Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/0/323630323a666266363a3a2f34342d3434203d3e20393435.roa
File:                     323630323a666266363a3a2f34342d3434203d3e20393435.roa (raw, json)
Hash identifier:          8RmF4l9dB9SuU4nJifyAyQ+Z+GDI8j+hqrHHakRGi+U=
Subject key identifier:   D5:36:86:F6:5C:1D:07:5A:45:6C:59:3E:B9:53:9D:F0:20:8B:72:C4
Certificate issuer:       /CN=5CBB625436B07790BB67B2A540D2F1520934B245
Certificate serial:       32B5B2517157CF5625F5EA8BDF336617340AF73D
Authority key identifier: 5C:BB:62:54:36:B0:77:90:BB:67:B2:A5:40:D2:F1:52:09:34:B2:45
Authority info access:    rsync://rpki.august.tw/repo/HYSP/9/5CBB625436B07790BB67B2A540D2F1520934B245.cer
Subject info access:      rsync://rpki.co/repo/August/0/323630323a666266363a3a2f34342d3434203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 04:05:02 +0000
ROA not before:           Sat 08 Apr 2023 04:00:02 +0000
ROA not after:            Sat 06 Apr 2024 04:05:02 +0000
asID:                     945
IP address blocks:        2602:fbf6::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b5:b2:51:71:57:cf:56:25:f5:ea:8b:df:33:66:17:34:0a:f7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CBB625436B07790BB67B2A540D2F1520934B245
        Validity
            Not Before: Apr  8 04:00:02 2023 GMT
            Not After : Apr  6 04:05:02 2024 GMT
        Subject: CN=D53686F65C1D075A456C593EB9539DF0208B72C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:f9:ec:c1:2f:7d:0f:a5:98:42:6e:7e:71:
                    18:2f:85:fb:88:2b:1d:ba:93:4b:bd:aa:ba:cb:e0:
                    8d:07:fb:43:8d:69:09:0e:0a:22:2c:b9:c9:6a:2b:
                    f4:53:05:ec:31:6d:f6:bb:d0:f6:83:db:30:f7:54:
                    b9:95:ac:43:ad:ff:e8:22:a2:51:42:c7:da:73:20:
                    21:99:cf:4d:e3:6a:5c:3e:14:a1:67:3b:62:da:bc:
                    24:7d:b0:77:40:21:ec:ba:f7:e5:63:a2:3a:ff:67:
                    9b:11:26:25:a4:95:9f:30:19:6c:30:a5:b3:c5:9d:
                    2c:92:12:9e:ec:e5:b4:58:f7:c5:3d:7b:8b:c0:89:
                    3a:4b:8d:5c:99:86:97:d0:7c:25:33:c2:23:ef:60:
                    30:3a:99:36:91:61:aa:fe:ce:ce:f8:7a:14:ea:20:
                    68:92:18:c5:84:b6:00:e7:8c:ea:82:9a:52:e4:09:
                    d4:31:82:46:3d:7a:8a:b5:f6:e0:c4:fc:dc:bf:e8:
                    73:4e:15:29:b0:b1:d2:eb:54:47:ad:68:4d:cd:45:
                    3f:58:ee:a9:3a:e3:c9:ea:9f:b6:ae:2e:f6:5e:74:
                    c1:01:6d:7c:b7:5d:65:21:8e:9e:80:79:1b:1d:3f:
                    ea:63:a3:17:26:ae:a6:2b:30:e6:3e:f9:07:84:6d:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:36:86:F6:5C:1D:07:5A:45:6C:59:3E:B9:53:9D:F0:20:8B:72:C4
            X509v3 Authority Key Identifier:
