Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/2/326131323a646434373a383266323a3a2f34372d3437203d3e20323032313939.roa
File:                     326131323a646434373a383266323a3a2f34372d3437203d3e20323032313939.roa (raw, json)
Hash identifier:          WltXBYi2ZwUwqh/jbN7g8mF2531X1G3wMBVk+/CZj5o=
Subject key identifier:   0D:64:54:D1:1F:E7:9F:9E:BE:C3:C3:BE:4C:F2:0F:32:56:12:12:6C
Certificate issuer:       /CN=66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA
Certificate serial:       057739C98E696BC6C3B4D79A5376887DCDB7DFC5
Authority key identifier: 66:F5:7E:D7:FE:89:EB:B7:A2:65:9F:73:62:D0:DB:08:56:B0:B3:DA
Authority info access:    rsync://rpki.august.tw/repo/HYSP/6/66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/2/326131323a646434373a383266323a3a2f34372d3437203d3e20323032313939.roa
Signing time:             Sun 29 Jan 2023 16:05:41 +0000
ROA not before:           Sun 29 Jan 2023 16:00:41 +0000
ROA not after:            Sun 28 Jan 2024 16:05:41 +0000
asID:                     202199
IP address blocks:        2a12:dd47:82f2::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:77:39:c9:8e:69:6b:c6:c3:b4:d7:9a:53:76:88:7d:cd:b7:df:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA
        Validity
            Not Before: Jan 29 16:00:41 2023 GMT
            Not After : Jan 28 16:05:41 2024 GMT
        Subject: CN=0D6454D11FE79F9EBEC3C3BE4CF20F325612126C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:bc:0f:cd:7b:8f:e3:62:83:3a:d9:a2:50:23:
                    37:c1:5b:8b:56:f5:56:c0:d1:c1:c2:ba:c2:d7:39:
                    1a:7e:c9:e8:32:cf:55:cc:60:82:1a:a2:82:68:58:
                    05:c9:e7:be:75:17:3f:8a:cb:10:9d:fc:2e:21:24:
                    ca:d7:ee:d2:1a:d0:d7:b6:36:04:ec:1a:b4:ad:e6:
                    ce:d0:b6:cd:a6:fa:5a:0e:1d:73:12:6b:de:7b:0e:
                    7b:fd:9f:0c:eb:37:04:fc:61:58:fc:b1:4e:e7:2f:
                    19:21:85:28:a3:76:ce:69:99:3c:00:0a:41:4d:8e:
                    63:9e:ae:26:79:40:95:ea:a7:96:1a:bf:0b:e7:cc:
                    6a:8c:c1:df:d2:86:7a:25:7b:4a:70:d0:4e:2d:ad:
                    8e:42:64:3b:cf:45:a7:2b:2c:5a:8a:8f:d5:51:78:
                    1c:41:40:89:69:8d:71:a3:ee:5c:fa:ff:68:c7:e5:
                    e2:48:31:43:eb:2e:73:a0:81:d4:0b:81:14:ea:d7:
                    7f:77:79:93:0c:fe:bf:08:84:3b:57:26:14:a4:b3:
                    3c:ef:3a:14:8f:09:e1:17:8a:a6:58:eb:31:b4:d6:
                    e5:eb:96:ff:f8:78:5e:f3:46:73:da:7a:ef:d5:6d:
                    0e:53:0e:6d:e7:93:e7:7c:7c:6a:fc:a7:91:e8:02:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:64:54:D1:1F:E7:9F:9E:BE:C3:C3:BE:4C:F2:0F:32:56:12:12:6C
            X509v3 Authority Key Identifier:
                keyid:66:F5:7E:D7:FE:89:EB:B7:A2:65:9F:73:62:D0:DB:08:56:B0:B3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/2/66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/HYSP/6/66F57ED7FE89EBB7A2659F7362D0DB0856B0B3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/2/326131323a646434373a383266323a3a2f34372d3437203d3e20323032313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:82f2::/47

    Signature Algorithm: sha256WithRSAEncryption
         a0:17:c8:fe:00:7c:9b:38:dc:f3:ed:83:f9:87:12:d6:be:61:
         95:73:d7:11:bf:6e:b1:c7:23:f0:2d:f9:2d:51:2a:64:7e:e7:
         e6:70:0a:92:5e:13:6e:12:5c:ec:38:5c:32:b9:f6:5f:68:ca:
         99:ea:c7:73:1f:fe:46:eb:13:c9:aa:7a:c4:61:71:13:d3:8f:
         32:67:3e:ac:f7:95:6b:d5:98:e4:65:af:85:f1:74:2a:b4:09:
         70:e0:99:b0:62:13:06:2e:97:7b:f0:4c:43:a7:6c:f4:d9:3b:
         cf:47:f0:d1:7f:5a:4b:70:29:7c:cf:c7:f7:f1:df:18:0a:54:
         66:44:e6:b7:60:1c:27:64:a6:f1:f1:f6:0d:28:c3:0a:45:f9:
         e3:c6:a3:a8:81:20:3f:81:6c:5c:37:bb:92:fd:eb:51:f1:ef:
         81:63:03:fd:5b:0a:87:18:4d:59:48:7c:39:b5:1c:16:96:2d:
         70:58:f1:df:1d:92:28:af:d0:06:52:e7:c3:3a:1d:48:eb:ce:
         97:d3:db:5c:96:70:ac:06:23:70:e6:0e:9d:c6:9e:f8:98:17:
         8f:6c:b6:c9:67:4c:62:ba:b3:38:66:ac:8f:2e:c4:c3:0c:6b:
         c7:7c:18:6c:62:da:f4:ad:49:4c:26:6f:ba:13:ef:43:17:30:
         f7:fb:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----