Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/0/3231362e3134362e32382e302f32332d3233203d3e20393435.roa
File:                     3231362e3134362e32382e302f32332d3233203d3e20393435.roa (raw, json)
Hash identifier:          IzWWdHe5zZcTMszwB8BPFalr+Vn8F0n3Nzt7JVeztvo=
Subject key identifier:   E0:5D:AC:BA:B1:5E:09:09:D7:73:1F:BB:2C:E0:F1:C2:5E:F4:BF:F1
Certificate issuer:       /CN=5CBB625436B07790BB67B2A540D2F1520934B245
Certificate serial:       09B9F25C29B23AB79A8D63973BF70C73BADCA337
Authority key identifier: 5C:BB:62:54:36:B0:77:90:BB:67:B2:A5:40:D2:F1:52:09:34:B2:45
Authority info access:    rsync://rpki.august.tw/repo/HYSP/9/5CBB625436B07790BB67B2A540D2F1520934B245.cer
Subject info access:      rsync://rpki.co/repo/August/0/3231362e3134362e32382e302f32332d3233203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 03:43:27 +0000
ROA not before:           Sat 08 Apr 2023 03:38:27 +0000
ROA not after:            Sat 06 Apr 2024 03:43:27 +0000
asID:                     945
IP address blocks:        216.146.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b9:f2:5c:29:b2:3a:b7:9a:8d:63:97:3b:f7:0c:73:ba:dc:a3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CBB625436B07790BB67B2A540D2F1520934B245
        Validity
            Not Before: Apr  8 03:38:27 2023 GMT
            Not After : Apr  6 03:43:27 2024 GMT
        Subject: CN=E05DACBAB15E0909D7731FBB2CE0F1C25EF4BFF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:06:cf:aa:f0:0a:e7:b9:c3:a9:8a:b2:dd:f7:
                    1c:bf:b5:a6:4e:0d:cb:7a:bd:4a:18:fd:1c:76:94:
                    d6:37:2e:ff:6e:ba:38:b2:8c:fc:83:5f:76:db:3d:
                    59:cf:39:d2:2e:92:20:ec:c0:0e:2d:e7:23:35:85:
                    60:96:77:fa:bd:fd:12:9f:42:54:95:ee:56:3d:67:
                    fa:c3:2b:83:ea:ff:64:67:77:f6:6b:42:15:29:cf:
                    98:6c:d8:8a:c5:18:77:00:0f:26:78:b8:73:df:ac:
                    a7:4d:7d:20:5f:14:91:cd:88:fd:6a:17:54:dd:11:
                    44:20:06:99:75:e5:65:cc:cf:60:85:cc:39:0a:b1:
                    26:f5:75:13:b8:42:1c:d4:02:68:8d:79:1b:1b:79:
                    66:7a:5d:bf:a4:0f:ef:c7:c2:74:9a:35:12:d8:a0:
                    f4:42:b1:a7:f6:32:5c:f7:34:3b:3d:50:ee:2f:2e:
                    cc:05:8b:c2:14:03:f7:72:ba:b4:95:71:dd:1a:e0:
                    8b:f8:a7:3c:64:1d:9b:a8:6c:87:8a:c8:7d:1d:b2:
                    1b:f9:4f:95:2a:f8:9d:e1:76:20:6c:4b:87:5a:50:
                    98:ca:2e:6c:16:a8:2d:83:fb:ed:16:1d:66:4f:c5:
                    ab:9f:cf:e2:71:6c:c4:02:d0:05:a0:7c:2e:82:19:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5D:AC:BA:B1:5E:09:09:D7:73:1F:BB:2C:E0:F1:C2:5E:F4:BF:F1
            X509v3 Authority Key Identifier:
                keyid:5C:BB:62:54:36:B0:77:90:BB:67:B2:A5:40:D2:F1:52:09:34:B2:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/0/5CBB625436B07790BB67B2A540D2F1520934B245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/9/5CBB625436B07790BB67B2A540D2F1520934B245.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/0/3231362e3134362e32382e302f32332d3233203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:81:db:5e:47:b1:26:66:e2:38:8f:de:a6:a0:48:cc:c3:46:
         1d:fd:d8:84:27:dc:5c:ff:b7:ca:47:2a:49:56:75:60:61:e7:
         2a:42:98:a1:51:d0:06:57:b3:d3:9c:9d:af:12:56:d5:a3:0a:
         b6:03:5d:4a:86:98:f5:fb:04:35:09:a0:3f:b7:e3:ee:d0:6b:
         56:37:33:73:6c:88:bc:96:0e:6e:39:5e:ad:ce:c7:0d:8c:7a:
         c8:12:3f:94:fc:20:f8:f0:4f:af:36:a4:d2:f6:47:a6:3b:60:
         7b:c8:a9:2d:e5:49:f7:70:d0:d2:91:60:69:59:74:5b:d7:c5:
         b2:c7:b1:a0:9b:3f:a7:8e:16:59:79:1a:2e:c7:03:60:ec:2c:
         35:3a:08:bc:d5:cf:3b:5d:45:d1:84:e8:b1:ca:92:16:b7:e8:
         99:4d:5a:fd:0a:0d:31:42:9e:96:b8:58:ea:16:9a:b9:d4:1d:
         b9:55:52:8e:c1:b6:f5:af:35:24:ad:88:0a:9c:72:a3:64:5c:
         35:03:cb:22:12:f8:cb:cc:b2:a0:49:d6:86:5b:e1:94:c6:7b:
         35:aa:ec:ea:55:24:ea:3b:3b:39:00:3e:7c:5a:34:6c:f4:1a:
         92:3c:5f:e6:59:e2:58:67:02:08:c8:b4:77:93:09:e7:4c:ea:
         05:40:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----