Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0/326131323a646434373a383065343a3a2f34382d3438203d3e20323033383433.roa
File:                     326131323a646434373a383065343a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          w+Ltn/kIHOhSucnbH526+rMRKsZvrV0htnErR5vGfQc=
Subject key identifier:   E7:D4:98:09:61:94:C7:C9:EB:FE:47:EA:C0:9A:D3:E0:0E:CA:AF:77
Certificate issuer:       /CN=6D198923E0B9960D744113B139EDF2E1DF3F3200
Certificate serial:       7B9329E367A733D543711C1374D7BC1788B4CF01
Authority key identifier: 6D:19:89:23:E0:B9:96:0D:74:41:13:B1:39:ED:F2:E1:DF:3F:32:00
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/6D198923E0B9960D744113B139EDF2E1DF3F3200.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0/326131323a646434373a383065343a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Mon 02 Jan 2023 17:38:35 +0000
ROA not before:           Mon 02 Jan 2023 17:33:35 +0000
ROA not after:            Mon 01 Jan 2024 17:38:35 +0000
asID:                     203843
IP address blocks:        2a12:dd47:80e4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:93:29:e3:67:a7:33:d5:43:71:1c:13:74:d7:bc:17:88:b4:cf:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D198923E0B9960D744113B139EDF2E1DF3F3200
        Validity
            Not Before: Jan  2 17:33:35 2023 GMT
            Not After : Jan  1 17:38:35 2024 GMT
        Subject: CN=E7D498096194C7C9EBFE47EAC09AD3E00ECAAF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:39:0f:b3:32:3b:c1:fc:78:66:85:84:fd:
                    15:2a:0c:81:bc:2c:d2:ba:41:77:80:4a:03:9f:29:
                    25:d4:5d:17:d9:91:bb:0c:f9:af:f0:90:bb:60:9c:
                    93:17:b4:99:b9:3b:ad:aa:21:e3:91:d1:dd:56:e1:
                    0b:f8:b9:bd:fc:90:13:9f:96:d2:55:b7:be:7d:5c:
                    79:d3:5e:a8:33:f0:e5:29:b2:e9:a9:b3:02:8e:5a:
                    f0:41:d0:84:eb:22:92:59:fc:af:eb:f4:cd:1d:d8:
                    67:de:2b:75:5d:a8:68:fb:d3:b0:58:06:de:c2:85:
                    68:f2:8a:76:a7:76:16:ce:9d:bb:42:08:b7:a0:5b:
                    92:e2:8b:63:50:5b:7c:f1:db:0d:d0:fb:b4:6f:d5:
                    60:e9:ed:62:ef:73:4e:48:ed:2e:df:af:3c:ab:19:
                    a1:13:5e:22:60:37:6e:29:49:0b:c6:4f:dc:5b:c6:
                    9e:27:da:85:8f:f8:ec:6c:5b:8c:a1:b3:e2:b3:c8:
                    19:99:e5:1d:1b:ba:67:2b:2a:61:91:63:13:4a:fb:
                    76:da:9c:cd:bc:06:a9:5a:c8:7e:34:3d:9d:96:0c:
                    f3:78:c5:10:a3:62:2b:6b:49:e0:fd:f0:34:1e:94:
                    83:06:11:08:ea:ea:cf:21:de:1c:95:79:c2:20:6e:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D4:98:09:61:94:C7:C9:EB:FE:47:EA:C0:9A:D3:E0:0E:CA:AF:77
            X509v3 Authority Key Identifier:
                keyid:6D:19:89:23:E0:B9:96:0D:74:41:13:B1:39:ED:F2:E1:DF:3F:32:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0/6D198923E0B9960D744113B139EDF2E1DF3F3200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/6D198923E0B9960D744113B139EDF2E1DF3F3200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/0/326131323a646434373a383065343a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:84:34:65:57:19:7f:6d:4f:3f:72:99:49:f3:fa:39:5d:2e:
         51:d4:55:db:86:fe:a0:d7:b3:36:af:68:ea:60:f8:60:ca:36:
         4c:d5:e7:61:3d:2d:bf:56:09:4a:d2:52:4a:d8:8d:d9:12:46:
         57:dd:ae:ed:4c:0f:5e:08:0b:e0:5c:11:c2:77:fb:04:cf:01:
         8f:5f:aa:db:0a:c9:9b:51:bf:9f:9a:04:db:5c:e6:81:9c:6c:
         87:83:15:31:62:79:6e:24:62:1e:2c:99:a8:dc:9b:74:04:de:
         9c:6d:c1:66:50:db:0c:49:5d:29:94:ae:75:dd:7d:38:09:50:
         f3:74:3b:c5:56:0f:e4:fc:d9:d6:04:e7:a7:ca:a6:48:8d:07:
         f2:24:2c:4c:b5:5c:59:04:68:5e:bf:b9:37:f8:23:7f:bf:8f:
         b7:9b:a1:f6:d7:92:47:64:63:32:dd:bd:cc:57:14:e5:69:90:
         d0:1a:bc:58:26:d0:f7:7c:43:c1:7f:ea:6b:0d:c7:96:1b:d4:
         7c:17:40:75:dc:4f:b2:bc:13:11:eb:b8:e4:fc:a7:d4:90:d9:
         94:56:ac:f5:ce:ad:6c:a1:e1:4a:c2:ad:fe:8c:bf:ab:5d:ff:
         b4:f8:26:1e:a9:c5:16:54:3e:ef:3f:a9:29:5d:c5:73:50:1f:
         24:78:93:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----