Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466663a3a2f34382d3438203d3e203136353039.roa
File:                     326131323a646434373a383466663a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          5gERDPCZBJkeX1VmMWQTQUBEyyARzPquiB8PA897hvQ=
Subject key identifier:   76:FF:AC:BE:D0:95:59:DA:92:BA:AD:DE:14:29:A8:CC:91:2C:55:EF
Certificate issuer:       /CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
Certificate serial:       0D5146C28387535D3093421CAEE83BBC6965B77C
Authority key identifier: 34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466663a3a2f34382d3438203d3e203136353039.roa
Signing time:             Sun 08 Jan 2023 16:57:27 +0000
ROA not before:           Sun 08 Jan 2023 16:52:27 +0000
ROA not after:            Sun 07 Jan 2024 16:57:27 +0000
asID:                     16509
IP address blocks:        2a12:dd47:84ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:51:46:c2:83:87:53:5d:30:93:42:1c:ae:e8:3b:bc:69:65:b7:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A93C2936698CA2BA1CD5CE30414E562A63F76E
        Validity
            Not Before: Jan  8 16:52:27 2023 GMT
            Not After : Jan  7 16:57:27 2024 GMT
        Subject: CN=76FFACBED09559DA92BAADDE1429A8CC912C55EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:84:61:0d:b4:4c:ab:46:8f:ad:9a:fb:15:
                    be:76:be:6b:2d:17:82:16:64:1d:c5:28:22:db:d4:
                    a4:e2:b8:93:ef:e8:b5:23:9b:b8:d9:69:e5:94:e9:
                    76:4d:55:d9:e8:e1:f4:4e:42:2f:2a:bd:53:02:a3:
                    36:f3:53:1f:ba:c0:e9:81:20:27:40:0f:7d:01:74:
                    69:18:7e:53:73:e6:9c:d3:6d:04:85:23:37:af:c4:
                    47:01:e9:83:18:a5:80:b5:67:8c:e9:e4:fe:e9:64:
                    55:d0:51:68:8e:93:13:ac:a4:8b:b3:09:42:29:8a:
                    50:bf:f5:2e:b5:d1:27:b0:96:83:c9:c3:53:0d:d4:
                    47:3d:2b:90:e4:76:75:89:13:76:b0:61:96:cb:40:
                    4b:bd:fa:82:17:2f:67:00:96:00:f3:7c:a4:df:c2:
                    44:9e:88:7a:8f:5b:51:91:c2:20:2a:a1:60:17:9a:
                    c8:a4:fa:a3:1a:20:2e:46:06:88:80:4e:13:85:fd:
                    6e:30:d3:dd:07:4a:5e:25:08:84:48:4c:62:96:34:
                    2f:32:02:08:25:12:3f:48:93:0b:c0:52:39:0e:fc:
                    0f:7b:78:76:64:3a:bc:21:6f:8f:82:b3:dc:b8:f8:
                    62:a1:a4:c8:80:d2:02:06:ca:da:88:fe:a7:54:0b:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FF:AC:BE:D0:95:59:DA:92:BA:AD:DE:14:29:A8:CC:91:2C:55:EF
            X509v3 Authority Key Identifier:
                keyid:34:A9:3C:29:36:69:8C:A2:BA:1C:D5:CE:30:41:4E:56:2A:63:F7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/34A93C2936698CA2BA1CD5CE30414E562A63F76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/34A93C2936698CA2BA1CD5CE30414E562A63F76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/0/326131323a646434373a383466663a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:c0:22:b7:84:03:66:70:6c:53:a8:b7:fa:c9:93:0b:d5:cb:
         3b:a7:b4:df:c4:d9:4d:e0:c7:d2:93:df:21:4e:02:53:67:d3:
         c7:73:87:10:cd:a8:50:3f:51:70:47:29:10:2f:38:bc:02:82:
         87:b6:9d:d5:08:8a:29:03:a9:40:53:47:e4:d0:68:a0:84:e1:
         a8:0a:31:4e:46:a9:96:8b:7f:a8:bb:4e:a7:0d:c9:1b:91:82:
         b3:58:0f:db:37:1e:67:3c:8e:90:d5:5e:61:d8:fe:b4:1e:13:
         57:a2:da:ec:66:b1:a1:e2:b3:6a:21:c7:15:6f:bf:64:11:04:
         62:58:aa:3f:eb:80:10:5c:10:a8:24:90:d8:8f:f4:5d:ff:8a:
         6c:6a:9f:1c:9c:c5:3c:5f:41:25:75:b1:74:a8:08:9a:0e:e4:
         33:af:e6:c5:f5:75:a8:36:44:e6:b1:c3:aa:d3:62:1d:bd:9f:
         a1:e1:2e:87:54:7b:c3:06:8a:e6:f6:f0:2a:e8:cc:cf:2f:b8:
         af:25:c5:62:35:ca:e6:40:15:08:3a:3a:0a:2f:fd:26:e3:d4:
         f0:7d:58:f0:8d:b4:7e:3b:fa:c9:fb:40:0d:45:3b:ae:56:78:
         98:8a:3c:f0:02:58:c4:d4:89:ed:f9:e7:4d:42:88:c6:43:a5:
         91:e8:f2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----