Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466643a3a2f34382d3438203d3e203531303139.roa
File:                     326131323a646434373a383466643a3a2f34382d3438203d3e203531303139.roa (raw, json)
Hash identifier:          E/SR1M11gtPRev8bA1FNudbvYmG97DSWcSZnQIHJums=
Subject key identifier:   BC:51:90:5C:94:50:67:2E:CA:7E:2C:E1:FB:1D:DF:D0:ED:ED:57:F9
Certificate issuer:       /CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
Certificate serial:       06E9FD7277E6C4E1543EEB70C479F2EB0AFD5E75
Authority key identifier: 34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466643a3a2f34382d3438203d3e203531303139.roa
Signing time:             Wed 18 Jan 2023 01:44:15 +0000
ROA not before:           Wed 18 Jan 2023 01:39:15 +0000
ROA not after:            Wed 17 Jan 2024 01:44:15 +0000
asID:                     51019
IP address blocks:        2a12:dd47:84fd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e9:fd:72:77:e6:c4:e1:54:3e:eb:70:c4:79:f2:eb:0a:fd:5e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Validity
            Not Before: Jan 18 01:39:15 2023 GMT
            Not After : Jan 17 01:44:15 2024 GMT
        Subject: CN=BC51905C9450672ECA7E2CE1FB1DDFD0EDED57F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:58:86:5d:e0:ec:6b:49:9e:6e:dd:7f:28:80:
                    4b:a9:2e:b5:07:66:b3:14:30:5c:13:48:2c:f6:c6:
                    44:f8:08:0f:cf:23:ef:31:0a:87:2b:16:23:2e:d5:
                    8c:1a:18:7a:0a:3a:e7:03:e9:0d:a4:ae:14:be:31:
                    d6:cc:cf:fb:79:03:5a:49:9e:50:0f:87:b1:95:fe:
                    c5:31:31:4e:c1:f3:e3:9e:30:bc:bf:da:28:9a:95:
                    7b:24:6c:53:4f:08:98:d4:c9:38:57:65:ad:49:72:
                    19:43:91:ee:37:d7:3b:41:f0:75:ef:ab:24:44:4c:
                    eb:2a:36:87:bf:5a:5d:fd:f6:fc:9a:a0:d6:30:bf:
                    36:65:e0:5b:b8:c5:ad:74:6f:fd:ea:24:5c:54:31:
                    91:07:3a:be:96:fe:63:96:1d:83:87:97:5b:f1:73:
                    f0:2d:86:e7:83:51:5a:ae:9f:03:66:e3:0d:0e:91:
                    b3:b9:70:8f:a5:68:b8:fb:98:91:21:cd:d5:f2:44:
                    fd:9e:7e:50:7f:a8:a4:f9:2c:b3:83:9d:59:dd:74:
                    ea:5a:40:1e:65:a3:d1:85:64:88:9f:01:30:32:4d:
                    06:67:af:16:40:aa:3f:7f:78:74:d1:7f:a3:8b:3d:
                    e4:0d:49:f1:f0:e3:36:00:44:0c:7e:fa:db:7c:18:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:51:90:5C:94:50:67:2E:CA:7E:2C:E1:FB:1D:DF:D0:ED:ED:57:F9
            X509v3 Authority Key Identifier:
                keyid:34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466643a3a2f34382d3438203d3e203531303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:14:02:ec:ba:b2:58:1f:27:04:77:dd:ec:ca:dd:e6:20:d5:
