Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/sefoHsMTlhKtiEFqjmbJ1Dydoxs.roa
File:                     sefoHsMTlhKtiEFqjmbJ1Dydoxs.roa (raw, json)
Hash identifier:          uHFu5plPwGdZ6Yl0pFbyF6FzuvAowqDLIKXwhzzKCVk=
Subject key identifier:   B1:E7:E8:1E:C3:13:96:12:AD:88:41:6A:8E:66:C9:D4:3C:9D:A3:1B
Certificate issuer:       /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial:       0978
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/sefoHsMTlhKtiEFqjmbJ1Dydoxs.roa
Signing time:             Tue 07 Jun 2022 10:10:18 +0000
ROA not before:           Tue 07 Jun 2022 10:10:18 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     59033
IP address blocks:        2402:1440::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2424 (0x978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
        Validity
            Not Before: Jun  7 10:10:18 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=B1E7E81EC3139612AD88416A8E66C9D43C9DA31B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7e:f3:65:6f:a3:47:b0:e0:19:fc:e2:c6:06:
                    02:14:25:09:21:0e:13:eb:f0:78:d8:1b:0e:10:d3:
                    ee:79:f8:1f:04:79:08:30:68:97:55:9b:15:1c:32:
                    f2:9c:72:1b:78:d3:db:c7:89:39:d1:80:b4:6a:12:
                    da:74:9b:2c:e8:8c:e7:0e:db:66:f4:8e:b2:8b:71:
                    3d:1c:c9:75:7f:e6:85:3f:42:28:f0:61:58:54:d5:
                    26:c2:33:45:c5:cd:2f:9a:95:5b:82:81:f8:92:34:
                    50:7a:cf:5e:dd:c5:fe:ef:31:04:9f:5c:c3:11:76:
                    b9:ac:cd:7d:d5:ea:47:70:ae:ad:df:92:c9:8b:9d:
                    af:fd:1f:0b:f1:df:7e:63:34:67:d2:46:9c:c5:49:
                    68:1c:0d:65:bc:2e:3c:0b:08:84:1d:65:04:24:85:
                    93:df:08:57:d0:be:6f:ca:e5:8f:cb:1e:5e:60:54:
                    56:c9:09:63:43:8a:6d:9c:63:45:ac:6b:f4:f8:b4:
                    87:2f:fe:ec:4c:5f:d1:96:e1:ae:f5:f2:85:65:e0:
                    8c:5c:71:66:b2:33:c6:68:a0:ea:f3:8c:49:7f:63:
                    a7:08:45:d4:64:f6:9f:37:36:12:09:68:31:02:ef:
                    f3:41:5a:c6:7a:52:a4:02:2c:1e:d4:28:9b:c1:c4:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E7:E8:1E:C3:13:96:12:AD:88:41:6A:8E:66:C9:D4:3C:9D:A3:1B
            X509v3 Authority Key Identifier:
                keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/sefoHsMTlhKtiEFqjmbJ1Dydoxs.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:58:16:8c:6c:43:b3:5d:54:69:aa:eb:92:8c:dc:6a:01:4f:
         3d:74:f5:f2:45:9a:20:d4:bf:56:54:01:85:3f:fb:ec:85:e1:
         8b:95:52:15:42:43:8e:1d:78:d7:f6:3f:06:79:53:5b:40:87:
         f9:22:30:3d:d1:72:98:7a:7a:4f:e6:fc:11:ef:a1:29:bb:9e:
         a6:af:9b:01:e3:dd:79:00:57:53:da:34:19:2f:5e:f5:d8:01:
         0d:bb:09:cc:ff:24:fd:73:88:9e:f0:c9:d3:0a:6a:4f:d7:e0:
         ac:48:97:9b:e0:36:ac:3a:29:1c:8d:e1:8d:85:c1:fb:bf:85:
         67:25:1b:05:2b:7c:6c:d2:19:ed:1d:6e:e9:fa:c1:bc:88:1a:
         2e:54:44:85:93:31:04:a2:36:c0:b3:4b:7e:bc:de:07:da:48:
         21:74:50:b4:e3:34:d6:ab:ee:54:97:42:19:1c:22:f5:e1:6b:
         5c:0d:25:e7:6f:1c:57:2b:ac:4a:42:0c:26:e0:ac:10:35:a6:
         10:2b:59:2f:f7:66:65:7f:b7:ca:0e:67:ba:94:32:92:5f:c3:
         46:af:af:79:2d:70:be:a0:65:de:e7:57:91:58:cc:bf:59:f0:
         47:23:49:09:d1:a4:e6:c7:58:04:25:49:b9:b8:16:bf:89:4b:
         a8:c0:79:4b
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRF
MTRGMkFDN0YwMjM4MTM3MDUyRUFBMzE1QzVCRDY0MzEzNDAyMjAeFw0yMjA2MDcx
MDEwMThaFw0yMzA2MDcwMzM0NDNaMDMxMTAvBgNVBAMTKEIxRTdFODFFQzMxMzk2
MTJBRDg4NDE2QThFNjZDOUQ0M0M5REEzMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNfvNlb6NHsOAZ/OLGBgIUJQkhDhPr8HjYGw4Q0+55+B8EeQgw
aJdVmxUcMvKccht409vHiTnRgLRqEtp0myzojOcO22b0jrKLcT0cyXV/5oU/Qijw
YVhU1SbCM0XFzS+alVuCgfiSNFB6z17dxf7vMQSfXMMRdrmszX3V6kdwrq3fksmL
na/9Hwvx335jNGfSRpzFSWgcDWW8LjwLCIQdZQQkhZPfCFfQvm/K5Y/LHl5gVFbJ
CWNDim2cY0Wsa/T4tIcv/uxMX9GW4a718oVl4IxccWayM8ZooOrzjEl/Y6cIRdRk
9p83NhIJaDEC7/NBWsZ6UqQCLB7UKJvBxHjfAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUsefoHsMTlhKtiEFqjmbJ1DydoxswHwYDVR0jBBgwFoAULeFPKsfwI4E3BS6q
MVxb1kMTQCIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTU4
Ny9MZUZQS3Nmd0k0RTNCUzZxTVZ4YjFrTVRRQ0kuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0xlRlBLc2Z3STRFM0JTNnFNVnhiMWtNVFFDSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE1ODcvc2Vmb0hzTVRsaEt0
aUVGcWptYkoxRHlkb3hzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQCFEAwDQYJKoZIhvcNAQELBQADggEBAK9YFoxsQ7NdVGmq65KM3GoBTz10
9fJFmiDUv1ZUAYU/++yF4YuVUhVCQ44deNf2PwZ5U1tAh/kiMD3Rcph6ek/m/BHv
oSm7nqavmwHj3XkAV1PaNBkvXvXYAQ27Ccz/JP1ziJ7wydMKak/X4KxIl5vgNqw6
KRyN4Y2Fwfu/hWclGwUrfGzSGe0dbun6wbyIGi5URIWTMQSiNsCzS3683gfaSCF0
ULTjNNar7lSXQhkcIvXha1wNJedvHFcrrEpCDCbgrBA1phArWS/3ZmV/t8oOZ7qU
MpJfw0avr3ktcL6gZd7nV5FYzL9Z8EcjSQnRpObHWAQlSbm4Fr+JS6jAeUs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org