Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383430303a3a2f34302d3438203d3e20323033303639.roa
File:                     326131323a646434373a383430303a3a2f34302d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          LMGbqPNpJf+7EawLzkk7NE73/1jsmbkEKFW/uZTgnaY=
Subject key identifier:   DE:63:A4:2C:4E:4A:F3:5A:C6:37:DB:D6:17:79:D6:4A:7C:91:84:A1
Certificate issuer:       /CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
Certificate serial:       38BD03C086E6BD2B302DD89D28EA7B7C0678C0B6
Authority key identifier: 34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383430303a3a2f34302d3438203d3e20323033303639.roa
Signing time:             Sun 08 Jan 2023 16:57:29 +0000
ROA not before:           Sun 08 Jan 2023 16:52:29 +0000
ROA not after:            Sun 07 Jan 2024 16:57:29 +0000
asID:                     203069
IP address blocks:        2a12:dd47:8400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bd:03:c0:86:e6:bd:2b:30:2d:d8:9d:28:ea:7b:7c:06:78:c0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Validity
            Not Before: Jan  8 16:52:29 2023 GMT
            Not After : Jan  7 16:57:29 2024 GMT
        Subject: CN=DE63A42C4E4AF35AC637DBD61779D64A7C9184A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:0a:ae:71:84:a3:a5:91:59:d8:c3:df:4f:
                    66:66:bf:79:61:68:2c:ae:c9:20:50:41:bb:fc:66:
                    89:ff:1b:f6:af:ed:22:d1:1f:89:6d:4c:fb:e0:37:
                    44:fd:44:ef:f5:64:e0:f5:ad:ea:56:1d:18:75:29:
                    0e:3f:c9:c8:cf:cd:70:d4:0c:2e:f5:a5:db:6b:42:
                    9a:dc:90:ff:6a:20:30:9f:99:4f:69:1c:ab:7c:f4:
                    3d:17:26:c3:47:b6:36:03:84:d6:f2:fb:ff:4b:55:
                    f2:2c:88:c5:08:61:87:44:ab:94:2e:4b:58:95:d0:
                    ef:e7:19:97:9e:6a:6f:d9:1c:3d:15:79:0b:ef:b6:
                    b7:c1:d6:82:f0:46:2c:d1:0c:1c:3e:da:35:8e:dd:
                    b6:55:8d:d9:c4:28:ff:78:20:1f:f1:d7:a0:a2:f2:
                    5b:4d:7f:25:72:fa:47:be:75:61:50:bb:8e:f0:db:
                    36:95:83:a2:1e:ba:7c:e8:98:ed:8d:cb:ba:92:6d:
                    08:29:2b:5a:f4:1d:94:7c:7a:c6:2f:c2:5e:a9:bd:
                    f4:15:8e:75:41:58:34:80:04:b5:71:b3:7c:65:93:
                    9b:f8:eb:45:ac:cf:bf:21:e0:bc:58:e8:91:40:c3:
                    68:dc:07:e2:6f:a7:50:66:8c:d0:d6:fa:0b:a4:e9:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:A4:2C:4E:4A:F3:5A:C6:37:DB:D6:17:79:D6:4A:7C:91:84:A1
            X509v3 Authority Key Identifier:
                keyid:34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383430303a3a2f34302d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:a3:28:62:82:ee:f7:4e:d3:ff:a8:7b:07:79:01:f3:7c:5a:
         82:5b:37:5f:9c:3b:f9:be:1a:31:34:70:77:eb:f6:19:50:b3:
         4a:a3:92:4d:e4:44:f8:1c:97:91:bb:f8:e2:7e:a7:e2:3b:63:
         02:47:3d:2c:f5:cd:9d:c2:a5:2f:bb:7e:4d:1a:d0:5e:c8:93:
         dc:02:f6:38:e5:1d:22:2f:d6:5c:7c:d0:cf:17:51:ff:cb:57:
         5d:ca:79:c4:b6:c0:e4:0c:0d:d0:a6:e0:af:f6:64:73:01:bd:
         2d:9f:75:7d:ed:b7:ef:ca:10:38:c6:5f:57:73:ac:02:a4:3e:
         bc:e6:a3:ab:91:69:d7:7c:83:6e:6e:d9:21:03:6d:f4:fa:3f:
         e4:41:bc:41:2a:24:d8:4c:d9:84:92:8b:e4:c1:ab:61:cd:c8:
         94:95:fb:e4:94:08:48:ec:3f:67:db:a6:00:e8:0c:3a:d8:06:
         7e:e6:ba:63:7d:39:f6:30:18:15:12:79:f5:bc:4c:a2:d2:76:
         06:26:48:30:42:27:4f:8e:b6:4d:bc:e6:59:ff:06:7a:2b:e4:
         ca:28:3f:15:a0:30:b7:c1:a8:06:21:84:83:7d:6a:08:05:73:
         95:00:16:1c:3d:f4:bb:64:bf:63:dc:33:4d:c4:4a:c8:fd:18:
         48:87:00:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----