Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/paRgNZ5mzLz38fFXXrCfp1zqgeo.roa
File:                     paRgNZ5mzLz38fFXXrCfp1zqgeo.roa (raw, json)
Hash identifier:          /XjWTqjQr8SQTBt4eOTPxpGZALo5YLZCJEW5oVelpoA=
Subject key identifier:   A5:A4:60:35:9E:66:CC:BC:F7:F1:F1:57:5E:B0:9F:A7:5C:EA:81:EA
Certificate issuer:       /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial:       0955
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/paRgNZ5mzLz38fFXXrCfp1zqgeo.roa
Signing time:             Tue 07 Jun 2022 10:08:06 +0000
ROA not before:           Tue 07 Jun 2022 10:08:06 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     10753
IP address blocks:        101.49.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2389 (0x955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
        Validity
            Not Before: Jun  7 10:08:06 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=A5A460359E66CCBCF7F1F1575EB09FA75CEA81EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:2e:05:83:a3:2f:5a:86:68:37:d2:0c:51:
                    8f:85:b9:8e:5b:6d:2c:77:b3:82:89:c4:df:bc:1b:
                    9a:59:07:05:c6:1f:fb:cc:64:f2:73:0b:e3:fd:7a:
                    2d:bb:85:63:59:1a:2d:b0:70:a3:41:1d:c2:4c:e2:
                    b3:00:88:b9:16:03:3e:a7:8b:a1:9c:6a:cd:92:93:
                    4f:9d:20:67:26:62:89:2d:2b:b5:46:85:cb:56:c2:
                    1e:52:40:d1:13:7c:16:68:c9:9f:a2:69:70:74:d3:
                    b4:cf:9c:fb:87:fb:15:84:aa:04:87:f6:f1:c8:46:
                    e7:6c:72:f3:7b:be:4b:80:7e:03:9b:12:0a:ea:db:
                    b2:f4:4c:6a:72:14:fa:0b:a3:06:32:ff:8b:89:2b:
                    b3:67:d0:7b:5f:19:f8:79:d7:ff:f6:58:94:45:a2:
                    9c:ac:99:58:b6:c2:18:e1:ee:7d:86:7b:38:9d:ae:
                    1f:b6:b5:17:e8:cc:c5:f1:f6:a5:f7:e9:37:6c:ed:
                    cc:32:c5:d0:be:e6:b0:a1:c7:11:2c:f5:d1:cd:39:
                    68:b1:3f:4f:cc:35:9a:da:80:29:db:fb:8b:a0:4c:
                    ef:fe:7a:3f:37:de:1a:36:f2:da:72:b8:50:ad:7e:
                    6d:43:75:88:36:72:f1:a9:c3:7b:82:ee:7a:d7:11:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A4:60:35:9E:66:CC:BC:F7:F1:F1:57:5E:B0:9F:A7:5C:EA:81:EA
            X509v3 Authority Key Identifier:
                keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/paRgNZ5mzLz38fFXXrCfp1zqgeo.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:c9:3d:26:ab:84:e2:2b:fd:cf:17:37:d0:73:a0:bb:6c:a2:
         73:38:f6:1f:c1:de:61:a4:ac:e6:0f:c2:34:84:ef:65:f9:7b:
         14:7d:94:6c:d5:f1:6f:70:4d:0a:a7:bb:8d:05:a9:f7:90:ce:
         31:12:d9:63:af:ab:21:e6:24:7f:59:4f:6d:6d:2e:7a:57:0e:
         82:9e:28:50:55:45:7f:05:40:52:a0:ef:82:68:9c:1e:61:a4:
         cd:8d:d0:4d:db:36:4f:84:54:ce:a4:7f:86:c0:df:24:5c:a1:
         a9:29:e9:7e:f4:f6:f0:52:76:9e:82:e8:2e:e4:ab:4a:e0:1e:
         b8:b8:5c:68:45:42:a0:95:8c:d5:11:54:a6:1b:4b:8e:91:45:
         5f:6d:cb:62:02:5a:c4:b8:41:b8:2b:ac:99:70:8f:0f:36:c7:
         e8:69:a4:de:14:5f:19:7f:0d:a7:e0:4d:0d:9b:8a:5d:76:71:
         17:28:c3:1d:13:6a:e1:fd:7f:48:97:7a:1a:c1:9e:fa:e3:86:
         11:9d:ca:2a:7a:23:d9:7d:b5:51:e6:04:28:58:e2:9f:87:53:
         39:e4:2f:e6:0c:69:8a:b6:db:71:e5:14:e9:4a:75:23:0c:d6:
         e9:b2:94:fd:51:4d:1a:3d:5c:f1:7d:26:ff:24:fa:90:56:5e:
         bd:5e:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----