Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/AS945/2/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
File:                     323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa (raw, json)
Hash identifier:          E8bBcjoq3ooleg2bY+Xsc+MrgeuC9/HobMu4necY1/Y=
Subject key identifier:   A3:46:52:3F:C4:A6:67:60:31:0D:BA:72:FB:51:91:63:DB:B5:E2:AF
Certificate issuer:       /CN=1A8C29884038907EDD0174FADC751F16456E1C56
Certificate serial:       7E5F8384C9BAB1B6C08010FDA39DD74A1038BFE2
Authority key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56
Authority info access:    rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
Subject info access:      rsync://dev.tw/rpki/AS945/2/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
Signing time:             Fri 11 Oct 2024 10:04:10 +0000
ROA not before:           Fri 11 Oct 2024 09:59:10 +0000
ROA not after:            Fri 10 Oct 2025 10:04:10 +0000
asID:                     57429
IP address blocks:        2602:fc23:111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5f:83:84:c9:ba:b1:b6:c0:80:10:fd:a3:9d:d7:4a:10:38:bf:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8C29884038907EDD0174FADC751F16456E1C56
        Validity
            Not Before: Oct 11 09:59:10 2024 GMT
            Not After : Oct 10 10:04:10 2025 GMT
        Subject: CN=A346523FC4A66760310DBA72FB519163DBB5E2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:a7:46:5a:a7:e4:bd:a8:ec:17:8f:b2:5d:
                    34:eb:87:8c:9e:b8:99:64:87:11:71:d3:af:d3:7e:
                    5f:e8:96:55:cb:b1:c4:c4:38:1c:5d:a8:8c:75:11:
                    30:d3:8b:08:08:82:57:1b:7d:10:e6:05:0f:9a:d1:
                    12:e6:18:c8:de:b9:8c:32:1d:9b:cc:3e:3a:79:38:
                    63:35:b8:41:01:81:1d:d5:c3:ee:12:3e:fe:9b:cd:
                    e0:19:39:a2:61:1b:00:57:f8:bb:26:a7:15:3a:d6:
                    5c:c0:b3:75:a8:2e:38:c5:64:8e:99:6d:1b:03:03:
                    6e:34:b3:12:ae:c1:af:a4:da:69:41:41:01:6a:08:
                    17:de:1d:a1:a8:73:bd:01:7c:b3:41:65:6b:62:5a:
                    16:d7:c7:3c:16:ba:85:21:49:71:50:a8:82:93:be:
                    ea:28:1c:98:c9:70:6f:30:35:b6:a2:92:31:04:48:
                    49:9d:49:aa:ae:d3:25:79:46:1c:a4:98:f9:77:b2:
                    17:68:9d:11:c7:5f:48:6c:23:10:32:7d:62:c8:65:
                    15:b6:f2:f2:d0:3a:64:95:e8:e5:e2:0a:57:92:fa:
                    5a:25:0a:4d:f8:e2:bd:1b:b5:58:cd:c1:f6:a8:f5:
                    d1:be:9f:e1:0f:fa:3b:ea:06:fe:56:3b:63:b4:44:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:52:3F:C4:A6:67:60:31:0D:BA:72:FB:51:91:63:DB:B5:E2:AF
            X509v3 Authority Key Identifier:
                keyid:1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/2/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:60:91:6e:c7:5d:80:55:d0:f3:f1:ea:bb:0c:a8:45:8c:7c:
         66:bc:62:29:54:cb:85:02:49:01:a8:7e:28:70:06:38:41:bf:
         07:ff:3a:b0:92:e6:ef:33:e8:37:10:43:47:af:69:f9:b3:3f:
         75:fa:60:d5:fe:74:eb:5e:44:29:a3:41:b0:07:60:84:3a:c5:
         47:99:c3:d3:1d:04:18:30:0c:c6:ac:e7:82:f4:3d:9f:96:a6:
         f4:c1:7c:eb:08:e2:97:79:32:14:d5:0a:f1:25:ba:13:49:6e:
         17:64:c7:c0:19:c6:4a:97:71:47:36:53:16:42:a6:98:b8:62:
         76:c8:c3:b1:4f:9d:6c:54:72:a6:88:fa:b4:7c:b6:5b:48:cd:
         1e:62:c5:34:7c:41:85:7f:23:a5:a1:c9:11:0a:55:2e:da:a7:
         c6:1c:ed:58:39:1d:4e:14:a1:03:35:8d:8f:5f:52:2a:c5:bc:
         0b:8a:d3:3f:52:00:40:96:e0:43:b2:c7:85:fa:49:e8:9a:5d:
         77:9f:ac:e3:e2:c0:f4:5e:9a:cd:ad:af:71:49:72:c6:e0:76:
         1f:f5:0a:7e:d6:fd:82:22:d3:31:a6:1c:71:63:67:8d:fe:f4:
         ea:f8:25:ab:30:27:11:a9:2f:62:6d:c4:5b:62:07:a7:df:8c:
         87:1e:6c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----