Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466633a3a2f34382d3438203d3e2038303735.roa
File:                     326131323a646434373a383466633a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier:          0K0++6JKPWkBHhkaMoLMfS3cPT81VXqdFF1XTy9IKuo=
Subject key identifier:   3B:77:C3:CD:E2:E2:2B:11:F9:B6:EA:E1:6C:AA:89:5B:8C:C2:27:CE
Certificate issuer:       /CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
Certificate serial:       24415EC2E10087FA491FB50B0DE8006C4DAFE344
Authority key identifier: 34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466633a3a2f34382d3438203d3e2038303735.roa
Signing time:             Sun 08 Jan 2023 16:57:27 +0000
ROA not before:           Sun 08 Jan 2023 16:52:27 +0000
ROA not after:            Sun 07 Jan 2024 16:57:27 +0000
asID:                     8075
IP address blocks:        2a12:dd47:84fc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:41:5e:c2:e1:00:87:fa:49:1f:b5:0b:0d:e8:00:6c:4d:af:e3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Validity
            Not Before: Jan  8 16:52:27 2023 GMT
            Not After : Jan  7 16:57:27 2024 GMT
        Subject: CN=3B77C3CDE2E22B11F9B6EAE16CAA895B8CC227CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:13:3d:3f:b3:df:50:6f:8c:78:e8:6a:57:
                    79:7b:10:45:d4:c9:18:70:67:e0:16:90:43:71:1b:
                    98:d6:cb:0a:d8:fc:7d:26:57:ef:71:67:c0:c2:c1:
                    10:2e:1c:2f:7d:ee:2b:74:92:77:03:1e:a3:a5:f1:
                    08:e6:7c:7e:f8:ee:a8:31:67:4b:98:61:80:dc:df:
                    6a:b6:14:ab:c9:b3:84:b2:1e:28:f9:b4:f9:fd:c7:
                    15:bc:c1:4d:dc:d5:aa:d3:76:fb:0f:50:d6:56:bc:
                    b7:82:0f:d8:9b:6d:ca:04:84:c0:16:17:37:db:a6:
                    0f:c1:d6:93:16:40:81:c9:34:26:26:a9:9d:58:f8:
                    54:20:9e:7c:e4:c3:1d:f1:67:43:ae:55:99:09:b7:
                    29:c3:18:06:ba:a5:19:c9:96:0a:59:7a:3c:63:20:
                    47:e7:39:e4:8b:96:df:91:48:56:9e:93:16:bc:96:
                    e1:0a:3d:bd:b1:0a:6d:fe:57:6d:90:c5:3e:b8:0e:
                    e8:74:7b:f1:bb:c9:06:d9:b5:e0:34:77:dd:7b:55:
                    2d:51:c4:19:da:a1:03:9b:52:1c:08:a4:62:10:2d:
                    b8:53:6e:f1:4c:e7:d3:b1:1d:5d:2b:f0:de:86:ff:
                    23:80:1e:5c:be:6a:12:9e:cb:b2:4c:81:ef:8c:25:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:77:C3:CD:E2:E2:2B:11:F9:B6:EA:E1:6C:AA:89:5B:8C:C2:27:CE
            X509v3 Authority Key Identifier:
                keyid:34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466633a3a2f34382d3438203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         d9:e3:24:1f:aa:8a:e0:08:d7:67:5b:c2:19:39:96:20:bf:0a:
         6d:38:50:e0:07:79:5a:de:a5:e7:d3:44:43:68:1e:3c:18:1c:
         21:69:ce:e7:d7:2a:3f:c2:cb:1c:84:d4:1c:f5:7b:69:f7:10:
         ab:20:67:0e:6a:83:0d:eb:4f:1d:a7:88:44:18:7d:44:b7:6c:
         d1:55:70:f7:87:40:58:8b:c3:56:93:3d:16:c2:11:86:cd:cc:
         f4:48:a4:1b:85:aa:50:23:1f:9d:5f:8d:6d:a7:6c:94:e6:09:
         96:50:db:47:b5:c8:89:3a:e3:01:2b:6a:03:c9:11:3f:f8:57:
         56:0e:05:f4:6d:4f:f2:8f:df:d2:13:94:f7:2f:b1:55:9c:e5:
         91:80:18:3e:91:48:47:8d:5a:21:ff:dc:a7:80:44:e5:55:ab:
         d4:e1:2f:e3:06:e0:7d:8f:7e:9d:83:4b:a2:06:a5:6b:5c:2c:
         38:c2:4d:4f:cb:c2:eb:7b:8e:85:48:09:09:80:11:98:ed:9a:
         e6:da:bd:7a:f2:7a:46:9f:20:cd:b1:d6:ba:18:18:86:1a:00:
         f8:ff:1f:a7:48:cb:6c:55:61:6b:f7:0e:c4:57:f8:63:e1:86:
         74:f8:c2:8b:ad:d3:32:03:c7:98:0c:3e:a9:05:1f:4f:bc:70:
         3c:e9:b2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----