Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383465663a3a2f34382d3438203d3e20323033303639.roa
File:                     326131323a646434373a383465663a3a2f34382d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          5dT8o8HhyH9vtcoJM4i68FR9OsajqhftLIONZUJB5p8=
Subject key identifier:   85:C6:9C:8C:D0:C7:A0:0F:F5:C5:38:DC:02:43:80:A5:70:82:23:8D
Certificate issuer:       /CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
Certificate serial:       5D720B865CBD9B1BF21E1A2AD4666992D7A2D756
Authority key identifier: 34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383465663a3a2f34382d3438203d3e20323033303639.roa
Signing time:             Sat 21 Jan 2023 03:19:39 +0000
ROA not before:           Sat 21 Jan 2023 03:14:39 +0000
ROA not after:            Sat 20 Jan 2024 03:19:39 +0000
asID:                     203069
IP address blocks:        2a12:dd47:84ef::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:72:0b:86:5c:bd:9b:1b:f2:1e:1a:2a:d4:66:69:92:d7:a2:d7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Validity
            Not Before: Jan 21 03:14:39 2023 GMT
            Not After : Jan 20 03:19:39 2024 GMT
        Subject: CN=85C69C8CD0C7A00FF5C538DC024380A57082238D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:90:53:e1:87:6b:c1:64:22:cc:d5:bf:50:
                    0f:60:be:a6:d8:cb:b6:21:07:13:0d:69:94:b7:38:
                    ea:f1:90:b3:3d:06:b7:0e:4f:1c:f3:96:6f:b0:9e:
                    e4:4a:50:01:12:62:d9:28:70:37:f0:00:27:a5:3c:
                    05:2c:f7:b0:1e:8d:c3:03:25:fd:77:01:79:dc:da:
                    1c:26:e5:4a:5c:0f:dd:67:b5:39:95:2a:c0:97:37:
                    53:4b:d4:1c:ae:1b:6b:58:83:48:67:e4:c9:5b:ab:
                    e7:af:8b:4a:b0:36:d3:18:1c:3b:c3:71:1a:22:57:
                    2b:0b:73:6a:46:ab:a2:b4:5b:f0:70:13:30:d7:3d:
                    2e:59:4a:5c:3f:75:40:f0:bc:03:51:be:03:23:6a:
                    98:f3:be:6b:58:fe:b0:47:00:0c:f3:25:f3:59:e3:
                    c2:f6:1a:93:69:ad:eb:3f:51:95:6c:d7:f7:6c:8f:
                    ed:d2:93:08:46:54:e6:6a:b9:fd:62:5a:af:14:de:
                    51:f1:8e:c9:35:59:4c:25:22:2a:65:fd:39:4e:d8:
                    25:59:96:5b:9b:f5:e3:e3:2d:bd:44:3c:ed:3c:a8:
                    2c:58:58:c9:b3:3e:4e:30:22:f3:9b:7d:2d:89:2a:
                    9e:26:8d:17:a0:5b:23:6c:0d:fd:22:21:9a:d5:00:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C6:9C:8C:D0:C7:A0:0F:F5:C5:38:DC:02:43:80:A5:70:82:23:8D
            X509v3 Authority Key Identifier:
                keyid:34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383465663a3a2f34382d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84ef::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:47:fb:57:5a:9a:95:b9:8e:1e:be:0f:7d:06:aa:d7:b1:
         57:12:41:6b:02:d0:53:a7:87:cf:c8:e8:ad:96:7c:b4:48:bd:
         5a:c3:88:c3:d3:ac:18:74:38:c1:24:a0:61:67:19:97:f3:7e:
         ca:d5:af:bd:49:ff:64:6e:e8:4b:d5:7c:60:38:1a:cf:c9:28:
         f9:fd:82:e1:28:44:83:96:01:35:6c:5e:46:44:2c:53:4f:b9:
         88:ee:31:eb:fd:d9:f5:be:16:8e:09:69:b0:a5:d4:9c:af:9e:
         39:19:2b:54:92:9a:73:da:7a:bc:69:e2:e2:44:86:a5:29:ac:
         c0:ea:f1:b6:85:6f:d7:d6:bf:8b:24:8d:fd:1a:f4:d8:80:33:
         54:00:c9:39:0b:79:b7:ce:4d:95:36:a6:8d:fd:21:b4:6a:85:
         74:60:b8:b6:70:0d:75:dc:37:c5:0f:87:b0:92:83:a1:ed:b7:
         13:7c:fd:3e:c3:38:96:18:11:2d:69:35:a5:f5:3c:ee:5c:16:
         5d:dc:98:17:70:f2:b7:49:31:16:cc:3d:92:2d:75:18:ae:3f:
         d9:1b:78:aa:e3:6c:2f:45:55:f8:49:37:92:39:c0:fd:b9:bd:
         48:ca:3a:f1:24:af:a8:f1:5c:eb:ee:55:9e:4d:50:e5:ca:9f:
         70:21:ea:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----