         4b:6a:1d:c9:32:6b:ea:47:24:88:69:f1:46:af:cc:80:c8:f2:
         e2:3c:ab:c5:3e:96:01:56:54:58:22:95:7f:02:1f:83:75:22:
         e1:92:65:51:0d:6d:25:61:de:55:ba:f7:44:91:59:79:c9:83:
         2a:ba:15:50:bc:ee:d4:49:f3:2a:47:ae:5c:a7:a6:c6:52:04:
         0e:79:76:15:e8:f4:bb:be:72:19:76:19:1a:74:05:96:5d:40:
         76:bc:3b:c2:c9:a7:ed:41:dd:c3:e2:04:38:6a:1f:3c:1e:44:
         6a:dd:3b:9b:1e:61:c9:e3:27:85:1e:54:f6:5e:eb:ff:f6:12:
         08:26:bb:d8:d1:4b:ad:2f:a9:0f:2e:80:b8:31:30:24:f0:e2:
         ae:83:79:9a:6f:04:ef:fe:5c:86:57:b7:d4:3d:5b:98:c1:ce:
         9a:c0:ab:02:37:a5:0b:1f:f5:2e:8e:05:2a:84:3c:88:98:ab:
         86:7f:ea:95:f4:0e:c7:3e:d3:4b:7c:30:39:b4:49:76:f1:5c:
         cf:1c:9c:95:f8:09:e9:2b:b9:bd:01:35:93:c1:20:17:85:1b:
         21:77:cb:f8:b4:83:77:74:27:1e:2a:32:0b:0b:a4:36:56:f5:
         e5:f2:03:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBun9cnfmxOFUPutwxHny6wr9XnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRBOTNDMjkzNjY5OENBMkJBMUNENUNFMzA0MTRFNTYy
QTYzRjc2RTAeFw0yMzAxMTgwMTM5MTVaFw0yNDAxMTcwMTQ0MTVaMDMxMTAvBgNV
BAMTKEJDNTE5MDVDOTQ1MDY3MkVDQTdFMkNFMUZCMURERkQwRURFRDU3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnWIZd4OxrSZ5u3X8ogEupLrUH
ZrMUMFwTSCz2xkT4CA/PI+8xCocrFiMu1YwaGHoKOucD6Q2krhS+MdbMz/t5A1pJ
nlAPh7GV/sUxMU7B8+OeMLy/2iialXskbFNPCJjUyThXZa1JchlDke431ztB8HXv
qyRETOsqNoe/Wl399vyaoNYwvzZl4Fu4xa10b/3qJFxUMZEHOr6W/mOWHYOHl1vx
c/AthueDUVqunwNm4w0OkbO5cI+laLj7mJEhzdXyRP2eflB/qKT5LLODnVnddOpa
QB5lo9GFZIifATAyTQZnrxZAqj9/eHTRf6OLPeQNSfHw4zYARAx++tt8GDkhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvFGQXJRQZy7Kfizh+x3f0O3tV/kwHwYDVR0j
BBgwFoAUNKk8KTZpjKK6HNXOMEFOVipj924wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzAvMzRBOTNDMjkzNjY5OENBMkJBMUNENUNFMzA0MTRFNTYyQTYzRjc2RS5j
cmwwawYIKwYBBQUHAQEEXzBdMFsGCCsGAQUFBzAChk9yc3luYzovL3Jwa2kuYXVn
dXN0LnR3L3JlcG8vSFlTUC82LzM0QTkzQzI5MzY2OThDQTJCQTFDRDVDRTMwNDE0
RTU2MkE2M0Y3NkUuY2VyMIG1BggrBgEFBQcBCwSBqDCBpTCBogYIKwYBBQUHMAuG
gZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFi
ZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS8wLzMyNjEzMTMyM2E2
NDY0MzQzNzNhMzgzNDY2NjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMxMzAz
MTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKhLdR4T9MA0GCSqGSIb3DQEBCwUAA4IBAQCMFALsurJY
HycEd93syt3mINVLah3JMmvqRySIafFGr8yAyPLiPKvFPpYBVlRYIpV/Ah+DdSLh
kmVRDW0lYd5VuvdEkVl5yYMquhVQvO7USfMqR65cp6bGUgQOeXYV6PS7vnIZdhka
dAWWXUB2vDvCyaftQd3D4gQ4ah88HkRq3TubHmHJ4yeFHlT2Xuv/9hIIJrvY0Uut
L6kPLoC4MTAk8OKug3mabwTv/lyGV7fUPVuYwc6awKsCN6ULH/UujgUqhDyImKuG
f+qV9A7HPtNLfDA5tEl28VzPHJyV+AnpK7m9ATWTwSAXhRshd8v4tIN3dCceKjIL
C6Q2VvXl8gPd
-----END CERTIFICATE-----