Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2291/N8Ah9wU8G0IXfIzwP0HsWY9jv1Y.roa
File:                     N8Ah9wU8G0IXfIzwP0HsWY9jv1Y.roa (raw, json)
Hash identifier:          sVg7NuHUkyRx3rCmkvqJ8uz8jK+XIkanWv5bLIcN5Y8=
Subject key identifier:   37:C0:21:F7:05:3C:1B:42:17:7C:8C:F0:3F:41:EC:59:8F:63:BF:56
Certificate issuer:       /CN=7CFA334D393BC9150FC273713C1535CD301A741E
Certificate serial:       03
Authority key identifier: 7C:FA:33:4D:39:3B:C9:15:0F:C2:73:71:3C:15:35:CD:30:1A:74:1E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPozTTk7yRUPwnNxPBU1zTAadB4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/N8Ah9wU8G0IXfIzwP0HsWY9jv1Y.roa
Signing time:             Wed 03 Mar 2021 08:02:27 +0000
ROA not before:           Wed 03 Mar 2021 08:02:27 +0000
ROA not after:            Thu 03 Mar 2022 07:56:04 +0000
asID:                     133111
IP address blocks:        42.201.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFA334D393BC9150FC273713C1535CD301A741E
        Validity
            Not Before: Mar  3 08:02:27 2021 GMT
            Not After : Mar  3 07:56:04 2022 GMT
        Subject: CN=37C021F7053C1B42177C8CF03F41EC598F63BF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:ce:5b:62:12:9a:37:04:c3:32:d3:32:ce:
                    27:dd:56:28:82:89:7c:14:01:49:b8:5f:50:f6:21:
                    7b:7e:34:0d:28:f2:07:dd:91:98:ec:15:8b:88:be:
                    8d:d5:e1:34:02:eb:d4:fb:ed:4c:6c:55:c6:9d:5a:
                    03:3c:73:84:8e:0d:af:33:23:97:75:08:89:5a:c4:
                    41:0e:5a:28:cb:e4:7a:d8:f3:ff:65:1a:9d:73:e2:
                    2d:4a:b8:7c:9a:45:64:42:a3:8e:ca:a3:6b:e2:fd:
                    97:75:33:7f:73:43:0e:ad:aa:17:41:2a:14:c9:37:
                    ec:f9:8d:69:50:fe:d0:0c:e8:4a:16:73:ab:00:4e:
                    62:74:e0:a9:fb:a7:27:76:81:68:11:62:2f:8b:67:
                    13:fb:99:a4:e7:78:08:f9:62:83:15:a9:e2:ae:b0:
                    22:a4:2a:4e:04:ee:5a:38:bf:29:0a:dc:af:1f:a7:
                    df:8f:86:76:b3:65:b0:d9:74:92:30:5d:81:6f:69:
                    16:b9:80:74:86:0d:5c:d2:10:cc:29:5c:07:3b:5c:
                    bd:40:63:74:5a:40:90:ef:27:34:eb:82:36:2a:03:
                    c9:ce:03:ca:53:23:77:cc:46:8b:15:f3:88:ae:26:
                    33:8c:eb:d6:85:6d:fe:8d:f7:29:81:94:6d:48:6f:
                    12:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C0:21:F7:05:3C:1B:42:17:7C:8C:F0:3F:41:EC:59:8F:63:BF:56
            X509v3 Authority Key Identifier:
                keyid:7C:FA:33:4D:39:3B:C9:15:0F:C2:73:71:3C:15:35:CD:30:1A:74:1E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/fPozTTk7yRUPwnNxPBU1zTAadB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fPozTTk7yRUPwnNxPBU1zTAadB4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2291/N8Ah9wU8G0IXfIzwP0HsWY9jv1Y.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.201.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:60:fa:37:95:4f:a0:c3:0f:c8:d7:08:51:40:49:89:20:74:
         d4:18:f9:9b:25:f9:e7:88:89:43:a4:04:e8:87:65:b1:fb:5c:
         19:ec:c3:e2:89:20:04:d9:f0:78:b9:58:f0:63:a7:86:1a:de:
         10:e2:3e:1a:e7:96:b3:3d:b4:16:d5:9d:c3:cd:99:e3:f5:08:
         f2:2d:97:66:84:97:d1:a2:f4:9a:c7:af:95:a6:c2:34:f1:23:
         46:80:d1:70:3f:33:13:a3:4a:09:f0:7a:e5:82:05:8d:01:cc:
         e2:9c:33:ff:2e:d3:5a:42:9a:bb:eb:78:ae:f8:6c:cc:35:97:
         6f:2a:bc:45:43:21:33:31:0c:58:51:90:f6:cc:44:31:ce:6c:
         fd:cb:4b:ea:41:6b:a1:71:5f:39:a6:c6:54:f4:9d:4a:79:a4:
         34:40:b9:79:bb:a5:f9:fb:37:be:a7:70:ef:e0:2a:04:b9:f0:
         ba:cc:a2:30:20:e4:41:de:77:2c:6f:6e:65:93:23:0b:44:15:
         00:9e:87:7f:d7:d3:0e:41:9d:22:d9:d2:65:8a:90:2c:56:28:
         05:be:80:ad:4a:6b:c4:6f:58:c0:53:f2:15:04:7e:0e:ec:db:
         40:8d:ef:4e:81:94:3e:4b:c9:43:2a:97:1a:ee:61:54:e1:42:
         b3:86:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org