Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/W4AgB9Jb7YvyFWxSZqjnJZEot3Y.roa
File:                     W4AgB9Jb7YvyFWxSZqjnJZEot3Y.roa (raw, json)
Hash identifier:          U7l3ndKdGaqqz4zvZ7pFx4BRzG3H25YzOAJoi74mD4E=
Subject key identifier:   5B:80:20:07:D2:5B:ED:8B:F2:15:6C:52:66:A8:E7:25:91:28:B7:76
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       4B4E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W4AgB9Jb7YvyFWxSZqjnJZEot3Y.roa
Signing time:             Sun 28 Apr 2024 23:53:31 +0000
ROA not before:           Sun 28 Apr 2024 23:53:31 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     24426
IP address blocks:        43.236.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19278 (0x4b4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Apr 28 23:53:31 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=5B802007D25BED8BF2156C5266A8E7259128B776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3c:36:ab:bb:32:6a:9a:91:e1:e2:44:16:2c:
                    e1:1a:fb:ec:be:55:62:21:78:f0:ce:fd:96:76:16:
                    05:5b:98:19:59:c9:41:b6:dd:7f:04:eb:4e:56:3d:
                    d1:fc:5b:2c:3c:6a:8c:71:9a:c0:62:aa:6f:25:cb:
                    22:3a:be:77:69:3a:80:8b:1b:f1:a6:3e:4e:61:11:
                    7d:af:38:24:9d:77:c3:96:56:5c:00:e5:b0:12:24:
                    23:06:2e:b8:7c:c0:e9:ff:76:01:b5:ae:0f:64:95:
                    62:65:ca:43:11:8d:a1:df:59:8d:70:ea:5e:be:81:
                    61:88:ba:91:ce:1c:ba:e5:e5:81:00:20:98:e5:31:
                    87:af:52:d5:8f:b8:1b:18:b6:4e:d7:05:f1:57:56:
                    e0:68:85:e8:27:bf:97:e0:3e:2d:ab:38:55:c9:77:
                    bb:16:ce:73:3b:3d:b4:77:87:ac:89:a6:aa:0f:81:
                    8c:a0:71:d2:24:a1:00:e6:94:4b:a0:31:4f:cd:a5:
                    70:ba:f5:40:93:9f:26:17:2e:39:59:86:b9:81:bc:
                    b6:76:6d:3c:93:9e:76:bf:02:5b:3e:db:0e:e6:31:
                    66:2c:44:4a:da:f3:b0:b0:84:73:b7:18:c8:84:5b:
                    61:54:bf:2b:ab:03:cc:21:92:9e:c9:fb:41:81:e8:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:80:20:07:D2:5B:ED:8B:F2:15:6C:52:66:A8:E7:25:91:28:B7:76
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/W4AgB9Jb7YvyFWxSZqjnJZEot3Y.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.236.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a9:1d:d1:52:9a:4f:e3:fe:50:db:3a:e7:ba:30:fc:5c:7a:fa:
         43:25:97:3f:51:7e:f6:67:4e:d5:76:67:2b:10:92:3e:6b:58:
         4f:59:19:87:3e:0e:df:07:bd:97:9f:7f:7b:69:3e:fa:2d:d9:
         08:d7:c2:8e:66:f6:15:98:b2:ff:4c:04:07:20:53:95:56:8f:
         23:75:e7:32:74:46:20:ce:28:a9:92:ac:0b:9a:7d:8c:89:68:
         ec:57:d3:d1:28:c2:16:48:0b:20:af:67:9c:ae:16:9a:c6:c5:
         b8:e4:05:d1:f5:be:b9:f6:57:3c:58:bf:ff:ba:4a:5f:47:11:
         c4:3e:6c:3c:03:9e:d3:b0:e0:2f:63:07:39:5d:ea:2d:63:1c:
         32:cb:fc:f3:44:67:91:9c:0f:e6:b9:5a:39:b1:ad:a6:75:b9:
         1c:aa:f8:ad:0e:5f:b4:f5:ba:40:1e:f4:8c:f0:93:e9:cf:0b:
         2d:8c:26:39:ca:47:1d:a7:b8:a7:3e:e5:bc:24:be:87:a0:c4:
         a9:a9:b0:54:17:dd:a4:79:bb:e8:e6:7f:3a:2c:e1:87:90:d0:
         3e:80:30:6a:7e:a2:df:d7:9a:cd:52:9b:4a:b7:e7:61:f3:31:
         37:e0:29:7a:2e:5e:9b:57:64:de:3f:73:3b:56:2e:40:91:94:
         ee:1c:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----