr  3 15:36:17 2025 GMT
        Subject: CN=08E273F5EF6D494359B033E7F4795E48F2E0783B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:9e:42:c9:9e:f6:df:78:12:dd:b3:4a:c5:
                    dd:bc:aa:66:6e:8f:9f:b4:32:c9:ca:32:50:ba:f3:
                    f3:66:2b:74:c3:cd:2b:88:1b:50:ca:3a:d5:b7:c9:
                    93:37:ab:87:8d:18:ff:8a:75:52:e6:e4:50:05:23:
                    66:ea:15:8e:65:80:0c:b2:ad:ce:e1:a3:e2:99:a8:
                    e3:27:d7:87:97:23:27:02:63:ef:0a:2a:4a:ad:1b:
                    9a:66:3b:86:63:a4:0e:ce:23:34:08:f4:a1:dc:f7:
                    7e:e3:8a:1a:75:e7:9c:e8:07:d8:73:c5:fd:12:3b:
                    34:ec:e7:25:92:fd:15:96:92:67:30:eb:39:ed:1c:
                    29:c5:70:d1:e2:ad:b0:16:4d:39:ea:ec:db:91:70:
                    73:97:11:f6:df:df:f0:68:0c:58:7d:a3:a6:37:a7:
                    13:9c:07:c8:59:69:fb:d0:17:73:78:56:8d:33:57:
                    47:c5:d0:a4:96:bd:94:c9:be:7a:cc:95:cf:37:c0:
                    e6:01:74:42:31:9a:de:38:3a:28:34:40:a9:a5:15:
                    6a:56:67:aa:bd:45:e7:64:05:3c:dc:e5:3b:66:90:
                    f8:8c:3a:6a:ca:f8:bf:d9:9c:aa:6d:7b:01:90:56:
                    dc:c8:8b:17:85:6b:8f:04:3f:2e:0f:bc:22:92:0e:
                    21:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E2:73:F5:EF:6D:49:43:59:B0:33:E7:F4:79:5E:48:F2:E0:78:3B
            X509v3 Authority Key Identifier:
                keyid:3E:38:23:CF:F4:D4:1C:2C:6F:6B:3A:20:CC:DD:59:F6:EB:BE:AD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/14/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/13/3E3823CFF4D41C2C6F6B3A20CCDD59F6EBBEADE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/14/326130353a646663363a393430303a3a2f34302d3438203d3e20323135313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:62:3b:7b:13:01:7a:49:d8:a8:55:83:49:61:88:cf:5e:c4:
         4e:9c:50:7b:47:30:76:97:9d:db:ab:5f:50:99:50:c4:73:50:
         fc:80:d6:ab:2d:50:5a:a5:b5:2f:39:fc:c8:db:de:92:5f:63:
         fc:a9:6c:65:6a:16:48:f1:f8:a6:da:57:89:b5:2b:0e:ec:aa:
         d0:8e:cf:5a:ac:5a:ba:a4:b6:fb:7e:f4:d8:e9:1e:d0:af:25:
         4d:c1:33:f2:84:62:7b:93:b8:79:e0:22:8c:b8:e5:ae:2e:14:
         59:fc:42:4b:70:eb:3d:a1:18:0d:92:bc:19:e1:36:6a:98:0d:
         9a:38:1c:f4:f9:a0:06:01:13:81:0d:eb:72:b2:20:fc:72:f3:
         a1:13:d8:94:d4:db:66:5c:5c:ae:7a:d3:88:a8:61:af:f8:58:
         83:46:38:4b:32:e3:eb:93:bb:ca:c8:70:6c:e0:d7:83:56:a9:
         02:07:c0:ec:55:20:6b:d8:b8:0c:6d:b2:e2:23:8c:74:d6:e5:
         33:02:ca:f2:16:81:cd:36:f0:47:54:ce:ab:04:aa:13:fe:46:
         d2:1c:b1:73:f7:ea:51:13:51:19:5c:d3:a5:2f:1c:db:31:6e:
         da:ca:6a:f0:cb:73:6a:ee:e2:38:cd:fb:7a:ba:63:22:9e:8e:
         25:8d:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----