Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383233303a3a2f34342d3438203d3e20323033303639.roa
File:                     326131323a646434373a383233303a3a2f34342d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          VYcA6c5aysOQSuZ9VZZ05PL+VEXLsg2FkLK3g5sUUrA=
Subject key identifier:   BA:E2:FB:73:D7:7B:87:F2:CA:41:C5:7F:B1:09:68:C5:78:AE:90:68
Certificate issuer:       /CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
Certificate serial:       733825DC261D296CC3DB0589B7253FD855EBF6B7
Authority key identifier: 34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383233303a3a2f34342d3438203d3e20323033303639.roa
Signing time:             Sun 08 Jan 2023 16:57:23 +0000
ROA not before:           Sun 08 Jan 2023 16:52:23 +0000
ROA not after:            Sun 07 Jan 2024 16:57:23 +0000
asID:                     203069
IP address blocks:        2a12:dd47:8230::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:38:25:dc:26:1d:29:6c:c3:db:05:89:b7:25:3f:d8:55:eb:f6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Validity
            Not Before: Jan  8 16:52:23 2023 GMT
            Not After : Jan  7 16:57:23 2024 GMT
        Subject: CN=BAE2FB73D77B87F2CA41C57FB10968C578AE9068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:73:38:d5:78:1f:3c:79:98:b5:80:8b:5e:
                    1c:6a:57:96:29:30:7e:a7:66:73:15:81:e9:e6:33:
                    d2:5b:13:05:46:a1:96:06:4b:67:a2:ad:5c:55:c2:
                    a4:0b:c7:c7:ba:2f:f9:e8:b8:da:42:1c:81:1c:81:
                    b5:6a:ce:9d:9c:f6:55:f2:37:62:fe:15:e3:45:09:
                    ab:57:6f:85:83:2b:38:97:3c:c2:c7:d2:6d:a0:58:
                    93:b4:73:67:5f:b2:ec:eb:75:02:74:35:e7:2e:52:
                    56:04:99:82:b6:fe:94:4f:b6:94:ed:cf:0d:63:21:
                    9a:28:b9:7b:c2:75:1b:3c:f3:9e:4a:f3:e2:ee:e8:
                    a2:4f:b1:d3:dc:ad:c1:d0:92:8a:d8:29:fa:7f:82:
                    e2:59:20:46:d7:cd:97:02:9b:b3:3a:94:33:17:b8:
                    54:1e:32:71:2c:6e:80:09:d4:92:8c:e3:14:05:f8:
                    1a:92:e4:e1:26:32:e3:b4:f2:40:a8:f9:a3:b0:30:
                    61:b1:68:f9:7d:13:78:b7:64:80:22:5d:91:49:31:
                    e2:93:04:5f:bb:f4:44:0d:5e:c9:53:9f:70:ad:cf:
                    a8:57:b3:3c:b4:e2:8c:0f:46:57:52:b9:0c:47:33:
                    cb:2f:48:f0:36:42:fa:2f:fa:37:f5:e8:ba:24:64:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E2:FB:73:D7:7B:87:F2:CA:41:C5:7F:B1:09:68:C5:78:AE:90:68
            X509v3 Authority Key Identifier:
                keyid:34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383233303a3a2f34342d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8230::/44

    Signature Algorithm: sha256WithRSAEncryption
         80:e2:e5:f6:22:e4:43:8d:e5:b7:53:4d:c4:63:43:8c:13:94:
         39:55:f7:b6:0c:ca:b2:a0:4a:16:d7:f4:60:82:26:05:cb:7b:
         c4:ac:f8:82:68:a3:5d:b4:f2:f2:b9:76:62:b1:bf:2d:63:c2:
         85:44:ce:23:2a:e9:88:17:78:4d:6c:08:59:0a:57:1f:06:47:
         78:d6:1d:02:9b:11:6e:ed:a0:8b:c5:79:c5:65:10:30:aa:42:
         e0:d8:f3:8b:c2:1e:19:ab:ce:bd:5b:0b:d7:6f:af:97:14:4e:
         20:2d:e9:9f:83:49:5e:a3:09:cd:35:d3:49:3b:9d:27:12:bb:
         ae:f6:d5:ec:80:ff:b0:50:47:8f:46:07:bf:55:b1:bf:fc:16:
         8a:a2:39:ad:e7:b6:a4:6c:78:71:ca:6d:14:4f:f1:08:7b:65:
         5a:e3:06:0e:50:d7:85:1b:2d:73:d8:b7:05:e7:12:89:5a:a5:
         ec:a3:03:f8:81:ae:4f:06:8f:66:d9:79:e7:ca:19:e1:14:04:
         3a:bc:41:c9:5b:62:f3:30:d3:c9:eb:d7:f8:58:65:85:0a:43:
         74:a9:37:45:a9:3f:68:1d:56:83:ec:6c:07:13:1a:78:96:11:
         66:4f:4f:76:1e:35:5e:4e:58:98:62:37:05:95:e1:36:2e:00:
         4b:7e:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----