Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/AS945/2/323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa
File:                     323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa (raw, json)
Hash identifier:          xlIDgBHwUiq987v+OiWBg2FDGoeV6vDit5Ty0gP15sc=
Subject key identifier:   BC:DB:28:36:D6:C7:DD:3E:CB:54:06:12:BC:39:12:6F:F1:2B:CC:AF
Certificate issuer:       /CN=1A8C29884038907EDD0174FADC751F16456E1C56
Certificate serial:       6BC10A885E09D577956762E5FA29D8DF2EED1C17
Authority key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56
Authority info access:    rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
Subject info access:      rsync://dev.tw/rpki/AS945/2/323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa
Signing time:             Fri 11 Oct 2024 10:04:09 +0000
ROA not before:           Fri 11 Oct 2024 09:59:09 +0000
ROA not after:            Fri 10 Oct 2025 10:04:09 +0000
asID:                     213045
IP address blocks:        2602:fc23:11a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c1:0a:88:5e:09:d5:77:95:67:62:e5:fa:29:d8:df:2e:ed:1c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8C29884038907EDD0174FADC751F16456E1C56
        Validity
            Not Before: Oct 11 09:59:09 2024 GMT
            Not After : Oct 10 10:04:09 2025 GMT
        Subject: CN=BCDB2836D6C7DD3ECB540612BC39126FF12BCCAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:dd:76:af:16:52:21:db:d8:98:61:37:b0:
                    a2:ec:25:ff:89:4d:0d:f5:1b:44:20:b2:9d:7d:58:
                    78:55:51:49:f3:48:f1:c5:2a:63:22:de:9c:76:ba:
                    e1:da:17:85:bc:fb:9e:c1:34:d1:f9:e0:fb:b9:d2:
                    e9:b9:99:d1:b7:25:f5:22:0b:42:09:be:9e:85:74:
                    43:23:c1:7c:85:de:80:39:27:9c:1c:ee:13:ed:3a:
                    99:4e:b0:77:3e:fc:a2:c1:13:ba:69:e8:0b:3d:ba:
                    f9:89:7c:92:49:c1:79:c3:b4:b8:01:a3:9c:5f:27:
                    b7:13:e1:5b:b3:79:bc:ae:a6:27:07:a4:62:01:4a:
                    93:17:33:4f:3e:cf:3f:b8:ca:81:23:cc:d7:be:3e:
                    bc:d3:d1:b4:05:30:73:4c:da:32:aa:5e:48:c2:22:
                    2c:be:4b:f0:6a:a4:9a:53:9d:ca:d3:1f:52:6c:a3:
                    ab:fa:0a:4e:32:75:e2:31:ba:bf:48:1a:8b:95:1a:
                    d3:53:96:b3:1c:15:8b:34:4b:67:79:37:21:18:95:
                    03:db:ef:88:f2:88:11:40:c1:64:a5:1f:a4:71:77:
                    0d:b4:93:03:c9:ce:b8:ff:63:57:7c:d1:d5:85:0f:
                    ba:8a:e0:ba:16:2e:58:57:20:ad:1c:48:ae:0e:58:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DB:28:36:D6:C7:DD:3E:CB:54:06:12:BC:39:12:6F:F1:2B:CC:AF
            X509v3 Authority Key Identifier:
                keyid:1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/2/323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:11a::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:c3:86:5c:d9:04:43:ba:06:bf:22:24:63:98:d3:e2:6a:cb:
         6c:d8:9f:d2:4a:05:d8:5e:eb:46:cd:e3:ab:c6:a2:69:ff:65:
         5e:ac:b4:bc:d8:bb:9c:42:c5:5b:c4:35:69:03:8c:e6:78:cd:
         d7:67:9b:33:46:ae:65:e4:b1:d3:f0:e9:7d:4b:5a:5c:94:68:
         73:5d:37:be:3f:dc:2f:9c:91:eb:4a:02:cf:7a:dc:30:b1:53:
         1a:85:79:da:70:03:79:9e:89:70:c6:ac:9d:62:9b:1f:2c:73:
         bd:6a:a0:36:8e:36:f0:18:9a:ea:0f:36:bc:05:50:34:9d:90:
         65:bb:a0:1b:0b:2a:6e:ce:4c:d3:61:fc:2f:48:cd:7b:5a:ed:
         00:71:f3:bc:59:03:13:2a:80:4f:18:b4:cf:95:78:f0:37:6e:
         d4:ca:e7:25:d9:b8:71:fe:be:4b:25:df:f4:43:f7:57:36:07:
         4b:1d:7f:6d:b0:c0:e1:fe:d0:b3:2c:90:b6:59:74:0a:4c:87:
         ef:a3:32:73:12:8e:8d:51:9c:0c:77:ad:cf:d1:58:95:27:a4:
         7a:ee:be:d8:89:9f:26:70:01:07:70:29:bb:c8:5e:f0:fa:7e:
         12:6d:fa:a0:8d:f9:86:9a:2a:53:96:c1:bd:71:af:6c:f8:10:
         4e:2b:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----