Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383032663a3a2f34382d3438203d3e20323033303639.roa
File:                     326131323a646434373a383032663a3a2f34382d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          +fjLU12+0jFH4SiC5tF0cor8lBsCbAC5eLcM56auddg=
Subject key identifier:   11:12:FE:1B:0D:BC:3A:1D:B0:34:F1:EB:CC:3E:31:FF:21:13:E3:03
Certificate issuer:       /CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
Certificate serial:       3A157BD58FE5B8148B772A2E779B41E78F7AE419
Authority key identifier: 34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383032663a3a2f34382d3438203d3e20323033303639.roa
Signing time:             Sat 21 Jan 2023 03:19:21 +0000
ROA not before:           Sat 21 Jan 2023 03:14:21 +0000
ROA not after:            Sat 20 Jan 2024 03:19:21 +0000
asID:                     203069
IP address blocks:        2a12:dd47:802f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:15:7b:d5:8f:e5:b8:14:8b:77:2a:2e:77:9b:41:e7:8f:7a:e4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Validity
            Not Before: Jan 21 03:14:21 2023 GMT
            Not After : Jan 20 03:19:21 2024 GMT
        Subject: CN=1112FE1B0DBC3A1DB034F1EBCC3E31FF2113E303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:1e:94:35:a4:c6:e2:90:79:11:95:78:08:
                    e0:95:b3:50:00:c1:02:bb:de:1b:cc:f1:3e:7b:c8:
                    cd:eb:e5:5d:84:e7:53:71:a0:60:cb:0c:f5:71:55:
                    de:05:f0:3e:3c:99:72:cc:16:44:12:fc:72:de:d2:
                    87:86:5a:d4:cc:48:14:63:e6:b2:e3:d6:ee:cb:6a:
                    34:80:2a:e3:f4:ac:2c:64:a8:6a:ef:6c:14:b7:fe:
                    6c:fa:e1:d9:07:85:d9:d0:f3:fd:1a:57:01:ed:65:
                    82:9d:a1:e0:e7:9a:42:90:7b:ed:f1:ec:a1:c7:40:
                    0d:b0:62:68:5d:80:ea:9d:bb:ba:e7:ad:b3:4b:9f:
                    b9:e0:95:48:c5:28:60:34:5a:30:10:43:76:82:7e:
                    52:eb:c4:17:91:89:20:b9:8c:63:f3:cd:52:38:57:
                    5c:75:8f:a5:9a:60:16:f1:d7:d8:cf:47:60:d1:a7:
                    e1:2f:c2:73:ab:50:88:3c:88:84:ca:25:64:66:ce:
                    61:ce:ee:8c:4e:18:4f:9d:2f:10:5b:95:82:be:94:
                    4b:f4:44:87:c4:ce:9e:3b:dd:c3:d4:df:da:6d:ed:
                    fb:71:8b:b3:05:3b:2f:f5:2e:f8:51:eb:ac:2e:39:
                    8e:d8:ca:af:17:5e:3b:17:8d:d5:b3:44:82:ce:e4:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:12:FE:1B:0D:BC:3A:1D:B0:34:F1:EB:CC:3E:31:FF:21:13:E3:03
            X509v3 Authority Key Identifier:
                keyid:34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383032663a3a2f34382d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:802f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:50:c7:f2:9c:ea:57:58:9c:80:61:18:30:a2:fa:c9:dd:
         f4:1d:c0:0b:8d:90:39:f5:25:c1:80:c7:69:d8:03:45:a2:49:
         fb:ae:54:74:c4:a0:61:fc:4b:d6:30:d7:3a:1f:d8:56:d2:32:
         7c:6a:7f:1f:f2:89:81:4f:29:29:03:8f:f4:21:a4:2f:11:f4:
         af:fa:ef:01:87:8d:c3:1f:50:c1:2d:33:19:f9:64:f5:20:a6:
         97:42:9f:47:02:0e:a5:5d:ea:4f:f9:9f:55:e0:6f:9f:ed:5e:
         04:d1:16:1e:14:0e:1d:47:d3:d6:20:28:59:8b:92:a0:d1:81:
         21:7a:89:06:15:14:a4:3d:1b:c4:b8:31:b8:bc:78:0b:82:68:
         b4:bc:eb:c5:be:48:80:5a:d4:27:1c:71:d2:e5:56:36:9f:cc:
         54:d1:50:68:99:d6:20:6e:fe:be:7d:61:b7:0d:68:82:6a:03:
         c5:de:2b:7f:df:49:8e:08:b9:97:3e:92:03:f0:2e:59:06:62:
         85:6b:cf:22:3c:72:ec:b0:25:b5:6d:73:52:d3:3e:74:63:e0:
         39:86:83:82:7d:cb:b8:67:15:e0:5f:31:d2:60:d9:7d:94:3e:
         0e:d6:6d:6a:53:fe:0b:b9:03:0d:d5:2d:9c:f1:7d:77:27:a6:
         67:44:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----