Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/92z3v5fJfVXNLp0dzHXIuy37Pns.roa
File:                     92z3v5fJfVXNLp0dzHXIuy37Pns.roa (raw, json)
Hash identifier:          lFHiKYC+si8n/bt/bCKDB9nBj6zm91iTeVvTifVdw+s=
Subject key identifier:   F7:6C:F7:BF:97:C9:7D:55:CD:2E:9D:1D:CC:75:C8:BB:2D:FB:3E:7B
Certificate issuer:       /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial:       07DC
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/92z3v5fJfVXNLp0dzHXIuy37Pns.roa
Signing time:             Tue 13 Jun 2023 15:24:03 +0000
ROA not before:           Tue 13 Jun 2023 15:24:03 +0000
ROA not after:            Fri 07 Jun 2024 02:16:11 +0000
asID:                     137443
IP address blocks:        219.234.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
        Validity
            Not Before: Jun 13 15:24:03 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=F76CF7BF97C97D55CD2E9D1DCC75C8BB2DFB3E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:35:67:3e:3e:d2:2e:9f:f4:60:13:e3:91:
                    e5:da:e9:e8:91:e2:0d:1c:6f:11:44:07:33:cc:7b:
                    7f:8b:11:8d:ca:79:98:5d:cd:58:2f:d1:90:66:06:
                    f4:70:ae:1a:6b:05:3e:66:65:67:f4:8e:2b:29:12:
                    7d:2e:fb:ae:03:1f:7e:6c:62:a6:0e:42:76:39:a7:
                    ef:21:51:d5:84:80:de:e9:98:88:7c:55:e0:a3:7a:
                    a2:67:8e:df:3f:69:05:7c:be:7d:5b:33:93:dc:af:
                    b5:8a:8d:fc:b0:99:9f:30:6e:dc:c4:32:c0:74:1d:
                    8a:a5:a1:6f:86:99:57:f6:c8:55:c9:02:48:ee:ea:
                    9d:03:20:dc:75:a9:26:7d:82:1f:bb:07:9b:44:fd:
                    53:8b:10:8f:72:3f:c5:a3:8b:b8:8e:d0:af:8a:ff:
                    1c:37:45:3c:d7:ef:ab:04:a1:14:6b:1d:65:af:5d:
                    fa:7e:a1:52:9a:91:45:9e:af:01:00:e0:0e:10:c1:
                    ae:92:af:11:c1:d9:f7:f4:c0:b6:d9:f3:69:97:ec:
                    c5:3d:66:8d:28:dc:26:e3:f1:b1:b7:57:82:6e:79:
                    1f:0c:b6:19:30:ba:56:fd:53:42:21:02:68:34:18:
                    cf:d7:8e:2f:c9:d0:a1:b0:44:50:ac:68:ff:83:d4:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:F7:BF:97:C9:7D:55:CD:2E:9D:1D:CC:75:C8:BB:2D:FB:3E:7B
            X509v3 Authority Key Identifier:
                keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/92z3v5fJfVXNLp0dzHXIuy37Pns.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.234.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:8c:eb:65:28:73:ff:7f:63:3e:72:42:82:4b:62:aa:e0:3b:
         af:28:d1:9e:9b:13:9f:f6:80:d6:c7:25:b0:47:7b:5f:a8:9f:
         fe:bb:a1:4d:5e:2a:7a:28:57:dd:61:1e:8d:0e:84:a2:25:46:
         6b:2f:aa:40:7c:21:ec:ed:99:b0:af:7c:cd:bd:06:06:6c:e0:
         dd:f3:9c:b7:07:2d:79:d6:55:e5:b4:26:f6:18:3d:7d:d6:1f:
         ec:e6:76:8f:1f:5a:d8:30:56:50:50:e7:d5:59:73:f8:9b:b8:
         8f:36:4a:69:9c:f7:12:f0:c4:54:c3:71:e4:00:7f:9e:81:2d:
         7e:80:bf:43:9c:70:0a:17:5a:3a:04:6a:36:dc:94:52:58:ef:
         08:dd:f0:d6:d2:5c:bd:5e:91:07:6d:ab:81:06:75:e8:e2:c7:
         67:71:d3:5c:64:d9:6c:83:f1:f3:c5:9d:ca:19:79:e9:5c:ba:
         b5:9b:27:05:74:10:f2:ad:b4:b0:54:49:a3:ba:b6:4f:d3:2d:
         bf:7a:af:f9:13:77:b1:e8:60:86:34:75:7f:c7:39:ee:14:3f:
         57:6f:c8:49:4c:76:ea:2d:80:b8:37:68:2a:4b:21:b0:40:bd:
         af:6b:46:60:2e:de:50:e7:5a:5b:2a:4a:60:f3:09:3b:28:6c:
         cf:74:07:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org