Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa
File:                     323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa (raw, json)
Hash identifier:          4gIgyZrytaWbXB8iyoxvOT9/lYaYwjVMdJwz8Yi+Rqo=
Subject key identifier:   F0:49:84:D7:D5:9C:B1:0E:7E:C5:2C:88:92:6A:5E:98:B5:C4:68:1D
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       15BE3E0551DAD1B4777DBAB9D7957876B6E75CB5
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa
Signing time:             Mon 11 Mar 2024 04:13:46 +0000
ROA not before:           Mon 11 Mar 2024 04:08:46 +0000
ROA not after:            Mon 10 Mar 2025 04:13:46 +0000
asID:                     207852
IP address blocks:        2602:fc23:11b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:be:3e:05:51:da:d1:b4:77:7d:ba:b9:d7:95:78:76:b6:e7:5c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Mar 11 04:08:46 2024 GMT
            Not After : Mar 10 04:13:46 2025 GMT
        Subject: CN=F04984D7D59CB10E7EC52C88926A5E98B5C4681D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:fe:04:2a:0a:fe:94:25:44:b8:f9:e1:34:
                    2c:b9:b2:96:ed:41:38:fe:eb:d3:f4:da:9a:d2:cb:
                    71:b6:c9:c7:55:4d:de:83:a1:f1:1c:ee:91:74:42:
                    31:1b:a6:ba:16:13:b3:d8:5e:2d:11:78:6d:97:c8:
                    9d:c8:29:8c:ad:67:1a:19:e7:6d:b7:c9:94:56:a9:
                    f1:64:e8:84:71:ec:d9:b3:43:ce:fe:8f:1c:5a:bc:
                    ef:f6:aa:65:a4:64:a2:c6:f2:06:49:90:54:cb:dd:
                    21:60:c4:bb:50:3e:39:b8:44:c5:8f:e4:a3:35:04:
                    4e:dd:7b:b0:d4:cc:f8:b2:d9:f3:f4:ed:77:85:76:
                    59:86:1e:c0:18:d2:85:59:60:e3:fc:83:ed:03:06:
                    8f:81:8c:41:00:f2:f0:37:a0:51:3a:6a:2a:4c:8b:
                    5f:52:53:33:11:13:02:b0:77:1e:a1:3a:a7:73:d2:
                    5e:15:c3:b9:d1:7e:50:73:06:78:8e:2d:cb:e5:59:
                    9c:fa:55:b5:75:8f:bc:a5:0d:11:a7:6c:ad:34:0e:
                    28:43:90:2d:38:98:7c:8f:7c:71:e2:b6:de:00:0d:
                    09:80:aa:eb:cd:67:27:46:50:8f:cb:c3:17:a1:46:
                    02:8b:21:f7:cb:24:32:91:b5:ac:19:68:ff:c6:42:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:49:84:D7:D5:9C:B1:0E:7E:C5:2C:88:92:6A:5E:98:B5:C4:68:1D
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:11b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:ec:22:74:20:ee:b8:66:b6:00:ff:6a:45:fd:2e:69:58:90:
         0c:2b:56:5f:f0:de:eb:e2:bf:12:0a:4e:96:29:82:3e:ab:40:
         3a:54:6d:a1:61:46:cf:c0:c3:32:da:1e:54:5c:e5:bd:59:6b:
         5a:ab:fa:95:27:b0:b8:bc:27:0c:35:94:42:f7:e4:b7:76:53:
         e7:67:10:e0:a3:ea:4c:d1:44:4a:bc:98:c1:4b:6a:f0:65:85:
         bc:8f:b8:05:29:47:d4:a1:9c:d6:41:48:a9:df:5b:44:22:4d:
         05:75:57:00:55:90:f7:85:29:9b:cb:40:83:64:f7:c4:ca:06:
         47:c5:c9:db:94:ed:f2:a4:3b:1f:dc:8a:2c:5d:1c:65:b4:ed:
         45:6d:f0:0a:fb:09:1b:cc:14:81:9f:45:26:c2:84:ab:1a:57:
         10:9e:f2:06:68:82:32:87:89:6e:b6:4a:fc:a5:93:ed:cb:e7:
         02:14:29:ba:be:5a:79:43:12:fd:6a:96:af:d4:ac:d2:66:25:
         76:9d:67:39:a8:30:02:8c:8b:2c:2c:ef:87:71:a4:7f:67:ca:
         65:87:7f:62:35:14:6f:d1:93:fd:f4:d4:d1:94:10:9f:d0:73:
         5b:3f:17:51:88:d9:47:c9:91:d4:0a:c0:28:3c:1d:80:ec:28:
         89:0a:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----