Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/fCwwRULkgeCe45dThFJHpN21egY.roa
File:                     fCwwRULkgeCe45dThFJHpN21egY.roa (raw, json)
Hash identifier:          YeC0XUg8GtTLC47ReiZWfJA5LM5c5z5iS9mJtJqSiJc=
Subject key identifier:   7C:2C:30:45:42:E4:81:E0:9E:E3:97:53:84:52:47:A4:DD:B5:7A:06
Certificate issuer:       /CN=F76C9E43361DEA446077AD7029057380AFFF3266
Certificate serial:       1415
Authority key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/fCwwRULkgeCe45dThFJHpN21egY.roa
Signing time:             Fri 19 May 2023 05:55:09 +0000
ROA not before:           Fri 19 May 2023 05:55:09 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     24424
IP address blocks:        103.203.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5141 (0x1415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F76C9E43361DEA446077AD7029057380AFFF3266
        Validity
            Not Before: May 19 05:55:09 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=7C2C304542E481E09EE39753845247A4DDB57A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ed:51:b0:4f:64:a5:f8:77:2c:9e:aa:64:7b:
                    c2:6f:3a:f8:44:e9:53:ae:28:ff:45:61:49:80:42:
                    a6:b6:1e:44:2a:ca:c9:5c:99:d7:40:87:ee:8a:91:
                    b9:9c:33:b4:8a:ef:90:31:87:6b:6d:6b:69:cc:eb:
                    a2:88:da:eb:a1:ac:5f:9f:26:28:41:7c:82:df:26:
                    b8:c3:03:4b:32:16:53:d8:01:59:9f:87:1f:ef:9a:
                    dc:ee:ee:e2:0c:98:6c:13:d3:32:d7:75:33:4e:95:
                    76:a1:ae:6d:35:98:c3:2d:28:1f:74:7b:4c:d9:05:
                    28:69:50:24:50:25:69:4f:33:6a:36:36:33:e6:cf:
                    a6:8b:53:e9:8d:33:c4:91:d2:a4:73:05:ce:b0:1e:
                    67:0a:ee:a6:fd:79:cb:82:b9:60:67:44:f9:44:53:
                    5f:a9:76:db:bb:4f:8d:5d:3b:a8:6f:a9:f5:e4:12:
                    60:5e:4d:3e:62:fe:f2:83:55:49:41:7f:ad:18:a2:
                    ef:d4:8c:9c:cb:a5:30:7d:75:81:6d:16:5e:22:c3:
                    1d:a6:1d:2d:6b:bc:1d:a8:a5:92:27:8d:50:91:39:
                    db:a7:af:02:d9:3e:06:02:86:ca:9b:d9:a0:4c:d7:
                    d0:2d:72:cf:40:9d:ee:3a:20:2e:bf:8a:d7:11:f0:
                    72:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2C:30:45:42:E4:81:E0:9E:E3:97:53:84:52:47:A4:DD:B5:7A:06
            X509v3 Authority Key Identifier:
                keyid:F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/fCwwRULkgeCe45dThFJHpN21egY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:cf:aa:b0:79:be:46:68:18:41:76:c1:05:c8:c3:9d:31:41:
         69:b2:a1:e7:95:91:a1:84:d7:95:da:5a:6f:0b:29:ba:1d:c3:
         40:3e:17:ad:57:69:e6:a4:e2:4f:83:23:b6:e7:ad:94:b9:02:
         52:9a:49:44:10:15:b1:92:f5:05:33:0a:9a:c8:1b:a5:71:b2:
         45:ff:65:91:56:fd:3f:cd:06:f3:27:c5:94:13:d1:73:17:e9:
         67:f7:32:94:be:b1:97:8c:a6:57:df:ee:0d:84:e2:7a:e1:67:
         5b:e0:85:e0:0c:00:21:5e:26:77:52:21:e8:b6:b6:93:ed:72:
         8e:98:4f:87:02:85:ad:10:3e:20:37:c7:50:6e:33:af:d0:2f:
         e6:ab:07:ee:49:70:fb:0c:4e:e9:ab:77:64:c7:e9:d8:f2:3d:
         92:d1:b3:a8:49:ff:bd:78:99:d7:ba:d2:9a:b1:5b:68:6f:d9:
         e1:40:0d:4c:75:ca:d9:bf:e8:a4:6f:14:f9:f4:92:dc:ef:b9:
         20:21:61:25:6a:14:15:bc:19:f9:1f:66:63:ac:83:99:66:fb:
         48:db:b5:58:ef:e5:3c:a5:96:73:50:d5:2a:8e:1f:b6:6d:10:
         0c:84:4c:56:0d:70:bf:17:dc:a0:f4:95:28:f6:30:73:9a:72:
         29:1b:f8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org