Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa
File:                     326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          twVKc6W2F6p4fHPXnbf9ziI4hMihyoPhMqhrTggbGeY=
Subject key identifier:   F8:AB:D9:C2:C9:F5:8E:1F:0A:3A:57:8C:C0:E0:FB:30:64:35:8D:8B
Certificate issuer:       /CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
Certificate serial:       0483F791310E4DD5FA2E2944D0A6908B2034B049
Authority key identifier: 34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa
Signing time:             Sun 08 Jan 2023 16:57:24 +0000
ROA not before:           Sun 08 Jan 2023 16:52:24 +0000
ROA not after:            Sun 07 Jan 2024 16:57:24 +0000
asID:                     14618
IP address blocks:        2a12:dd47:84ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:83:f7:91:31:0e:4d:d5:fa:2e:29:44:d0:a6:90:8b:20:34:b0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Validity
            Not Before: Jan  8 16:52:24 2023 GMT
            Not After : Jan  7 16:57:24 2024 GMT
        Subject: CN=F8ABD9C2C9F58E1F0A3A578CC0E0FB3064358D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:65:cb:fb:53:1d:94:78:80:45:7a:43:a8:
                    fb:69:8e:f5:41:7d:c6:a3:5d:eb:51:aa:73:79:5b:
                    12:87:e2:00:c8:39:90:43:19:a3:54:e6:ea:9c:a3:
                    27:c9:04:23:6c:0d:4f:b0:15:3f:78:fb:47:47:3b:
                    52:a2:06:d5:a2:6e:77:a0:92:fc:5b:b6:fc:53:08:
                    4d:d5:b7:96:7b:24:3a:bf:2e:de:87:1e:a2:c8:83:
                    fc:78:e0:50:d7:b8:6d:73:b7:f6:d5:8f:46:dd:e2:
                    22:9e:09:2c:11:70:30:f5:1c:f7:52:34:14:c3:ae:
                    06:a0:62:4d:25:ea:fd:e2:d3:de:37:45:3c:7f:bd:
                    95:8a:5a:91:80:1c:1d:c7:1c:a4:94:5b:ab:e5:6a:
                    20:46:30:be:9c:0a:0c:cf:14:63:33:69:f4:ff:70:
                    b1:f7:ce:0f:0c:32:c1:ce:d7:50:9e:80:a0:45:21:
                    95:bc:18:f6:89:0a:fd:b8:ea:cc:7e:aa:01:f1:cc:
                    a9:db:c5:c5:44:a5:01:0b:99:2f:c9:d2:47:82:ff:
                    89:7a:e3:a5:22:e5:74:33:6b:b7:b9:7a:b9:21:66:
                    63:af:d6:63:d4:e2:fe:53:ba:07:7b:e5:2b:18:06:
                    06:03:40:84:c8:17:65:73:72:02:0b:9b:70:a9:6a:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AB:D9:C2:C9:F5:8E:1F:0A:3A:57:8C:C0:E0:FB:30:64:35:8D:8B
            X509v3 Authority Key Identifier:
                keyid:34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466663a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:c2:5e:e7:1a:a0:2b:1b:e3:5b:81:1d:0c:a8:31:b0:29:43:
         25:38:3d:77:21:ce:f5:5e:6f:0f:2b:f8:e5:14:3a:61:2e:0a:
         7e:2f:6e:ab:23:ad:7c:96:29:c0:15:93:a3:5e:e4:64:05:61:
         39:10:8f:c7:6b:f8:e4:60:dc:26:21:ce:3f:9d:3a:4d:bc:d6:
         53:ac:ea:56:f7:7e:f5:2b:ae:25:97:ec:62:4b:25:24:1a:45:
         b7:73:a4:05:16:b8:f3:38:cb:6c:c4:44:1e:4a:ac:33:2b:61:
         eb:e1:5f:19:b4:b5:d4:c7:47:5c:cf:ac:dc:06:38:09:ed:8b:
         8c:0a:36:e3:66:be:b0:dc:b4:77:9d:93:3d:f5:a7:7e:84:48:
         20:48:11:f2:b6:d4:b7:49:66:1a:11:d6:11:3b:2d:10:2c:56:
         48:9a:eb:8e:76:d2:b4:6f:f9:12:75:c9:32:a8:14:ed:2c:80:
         57:3d:9f:80:7e:c0:01:30:6d:cd:7e:f2:78:25:16:df:4f:c7:
         fc:63:b5:5b:22:86:23:d6:f6:22:97:5c:ca:a3:4d:92:05:84:
         ee:fe:2a:83:4c:5d:16:7c:5c:2a:4f:75:1e:ba:e0:e5:25:94:
         6c:31:34:1f:5e:81:41:29:fd:f0:01:da:6d:41:df:54:ad:0e:
         70:24:53:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:09 2024 by rpki-client on console-fra.rpki-client.org