Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466643a3a2f34382d3438203d3e20323038353438.roa
File:                     326131323a646434373a383466643a3a2f34382d3438203d3e20323038353438.roa (raw, json)
Hash identifier:          3zVWASb7pYwJcB1Kr/2DyRp4f4vA1d8LA07zOZ7vy9g=
Subject key identifier:   FC:D9:FE:78:1F:68:19:CD:4B:42:AB:84:8F:C5:AE:8D:9D:A4:78:DE
Certificate issuer:       /CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
Certificate serial:       38F5F3D37192AE321052A795D027A86E7121B3DE
Authority key identifier: 34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466643a3a2f34382d3438203d3e20323038353438.roa
Signing time:             Wed 18 Jan 2023 01:44:04 +0000
ROA not before:           Wed 18 Jan 2023 01:39:04 +0000
ROA not after:            Wed 17 Jan 2024 01:44:04 +0000
asID:                     208548
IP address blocks:        2a12:dd47:84fd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f5:f3:d3:71:92:ae:32:10:52:a7:95:d0:27:a8:6e:71:21:b3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Validity
            Not Before: Jan 18 01:39:04 2023 GMT
            Not After : Jan 17 01:44:04 2024 GMT
        Subject: CN=FCD9FE781F6819CD4B42AB848FC5AE8D9DA478DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:02:b0:8c:f1:c8:63:b9:16:a2:60:7c:d1:
                    1f:a5:2d:6e:fd:30:ac:96:eb:5f:91:b0:d0:fe:23:
                    ae:e1:25:7d:87:17:61:dd:ce:f8:5c:92:3d:e4:7e:
                    70:04:bd:29:1b:f0:8e:d7:ed:f1:a0:37:ee:da:a5:
                    46:5d:48:59:18:27:20:ef:15:d8:b8:c2:5b:a3:77:
                    61:5b:98:68:81:61:99:c3:74:bc:c9:8a:19:d1:64:
                    77:3d:12:d9:f2:bd:8b:80:06:b9:98:2d:d3:3d:0f:
                    84:cf:c2:8f:42:2b:ca:c7:ca:3a:96:51:11:66:36:
                    fd:e9:15:eb:78:c7:cd:5d:59:17:91:e9:3f:e5:af:
                    58:c3:c3:0a:02:5c:0e:04:89:79:cb:72:28:4c:48:
                    c5:eb:3e:59:6c:4a:c8:12:91:9f:02:43:9f:cf:7e:
                    17:d5:17:b8:0e:83:0e:f0:fe:c0:87:4d:68:c4:7a:
                    4e:24:9d:9a:50:3a:0d:b4:d5:98:6d:86:f0:aa:4b:
                    53:89:23:91:7c:1c:51:3c:c6:2d:c4:79:a0:ef:99:
                    8f:c6:ca:36:ef:79:ae:66:1c:e8:00:4e:df:9f:f5:
                    20:41:18:c9:b0:c0:36:40:f9:0d:8c:8b:e8:8d:82:
                    e6:10:c5:ac:ec:1a:9b:07:a2:15:63:ae:3a:98:7b:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D9:FE:78:1F:68:19:CD:4B:42:AB:84:8F:C5:AE:8D:9D:A4:78:DE
            X509v3 Authority Key Identifier:
                keyid:34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466643a3a2f34382d3438203d3e20323038353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:de:12:ab:2d:95:f3:25:ef:2a:40:ac:44:87:39:a0:81:
