Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/qupWr5OAwOPNUQiLCW89PIbi3LA.roa
File:                     qupWr5OAwOPNUQiLCW89PIbi3LA.roa (raw, json)
Hash identifier:          ZOHREWdyEXOCGTNKXPZ/vkaXhNN0Sa5uEsgYN984oZg=
Subject key identifier:   AA:EA:56:AF:93:80:C0:E3:CD:51:08:8B:09:6F:3D:3C:86:E2:DC:B0
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       3F7E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qupWr5OAwOPNUQiLCW89PIbi3LA.roa
Signing time:             Sat 13 Apr 2024 05:53:20 +0000
ROA not before:           Sat 13 Apr 2024 05:53:20 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     24426
IP address blocks:        43.236.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16254 (0x3f7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Apr 13 05:53:20 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=AAEA56AF9380C0E3CD51088B096F3D3C86E2DCB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:f7:04:ac:fe:45:5f:69:ca:dc:31:fe:25:
                    4e:21:b0:d7:9f:e0:be:c4:7b:79:ec:20:31:70:cc:
                    fa:e0:6d:7d:55:be:ab:4e:ea:bc:99:50:50:b8:2c:
                    f8:c8:cd:ca:2a:0c:bc:f6:0a:1b:32:40:b6:85:dc:
                    1f:d0:e5:d0:f1:86:2e:19:65:5a:53:6f:f2:85:d9:
                    73:f6:fd:45:00:e8:a8:df:eb:83:a3:94:d1:28:89:
                    ec:6b:9c:d6:f2:68:54:ff:1d:c8:48:e6:ee:90:a0:
                    a1:88:39:22:33:7b:ee:7e:60:a1:38:90:36:35:78:
                    0c:4d:a7:32:04:ce:cb:12:1a:1e:ff:55:af:7b:ca:
                    b2:ab:52:14:42:73:db:40:52:91:b2:90:c5:87:e5:
                    75:b6:20:f0:4b:6b:93:63:f3:d6:4a:ec:d4:44:51:
                    86:f3:cd:56:5b:01:4a:69:e8:b2:dd:24:d7:29:41:
                    9a:8c:86:22:c0:b9:84:54:41:0f:01:dd:3f:a1:39:
                    56:0a:f8:b7:e2:7d:3b:c3:a1:b7:1a:0b:08:fc:4c:
                    e1:06:7d:f4:eb:88:5e:fe:3a:3c:df:fd:c9:2a:03:
                    9d:98:ea:6c:73:0c:67:e1:b0:a3:e7:e1:9e:d5:86:
                    2f:ee:c7:13:10:ab:55:83:6a:88:72:d2:bb:48:88:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EA:56:AF:93:80:C0:E3:CD:51:08:8B:09:6F:3D:3C:86:E2:DC:B0
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/qupWr5OAwOPNUQiLCW89PIbi3LA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.236.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:02:8b:eb:ab:f1:ec:c4:0d:a7:a5:f3:e2:af:89:e6:eb:a8:
         65:6f:1d:e3:2a:4f:30:b7:1e:33:51:32:a1:1b:61:27:0d:92:
         31:94:dc:ad:ba:83:88:c0:f8:9c:ce:5a:3f:11:e3:57:34:2d:
         0e:74:0b:71:4d:ef:4f:8b:1d:5d:58:01:60:94:9e:82:dc:f5:
         36:fa:c5:b5:d5:d0:94:fa:2a:98:26:9b:ea:d9:d0:a8:69:11:
         20:9e:1c:8a:91:5e:5c:52:90:5d:a0:9f:07:8e:02:9b:a3:0c:
         69:ba:b6:e6:66:91:30:2a:78:a7:bb:93:cc:3c:4e:fe:64:72:
         18:50:1c:30:99:8f:a4:30:31:45:52:12:df:b0:57:43:64:09:
         70:99:55:5e:d2:b7:da:dc:ed:ce:f5:31:00:46:93:f9:e8:7f:
         8c:7b:24:24:b2:aa:f2:a4:81:86:64:a7:42:3a:81:d2:92:e6:
         7e:05:8f:ed:d2:f1:64:89:8c:d7:84:e7:97:94:d4:d4:c7:bb:
         c5:cb:95:31:a8:31:67:6d:5b:30:96:fb:9f:c0:ca:40:90:e3:
         5f:0c:be:0c:28:52:b6:2d:99:37:31:c8:44:90:0a:77:a0:1b:
         c6:45:2f:78:b2:3d:34:dc:49:4f:55:9f:30:46:56:51:6e:1f:
         d1:4f:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----