Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2329/LG6sAZe3aZFA_sU1x5lZGliBMHo.roa
File:                     LG6sAZe3aZFA_sU1x5lZGliBMHo.roa (raw, json)
Hash identifier:          iXCp5gqTSA/LorJOrK8uT6GbUo5WsGidV9qRHcnh2lw=
Subject key identifier:   2C:6E:AC:01:97:B7:69:91:40:FE:C5:35:C7:99:59:1A:58:81:30:7A
Certificate issuer:       /CN=EC10C93455759C659D2BB819FB07FF7063CECC32
Certificate serial:       101B
Authority key identifier: EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/LG6sAZe3aZFA_sU1x5lZGliBMHo.roa
Signing time:             Fri 19 May 2023 05:53:45 +0000
ROA not before:           Fri 19 May 2023 05:53:45 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     138527
IP address blocks:        118.184.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4123 (0x101b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC10C93455759C659D2BB819FB07FF7063CECC32
        Validity
            Not Before: May 19 05:53:45 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=2C6EAC0197B7699140FEC535C799591A5881307A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:68:ec:f7:2c:d6:69:24:b5:f3:08:4b:b8:
                    2b:ee:9d:80:92:b9:2a:35:75:b2:06:62:7e:bc:0d:
                    2c:95:99:40:24:4f:bb:9f:84:0d:30:a4:de:3b:76:
                    c3:42:94:8f:82:eb:8a:06:90:a0:c2:9d:13:b3:80:
                    a3:70:fc:93:fc:a3:89:9a:ea:b8:f9:ad:1f:d0:80:
                    d3:fa:44:c5:f3:6b:09:09:2a:aa:cb:30:fe:bc:1c:
                    0e:a3:09:ff:f0:bb:8b:39:65:16:bd:9a:2a:74:ce:
                    8a:26:1f:e5:21:b7:c4:4c:60:bf:af:88:3f:0a:6d:
                    9b:33:1a:cc:a7:91:ad:9d:16:7e:5e:55:6c:34:58:
                    e6:b7:cd:a1:99:e2:97:f4:2b:95:12:b8:de:1b:35:
                    26:e3:2f:f3:75:22:b4:fb:db:db:44:f0:b5:21:1e:
                    c5:97:1c:6e:75:47:6f:4b:49:86:5c:7b:bf:9d:f2:
                    f2:6e:12:5e:46:95:a6:b2:67:ae:fa:40:cf:60:ac:
                    3e:8f:28:ea:27:32:c3:86:a8:39:33:7c:c5:57:1b:
                    56:09:23:83:e3:e7:ab:30:b0:74:70:75:3c:29:c8:
                    30:63:55:cf:93:22:0f:bd:16:34:52:38:32:ec:1c:
                    77:d6:32:e0:b7:62:1e:07:a8:ce:f4:33:df:2f:fa:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6E:AC:01:97:B7:69:91:40:FE:C5:35:C7:99:59:1A:58:81:30:7A
            X509v3 Authority Key Identifier:
                keyid:EC:10:C9:34:55:75:9C:65:9D:2B:B8:19:FB:07:FF:70:63:CE:CC:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7BDJNFV1nGWdK7gZ-wf_cGPOzDI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2329/LG6sAZe3aZFA_sU1x5lZGliBMHo.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.184.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:6a:6d:e2:21:7a:27:a3:25:13:9c:ae:70:f8:36:9d:a6:22:
         73:37:57:66:52:4c:04:62:6f:f7:cc:a9:d1:99:d4:a7:60:66:
         82:9a:3c:1b:18:f0:cd:a1:07:a8:62:70:32:c3:04:7f:a3:ef:
         36:ef:d0:8a:10:52:9b:45:b1:31:4d:fe:52:50:e9:41:03:a5:
         24:4b:9b:24:69:27:a9:f0:b0:20:4b:3a:a1:bc:16:7b:1a:6f:
         ce:91:08:d2:38:e6:fa:1e:fc:50:85:a8:dd:4d:6a:05:ed:90:
         fa:d1:7f:be:3b:1e:81:4d:40:48:c8:30:5e:88:34:9b:95:cb:
         6d:80:b6:64:cb:f1:4a:1d:aa:04:f5:85:a8:71:0d:93:82:5b:
         d6:2a:ff:b9:7d:da:4d:e3:b1:68:b4:14:4d:4e:14:b0:52:75:
         d5:47:92:f4:4d:47:4f:c0:cb:b5:8e:0b:11:1b:1b:42:c9:3e:
         db:c3:91:ed:66:42:82:81:b5:48:e3:c8:98:0a:4d:6a:2a:1d:
         5c:5d:0e:46:01:16:2e:12:6e:4c:ed:57:9b:93:be:68:c1:5c:
         7d:94:96:7f:1c:6a:ce:84:c8:d6:6a:26:97:10:44:b3:df:1e:
         18:7a:e7:e8:56:ba:f3:1a:e2:df:39:0d:0c:32:04:91:92:bc:
         a9:c2:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org