         5b:58:c2:d9:b5:41:3d:7a:52:b6:b0:60:b7:b3:f1:45:92:0a:
         4b:09:d8:b4:45:17:73:c4:78:28:98:6e:70:ed:a9:c7:9c:9e:
         6a:d2:f1:31:b4:dc:80:0d:fa:4b:c1:d3:27:e6:9c:ed:f5:1b:
         f6:94:7f:27:46:07:6f:a6:68:5e:7b:81:e2:27:d2:32:53:ad:
         84:71:7a:95:2a:6a:7b:15:eb:4f:75:70:1d:0a:49:25:65:f0:
         6f:ce:14:88:ba:19:b8:ca:b2:a6:52:23:7b:83:ca:77:47:dd:
         8e:0d:98:eb:69:70:8f:44:61:df:25:70:81:55:00:47:d5:39:
         33:8e:9c:c1:d8:d2:ae:36:a5:0f:66:78:7b:54:10:2f:d9:44:
         4e:67:c2:1f:e8:11:53:66:3a:a8:02:f0:bd:44:3e:ed:f7:78:
         8f:84:0e:8b:4c:bf:78:ae:ef:f7:63:55:af:b2:50:94:ef:d2:
         17:e1:58:aa:db:40:70:d6:be:fc:44:4e:1f:89:46:c5:3f:6b:
         9b:3d:57:6a:e2:af:4c:26:50:e4:6d:a1:79:30:d8:a6:62:3d:
         12:a8:c8:04:fd:b1:3b:ed:e9:94:88:9a:53:6f:ff:67:42:47:
         93:a0:47:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOPXz03GSrjIQUqeV0CeobnEhs94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRBOTNDMjkzNjY5OENBMkJBMUNENUNFMzA0MTRFNTYy
QTYzRjc2RTAeFw0yMzAxMTgwMTM5MDRaFw0yNDAxMTcwMTQ0MDRaMDMxMTAvBgNV
BAMTKEZDRDlGRTc4MUY2ODE5Q0Q0QjQyQUI4NDhGQzVBRThEOURBNDc4REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkgKwjPHIY7kWomB80R+lLW79
MKyW61+RsND+I67hJX2HF2Hdzvhckj3kfnAEvSkb8I7X7fGgN+7apUZdSFkYJyDv
Fdi4wlujd2FbmGiBYZnDdLzJihnRZHc9EtnyvYuABrmYLdM9D4TPwo9CK8rHyjqW
URFmNv3pFet4x81dWReR6T/lr1jDwwoCXA4EiXnLcihMSMXrPllsSsgSkZ8CQ5/P
fhfVF7gOgw7w/sCHTWjEek4knZpQOg201ZhthvCqS1OJI5F8HFE8xi3EeaDvmY/G
yjbvea5mHOgATt+f9SBBGMmwwDZA+Q2Mi+iNguYQxazsGpsHohVjrjqYe36TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/Nn+eB9oGc1LQquEj8WujZ2keN4wHwYDVR0j
BBgwFoAUNKk8KTZpjKK6HNXOMEFOVipj924wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzAvMzRBOTNDMjkzNjY5OENBMkJBMUNENUNFMzA0MTRFNTYyQTYzRjc2RS5j
cmwwawYIKwYBBQUHAQEEXzBdMFsGCCsGAQUFBzAChk9yc3luYzovL3Jwa2kuYXVn
dXN0LnR3L3JlcG8vSFlTUC82LzM0QTkzQzI5MzY2OThDQTJCQTFDRDVDRTMwNDE0
RTU2MkE2M0Y3NkUuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuG
gZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFi
ZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS8wLzMyNjEzMTMyM2E2
NDY0MzQzNzNhMzgzNDY2NjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzgz
NTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqEt1HhP0wDQYJKoZIhvcNAQELBQADggEBADjP3hKr
LZXzJe8qQKxEhzmggVtYwtm1QT16UrawYLez8UWSCksJ2LRFF3PEeCiYbnDtqcec
nmrS8TG03IAN+kvB0yfmnO31G/aUfydGB2+maF57geIn0jJTrYRxepUqansV6091
cB0KSSVl8G/OFIi6GbjKsqZSI3uDyndH3Y4NmOtpcI9EYd8lcIFVAEfVOTOOnMHY
0q42pQ9meHtUEC/ZRE5nwh/oEVNmOqgC8L1EPu33eI+EDotMv3iu7/djVa+yUJTv
0hfhWKrbQHDWvvxETh+JRsU/a5s9V2rir0wmUORtoXkw2KZiPRKoyAT9sTvt6ZSI
mlNv/2dCR5OgR94=
-----END CERTIFICATE-----