Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/MT/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
File:                     323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (raw, json)
Hash identifier:          IGJfpDnec+ucKHQP4K+2l7buxdEVNbJ8PrzDXm+TIvg=
Subject key identifier:   6C:6F:21:61:F0:AA:00:CC:D6:3A:95:14:4A:27:07:31:A8:91:18:B1
Certificate issuer:       /CN=39c8f1fa9e8ad55f856c24f5fdc8264462462160
Certificate serial:       7CA6A1EBC4DA65E8DA1CF7FC951031339AE1B846
Authority key identifier: 39:C8:F1:FA:9E:8A:D5:5F:85:6C:24:F5:FD:C8:26:44:62:46:21:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ocjx-p6K1V-FbCT1_cgmRGJGIWA.cer
Subject info access:      rsync://rpki.august.tw/repo/MT/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
Signing time:             Sun 16 Oct 2022 00:12:54 +0000
ROA not before:           Sun 16 Oct 2022 00:07:54 +0000
ROA not after:            Sun 15 Oct 2023 00:12:54 +0000
asID:                     202881
IP address blocks:        2001:67c:2be8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a6:a1:eb:c4:da:65:e8:da:1c:f7:fc:95:10:31:33:9a:e1:b8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c8f1fa9e8ad55f856c24f5fdc8264462462160
        Validity
            Not Before: Oct 16 00:07:54 2022 GMT
            Not After : Oct 15 00:12:54 2023 GMT
        Subject: CN=6C6F2161F0AA00CCD63A95144A270731A89118B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:2f:b6:16:b2:95:47:c9:97:51:53:06:97:
                    b6:80:87:b6:22:34:af:1b:25:33:a4:4c:d2:74:2e:
                    72:6d:1f:45:46:04:09:25:33:c2:04:76:ae:22:ae:
                    d5:0b:b7:c1:fe:9a:f3:7e:eb:66:14:ca:c1:13:26:
                    7c:35:aa:6e:09:39:9d:0f:c2:53:f6:74:f7:5e:f9:
                    2f:1b:53:9b:c5:c3:7e:e6:ba:65:a0:da:7b:81:9a:
                    6e:03:be:e1:fd:bb:71:73:00:c5:72:17:76:e2:0a:
                    da:c5:f5:9a:4e:08:a1:2f:01:e8:05:ab:e9:f6:a2:
                    86:51:17:47:b2:65:36:b1:72:8a:b8:b2:1e:92:30:
                    31:76:b7:61:1d:d0:3d:7d:63:55:18:57:cf:d4:b4:
                    ad:3c:79:ba:97:3d:18:ab:bf:71:45:c7:8d:3e:63:
                    2e:2a:f7:37:a9:b9:42:1c:55:5b:5a:87:9d:bb:34:
                    79:54:6f:d4:d9:ec:6c:f1:50:2e:20:5a:f3:d9:8e:
                    12:3d:ce:5d:0c:79:d9:8c:3b:e7:6d:bb:75:b6:de:
                    c7:c1:60:69:b6:0c:ea:9c:bd:a4:ce:58:bf:8e:1d:
                    12:eb:e9:b0:7d:27:86:2e:44:10:55:48:74:89:47:
                    cc:d8:f2:c3:85:6b:35:ce:f5:10:06:30:37:65:7d:
                    55:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6F:21:61:F0:AA:00:CC:D6:3A:95:14:4A:27:07:31:A8:91:18:B1
            X509v3 Authority Key Identifier:
                keyid:39:C8:F1:FA:9E:8A:D5:5F:85:6C:24:F5:FD:C8:26:44:62:46:21:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/MT/3/39C8F1FA9E8AD55F856C24F5FDC8264462462160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ocjx-p6K1V-FbCT1_cgmRGJGIWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/MT/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2be8::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:fe:b8:d6:69:b1:48:8f:a6:47:8d:17:03:da:2f:16:1d:c6:
         af:d8:c4:df:cd:da:3b:d0:66:62:ea:a2:bb:af:1a:49:33:64:
         71:db:ee:1a:06:47:65:98:85:68:2b:09:1b:41:73:fe:0e:21:
         26:55:da:7c:10:68:37:38:51:ab:87:27:0c:38:2c:82:c0:3d:
         6c:27:7b:4c:92:94:4a:f4:09:9d:cb:b4:61:55:0d:e1:14:2c:
         64:88:e1:21:fa:c8:d2:72:87:5e:6d:57:4d:8c:a9:e5:3e:d0:
         c9:07:2f:2e:dc:d3:6a:69:e0:d0:90:f7:35:89:d3:2b:23:2a:
         30:63:8e:6c:1c:0e:da:f7:18:69:4a:ca:56:b1:e2:f7:79:a1:
         3a:ab:bf:76:62:dd:24:75:6f:c9:97:d7:5e:3b:3b:f4:17:79:
         bd:1d:e2:7e:28:fc:75:11:12:ac:89:d6:d3:0a:8e:b2:6f:cb:
         0d:da:f8:1e:61:02:8e:a3:72:3d:6e:16:4d:ed:46:8f:4c:bf:
         7d:c3:0e:41:23:7d:2d:31:98:5b:13:ad:3c:58:fe:56:61:e5:
         cb:b6:19:d3:c7:93:e5:d6:e9:fe:b1:17:be:77:29:32:e4:9c:
         58:ac:88:b4:4e:6e:f6:6a:ff:68:8c:8e:22:89:5d:69:4a:6a:
         49:80:1f:e5
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgIUfKah68TaZejaHPf8lRAxM5rhuEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzljOGYxZmE5ZThhZDU1Zjg1NmMyNGY1ZmRjODI2NDQ2
MjQ2MjE2MDAeFw0yMjEwMTYwMDA3NTRaFw0yMzEwMTUwMDEyNTRaMDMxMTAvBgNV
BAMTKDZDNkYyMTYxRjBBQTAwQ0NENjNBOTUxNDRBMjcwNzMxQTg5MTE4QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAC+2FrKVR8mXUVMGl7aAh7Yi
NK8bJTOkTNJ0LnJtH0VGBAklM8IEdq4irtULt8H+mvN+62YUysETJnw1qm4JOZ0P
wlP2dPde+S8bU5vFw37mumWg2nuBmm4DvuH9u3FzAMVyF3biCtrF9ZpOCKEvAegF
q+n2ooZRF0eyZTaxcoq4sh6SMDF2t2Ed0D19Y1UYV8/UtK08ebqXPRirv3FFx40+
Yy4q9zepuUIcVVtah527NHlUb9TZ7GzxUC4gWvPZjhI9zl0MedmMO+dtu3W23sfB
YGm2DOqcvaTOWL+OHRLr6bB9J4YuRBBVSHSJR8zY8sOFazXO9RAGMDdlfVUTAgMB
AAGjggHZMIIB1TAdBgNVHQ4EFgQUbG8hYfCqAMzWOpUUSicHMaiRGLEwHwYDVR0j
BBgwFoAUOcjx+p6K1V+FbCT1/cgmRGJGIWAwDgYDVR0PAQH/BAQDAgeAMF4GA1Ud
HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS5hdWd1c3QudHcvcmVwby9NVC8zLzM5
QzhGMUZBOUU4QUQ1NUY4NTZDMjRGNUZEQzgyNjQ0NjI0NjIxNjAuY3JsMGQGCCsG
AQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9PY2p4LXA2SzFWLUZiQ1QxX2NnbVJHSkdJV0EuY2Vy
MH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5bmM6Ly9ycGtpLmF1Z3Vz
dC50dy9yZXBvL01ULzMvMzIzMDMwMzEzYTM2Mzc2MzNhMzI2MjY1MzgzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzIzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQZ8K+gw
DQYJKoZIhvcNAQELBQADggEBAIX+uNZpsUiPpkeNFwPaLxYdxq/YxN/N2jvQZmLq
oruvGkkzZHHb7hoGR2WYhWgrCRtBc/4OISZV2nwQaDc4UauHJww4LILAPWwne0yS
lEr0CZ3LtGFVDeEULGSI4SH6yNJyh15tV02MqeU+0MkHLy7c02pp4NCQ9zWJ0ysj
KjBjjmwcDtr3GGlKylax4vd5oTqrv3Zi3SR1b8mX1147O/QXeb0d4n4o/HUREqyJ
1tMKjrJvyw3a+B5hAo6jcj1uFk3tRo9Mv33DDkEjfS0xmFsTrTxY/lZh5cu2GdPH
k+XW6f6xF753KTLknFisiLRObvZq/2iMjiKJXWlKakmAH+U=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:13 2023 by rpki-client on console.sobornost.net