Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa
File:                     326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          fN1HXadaNh9re3C2uU3nL0l2J/wKPxbMjruGbIXeFww=
Subject key identifier:   2F:92:24:36:C2:66:1A:BE:D6:E8:F2:00:4C:31:19:34:B8:15:26:39
Certificate issuer:       /CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
Certificate serial:       4C02578EFC71962794352465A50A6901BE7AFE8E
Authority key identifier: 34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa
Signing time:             Sun 08 Jan 2023 16:57:31 +0000
ROA not before:           Sun 08 Jan 2023 16:52:31 +0000
ROA not after:            Sun 07 Jan 2024 16:57:31 +0000
asID:                     203069
IP address blocks:        2a12:dd47:802c::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:02:57:8e:fc:71:96:27:94:35:24:65:a5:0a:69:01:be:7a:fe:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Validity
            Not Before: Jan  8 16:52:31 2023 GMT
            Not After : Jan  7 16:57:31 2024 GMT
        Subject: CN=2F922436C2661ABED6E8F2004C311934B8152639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a2:8a:8e:8a:e0:c7:e3:b6:49:5d:60:6e:3c:
                    b8:86:f6:0b:eb:b7:ce:6f:be:b3:ec:b8:33:52:b7:
                    4e:bc:0d:07:93:0c:a1:af:ab:7c:8c:61:d9:80:3f:
                    eb:72:b8:75:fc:c5:55:1c:a1:7c:f7:39:11:e0:de:
                    6c:73:18:12:06:4e:07:1c:a7:4c:62:21:02:56:0c:
                    3d:a7:c9:b9:d4:5f:6d:8d:1c:66:79:8e:5c:1c:bd:
                    e1:8b:4f:24:a2:59:64:ea:1a:55:24:2d:92:14:6c:
                    86:f7:c8:26:5c:84:88:b0:17:77:98:d1:c6:c8:68:
                    78:bf:5e:96:5e:96:11:fd:cd:02:7e:c5:f4:ba:c0:
                    eb:15:7f:6f:5c:2c:df:cd:26:69:56:72:b5:10:7e:
                    10:35:8d:53:57:e9:2b:60:d1:ba:36:a2:18:08:72:
                    65:c4:79:c7:fb:4a:96:6f:fa:d7:d9:39:5e:35:cc:
                    24:1f:68:e2:fe:28:d3:1e:33:6e:69:d2:ec:e5:49:
                    8d:f4:f2:0d:2f:f5:a2:cb:0d:53:53:1a:64:f9:20:
                    5c:67:35:b5:79:5d:0b:98:65:0b:fc:48:c2:5a:70:
                    0f:89:23:43:14:23:0e:c4:39:6a:a7:85:35:e6:33:
                    6f:03:93:cb:5f:9f:1b:3e:a8:39:18:b2:78:d4:bb:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:92:24:36:C2:66:1A:BE:D6:E8:F2:00:4C:31:19:34:B8:15:26:39
            X509v3 Authority Key Identifier:
                keyid:34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802c::/46

    Signature Algorithm: sha256WithRSAEncryption
         87:16:10:99:f9:fc:8a:d7:6f:b7:60:5e:f1:b5:8b:17:6f:a4:
         56:6d:a4:e6:64:c3:6c:54:c1:e1:c5:04:b7:af:c1:c6:cc:8e:
         eb:4e:a1:2f:b7:00:6d:5c:0b:0e:e2:87:b4:e3:d8:58:30:79:
         a1:d5:8c:9e:e4:43:e0:08:54:83:54:73:a8:65:3b:75:1a:09:
         2b:32:df:ea:a2:15:5f:76:ae:7d:a3:52:b2:ac:32:67:19:3a:
         91:d0:ee:ab:ce:d3:bc:e7:2b:0a:60:31:fc:2e:34:de:94:e5:
         ac:17:87:21:5a:4a:5b:f1:30:e1:18:56:ba:bc:5e:3c:c9:cc:
         c4:de:7b:a8:6f:5e:8c:0d:96:08:cd:1e:5c:74:ef:15:44:d6:
         5d:7b:39:1e:c8:27:bf:fe:9c:7e:0f:6f:1c:ec:93:c8:e2:d2:
         b7:e8:a3:8f:1b:af:9f:2d:74:3b:ef:5a:ab:b5:85:22:a2:02:
         f2:30:d1:33:0e:78:4c:f3:99:6f:82:28:67:40:57:f5:e0:72:
         f6:8d:c3:ea:2c:a1:85:b4:38:73:08:b1:a0:27:f5:8c:35:cd:
         0c:6a:7f:d5:af:48:2f:84:7c:cd:8f:b7:3e:0e:88:23:d9:2a:
         5c:a3:d9:12:69:81:d0:3c:24:c0:52:e7:12:13:9f:2a:14:70:
         24:c6:fe:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----