Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2578/VaueMyzXohnYXXYa83svFxsINyM.roa
File:                     VaueMyzXohnYXXYa83svFxsINyM.roa (raw, json)
Hash identifier:          vJ+BF4TksDseCrqI4OVWAVwy81OHRccf/qB8LcWxdx4=
Subject key identifier:   55:AB:9E:33:2C:D7:A2:19:D8:5D:76:1A:F3:7B:2F:17:1B:08:37:23
Certificate issuer:       /CN=1817D1D97E8A11B6D73F1C165EEAAE97483DFDE9
Certificate serial:       06ED
Authority key identifier: 18:17:D1:D9:7E:8A:11:B6:D7:3F:1C:16:5E:EA:AE:97:48:3D:FD:E9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GBfR2X6KEbbXPxwWXuqul0g9_ek.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/VaueMyzXohnYXXYa83svFxsINyM.roa
Signing time:             Thu 16 Mar 2023 05:46:21 +0000
ROA not before:           Thu 16 Mar 2023 05:46:21 +0000
ROA not after:            Sat 17 Feb 2024 02:46:59 +0000
asID:                     41717
IP address blocks:        103.99.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1817D1D97E8A11B6D73F1C165EEAAE97483DFDE9
        Validity
            Not Before: Mar 16 05:46:21 2023 GMT
            Not After : Feb 17 02:46:59 2024 GMT
        Subject: CN=55AB9E332CD7A219D85D761AF37B2F171B083723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:98:3f:aa:d6:d8:13:90:7a:ab:bf:03:4a:
                    47:6e:06:97:ee:67:46:26:e0:4f:1b:f9:95:c5:eb:
                    e6:99:e9:74:15:05:b0:6b:7d:d5:dd:66:be:0e:8f:
                    c1:11:ea:9d:12:ad:0d:ab:d4:2d:ad:c3:61:5c:36:
                    fd:0e:42:ca:ae:fd:98:1f:1c:37:95:66:4c:18:a7:
                    e0:10:da:84:8d:45:8a:ba:f9:46:06:60:d0:e0:c5:
                    87:ea:fc:35:4a:6e:87:27:a5:b4:3b:ad:14:ab:10:
                    a3:b4:8e:dd:7a:1f:11:44:fd:e5:40:94:07:8d:76:
                    f7:20:af:a6:a4:14:78:b1:ee:99:f9:66:22:6c:29:
                    00:46:4c:57:64:84:25:af:89:cf:0a:9e:bf:54:72:
                    4e:d2:96:37:58:63:24:9f:56:85:fb:69:86:d6:3d:
                    7f:5c:74:4c:92:25:c0:ba:92:5d:ad:d7:0d:eb:ee:
                    85:75:d2:f6:6a:d8:99:73:44:80:ba:7d:fa:b2:cc:
                    72:a8:93:a8:88:10:49:8f:93:29:90:35:9a:c1:96:
                    3c:51:b7:6a:a4:a5:f2:25:80:58:fe:ac:e0:9c:18:
                    ac:de:f3:12:da:12:25:b0:6c:40:41:06:08:f6:0b:
                    46:60:a9:99:53:bc:c7:cb:06:1f:78:c3:d7:e3:0c:
                    db:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AB:9E:33:2C:D7:A2:19:D8:5D:76:1A:F3:7B:2F:17:1B:08:37:23
            X509v3 Authority Key Identifier:
                keyid:18:17:D1:D9:7E:8A:11:B6:D7:3F:1C:16:5E:EA:AE:97:48:3D:FD:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/GBfR2X6KEbbXPxwWXuqul0g9_ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GBfR2X6KEbbXPxwWXuqul0g9_ek.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2578/VaueMyzXohnYXXYa83svFxsINyM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:b6:8d:5e:e6:9a:cf:77:61:d8:91:5b:05:f9:1b:cb:de:43:
         55:df:8a:47:b5:2d:c4:a7:20:12:6d:96:db:7f:62:51:61:53:
         6a:a3:a5:8d:5d:9b:6f:d3:2a:8c:74:55:02:64:42:c8:50:67:
         9c:ce:99:65:ad:01:2a:8a:fa:f8:c1:1c:16:54:fb:43:5d:d6:
         ed:5b:33:c1:aa:93:ab:6b:dc:32:69:d0:22:5b:da:03:dc:7b:
         48:36:b5:43:c9:94:04:7e:dd:2f:a6:f4:68:1a:a4:10:2b:52:
         16:8d:0f:b7:83:01:18:6b:13:74:92:da:74:cc:0f:09:9f:ac:
         ef:3e:ed:e7:a6:29:fd:5b:89:e5:39:4d:eb:74:b8:31:61:73:
         09:7c:9c:fc:d2:be:55:00:a8:c8:c1:93:61:d6:d2:88:6d:09:
         5b:14:77:43:be:f9:9b:5f:8b:29:67:92:cf:15:1d:ce:f7:ac:
         73:28:9e:1f:d9:38:ae:a3:04:07:30:24:ae:4c:4c:6b:6b:62:
         d3:93:72:55:c4:8b:f1:b4:89:49:43:58:a6:35:88:41:20:04:
         53:40:aa:90:c9:70:ca:64:2c:d1:43:73:50:22:92:48:50:77:
         36:a7:c2:43:97:fd:66:46:69:ef:2e:b8:e0:6a:d3:0d:da:d8:
         45:56:fa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org