Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/PEgai2luyLG-Ulp0lmqkydJlkWI.roa
File:                     PEgai2luyLG-Ulp0lmqkydJlkWI.roa (raw, json)
Hash identifier:          dkHKcJulmAnAOxb0LNIQibyAhEMwKeZZPhUa7b4B9rc=
Subject key identifier:   3C:48:1A:8B:69:6E:C8:B1:BE:52:5A:74:96:6A:A4:C9:D2:65:91:62
Certificate issuer:       /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial:       04
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/PEgai2luyLG-Ulp0lmqkydJlkWI.roa
Signing time:             Thu 10 Mar 2022 09:41:57 +0000
ROA not before:           Thu 10 Mar 2022 09:41:57 +0000
ROA not after:            Fri 10 Mar 2023 09:35:39 +0000
asID:                     12679
IP address blocks:        180.223.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
        Validity
            Not Before: Mar 10 09:41:57 2022 GMT
            Not After : Mar 10 09:35:39 2023 GMT
        Subject: CN=3C481A8B696EC8B1BE525A74966AA4C9D2659162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:6f:f5:6a:e5:63:83:49:1b:cf:ec:fa:f6:
                    4e:7b:e0:32:51:4f:3c:95:cc:72:91:54:0c:a1:52:
                    da:15:a0:cd:b4:22:1a:92:a6:59:56:1c:30:a7:ae:
                    3b:a5:6f:26:6b:b6:36:88:b2:0a:8f:58:f1:ec:fd:
                    d6:e3:d4:ba:1d:f6:1f:cf:ad:13:d9:d3:d3:be:6e:
                    9f:da:73:0b:f0:1c:d2:e8:b9:e3:db:f0:e3:98:4d:
                    62:ce:63:03:6d:01:72:dc:78:e9:a7:37:5d:42:9a:
                    a4:68:08:bd:55:8f:45:69:e4:0b:d0:51:3b:ce:35:
                    62:51:81:6a:13:ca:c7:3b:39:00:11:ce:a2:6a:a8:
                    e6:d4:82:1c:ec:fb:55:02:23:3b:9e:43:98:65:91:
                    69:6d:0d:72:a3:f2:c3:8e:0b:e1:2f:83:58:3d:98:
                    15:42:13:85:4e:df:b8:52:3c:1d:29:34:f3:8d:4c:
                    3b:de:ba:49:f8:eb:86:38:03:25:c5:3a:89:a1:b8:
                    11:86:3a:6d:0e:00:e6:05:6d:46:e9:30:c2:23:aa:
                    01:a6:68:90:18:8b:52:2c:dc:d1:d3:bc:0c:17:5f:
                    56:56:38:88:84:bc:ca:99:44:66:12:aa:b0:50:3c:
                    87:1d:30:d2:6a:3f:2d:a1:de:79:7f:38:de:ee:21:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:48:1A:8B:69:6E:C8:B1:BE:52:5A:74:96:6A:A4:C9:D2:65:91:62
            X509v3 Authority Key Identifier:
                keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/PEgai2luyLG-Ulp0lmqkydJlkWI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:9d:95:61:7a:36:91:a1:bf:9c:5d:8b:36:0b:37:5d:8a:7a:
         04:89:3d:3e:0a:0e:3d:ea:63:0a:e1:43:ab:f5:19:1f:ee:54:
         1d:54:56:fe:23:43:8c:54:93:29:14:91:0b:e2:04:96:d0:fa:
         a2:3e:3f:a2:bc:9b:6d:d6:05:ea:23:02:a5:6a:ff:7a:f9:78:
         fd:24:17:58:b7:f9:7b:be:ba:2a:81:c4:95:d4:ae:f3:20:19:
         49:5f:01:83:3c:5d:b2:13:35:d9:4c:17:8e:60:74:d0:6c:d2:
         c2:97:2a:92:de:b5:8a:9b:a1:5a:0d:14:17:37:63:d9:e7:2b:
         81:bd:cc:ee:ce:10:56:49:18:e0:d0:a4:aa:3b:4d:06:4f:ca:
         d1:8a:09:0d:96:9c:7b:64:d0:12:c9:92:f6:f8:a0:c5:28:01:
         9c:db:5e:6d:b4:e6:2c:02:92:ef:1b:b4:80:3f:dc:94:ee:15:
         83:bd:02:98:a4:f1:28:85:c5:bf:f1:99:e1:b9:cf:d2:ae:4c:
         a9:fe:d9:5f:e4:5c:cf:b4:2e:48:28:fc:9a:1b:8f:73:74:e8:
         5a:64:53:37:a1:a0:a6:40:ec:da:1f:17:79:e1:34:ff:0a:71:
         79:5e:9a:c1:3a:31:bf:60:e4:82:33:f1:de:96:f3:d7:e3:20:
         85:4d:de:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----