                keyid:5C:BB:62:54:36:B0:77:90:BB:67:B2:A5:40:D2:F1:52:09:34:B2:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/0/5CBB625436B07790BB67B2A540D2F1520934B245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/9/5CBB625436B07790BB67B2A540D2F1520934B245.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/0/323630323a666266363a3a2f34342d3434203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf6::/44

    Signature Algorithm: sha256WithRSAEncryption
         19:a4:e5:79:e2:fb:60:f3:c0:ba:8d:8d:46:06:32:a0:d5:c2:
         5f:d7:3f:18:4a:7d:b6:df:1f:2a:c4:fc:2d:5c:64:03:d6:8a:
         3d:4f:db:ea:96:1f:30:45:0f:84:c1:4a:27:8a:1a:a9:c6:e6:
         90:65:f1:ca:be:2e:ae:2f:29:49:79:25:4a:59:2a:c5:82:db:
         f7:5e:2d:fc:c2:a5:37:43:a1:ff:3f:96:29:bd:45:76:9f:3e:
         8e:f5:61:1b:ee:51:b9:65:06:e0:13:b1:3a:31:4f:b0:ca:c6:
         f4:0f:08:95:42:1a:65:73:46:38:4f:4d:9e:30:96:30:ec:8a:
         10:88:1c:ca:12:04:e8:f9:de:0b:9e:3b:e9:94:d2:d3:bf:0d:
         9c:0c:72:e3:60:dd:1c:86:7f:d3:06:93:83:c7:7d:11:8c:b5:
         dd:0e:b2:88:20:6c:d8:4c:bf:22:aa:cb:71:ba:e3:ae:aa:a1:
         41:95:bf:7c:90:ac:da:c3:a5:55:0b:68:70:fc:3b:57:8c:e2:
         85:42:6a:ca:1f:72:2d:f8:df:80:81:f4:9f:de:cd:1e:c8:71:
         42:db:90:1f:91:a2:a1:64:88:55:5e:b4:94:51:1e:10:79:cd:
         22:c8:65:82:8c:6c:34:b7:61:4e:62:a2:cf:96:8a:ca:76:9c:
         c7:66:f7:5f
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIUMrWyUXFXz1Yl9eqL3zNmFzQK9z0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNCQjYyNTQzNkIwNzc5MEJCNjdCMkE1NDBEMkYxNTIw
OTM0QjI0NTAeFw0yMzA0MDgwNDAwMDJaFw0yNDA0MDYwNDA1MDJaMDMxMTAvBgNV
BAMTKEQ1MzY4NkY2NUMxRDA3NUE0NTZDNTkzRUI5NTM5REYwMjA4QjcyQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWG/nswS99D6WYQm5+cRgvhfuI
Kx26k0u9qrrL4I0H+0ONaQkOCiIsuclqK/RTBewxbfa70PaD2zD3VLmVrEOt/+gi
olFCx9pzICGZz03jalw+FKFnO2LavCR9sHdAIey69+Vjojr/Z5sRJiWklZ8wGWww
pbPFnSySEp7s5bRY98U9e4vAiTpLjVyZhpfQfCUzwiPvYDA6mTaRYar+zs74ehTq
IGiSGMWEtgDnjOqCmlLkCdQxgkY9eoq19uDE/Ny/6HNOFSmwsdLrVEetaE3NRT9Y
7qk648nqn7auLvZedMEBbXy3XWUhjp6AeRsdP+pjoxcmrqYrMOY++QeEbSpVAgMB
AAGjggHMMIIByDAdBgNVHQ4EFgQU1TaG9lwdB1pFbFk+uVOd8CCLcsQwHwYDVR0j
BBgwFoAUXLtiVDawd5C7Z7KlQNLxUgk0skUwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8wLzVDQkI2
MjU0MzZCMDc3OTBCQjY3QjJBNTQwRDJGMTUyMDkzNEIyNDUuY3JsMGsGCCsGAQUF
BwEBBF8wXTBbBggrBgEFBQcwAoZPcnN5bmM6Ly9ycGtpLmF1Z3VzdC50dy9yZXBv
L0hZU1AvOS81Q0JCNjI1NDM2QjA3NzkwQkI2N0IyQTU0MEQyRjE1MjA5MzRCMjQ1
LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJzeW5jOi8vcnBraS5j
by9yZXBvL0F1Z3VzdC8wLzMyMzYzMDMyM2E2NjYyNjYzNjNhM2EyZjM0MzQyZDM0
MzQyMDNkM2UyMDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC+/YAADANBgkqhkiG9w0BAQsF
AAOCAQEAGaTleeL7YPPAuo2NRgYyoNXCX9c/GEp9tt8fKsT8LVxkA9aKPU/b6pYf
MEUPhMFKJ4oaqcbmkGXxyr4uri8pSXklSlkqxYLb914t/MKlN0Oh/z+WKb1Fdp8+
jvVhG+5RuWUG4BOxOjFPsMrG9A8IlUIaZXNGOE9NnjCWMOyKEIgcyhIE6PneC547
6ZTS078NnAxy42DdHIZ/0waTg8d9EYy13Q6yiCBs2Ey/IqrLcbrjrqqhQZW/fJCs
2sOlVQtocPw7V4zihUJqyh9yLfjfgIH0n97NHshxQtuQH5GioWSIVV60lFEeEHnN
IshlgoxsNLdhTmKiz5aKynacx2b3Xw==
-----END CERTIFICATE-----