Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2776/GTmgii8Etc2R7kyvAYvtmehja60.roa
File:                     GTmgii8Etc2R7kyvAYvtmehja60.roa (raw, json)
Hash identifier:          ebW+XAZaV/q5ttPYNcSSlz0+ro0NlP+bjZp2R0TvsSw=
Subject key identifier:   19:39:A0:8A:2F:04:B5:CD:91:EE:4C:AF:01:8B:ED:99:E8:63:6B:AD
Certificate issuer:       /CN=75CDE13C83CCF31AB75DDDBD3E40007DB9B136DB
Certificate serial:       03
Authority key identifier: 75:CD:E1:3C:83:CC:F3:1A:B7:5D:DD:BD:3E:40:00:7D:B9:B1:36:DB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dc3hPIPM8xq3Xd29PkAAfbmxNts.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/GTmgii8Etc2R7kyvAYvtmehja60.roa
Signing time:             Wed 01 Jun 2022 07:09:48 +0000
ROA not before:           Wed 01 Jun 2022 07:09:48 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     63566
IP address blocks:        103.252.248.0/24 maxlen: 24
                          122.11.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CDE13C83CCF31AB75DDDBD3E40007DB9B136DB
        Validity
            Not Before: Jun  1 07:09:48 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=1939A08A2F04B5CD91EE4CAF018BED99E8636BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:63:b0:62:7a:e3:a1:d7:45:d9:fb:40:a1:
                    41:59:bc:68:73:6e:2e:3c:31:46:49:1c:6e:1f:85:
                    02:a2:44:2d:c7:2d:13:d5:22:95:39:34:62:89:f2:
                    8d:1a:85:a8:f7:9e:da:b4:46:eb:8a:88:9f:c2:2f:
                    e4:06:81:68:4f:86:69:1e:55:1f:9d:47:a7:83:68:
                    c2:f5:08:f1:a0:0e:70:cb:c2:b2:c5:d8:5d:a0:1b:
                    34:94:dd:09:48:36:79:0d:ca:bf:1c:86:93:78:60:
                    a9:3f:fd:b1:3b:0a:dd:47:ef:1c:9a:c1:77:ef:f3:
                    e1:b6:45:72:2c:65:55:0b:bf:3c:21:f2:b9:56:f2:
                    41:3a:b3:fa:ea:bb:a2:4d:02:97:87:8b:d5:e3:f2:
                    f0:f3:26:55:d4:5b:ae:88:16:01:f3:3f:5f:f8:68:
                    04:37:ef:d8:59:41:25:0a:8b:0b:93:f0:a8:e1:f8:
                    86:b7:f6:13:73:9a:f3:0c:04:3d:c8:19:f7:cb:75:
                    01:30:bd:eb:18:16:e0:25:a7:11:84:9a:89:79:30:
                    1d:64:1e:0f:16:60:5c:43:af:5d:1e:80:a1:56:ad:
                    56:9c:bf:99:55:98:60:88:d6:3c:ad:ef:5f:44:41:
                    f3:83:10:c9:ee:05:2a:99:a2:a1:46:e2:90:a4:32:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:39:A0:8A:2F:04:B5:CD:91:EE:4C:AF:01:8B:ED:99:E8:63:6B:AD
            X509v3 Authority Key Identifier:
                keyid:75:CD:E1:3C:83:CC:F3:1A:B7:5D:DD:BD:3E:40:00:7D:B9:B1:36:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/dc3hPIPM8xq3Xd29PkAAfbmxNts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dc3hPIPM8xq3Xd29PkAAfbmxNts.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2776/GTmgii8Etc2R7kyvAYvtmehja60.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.248.0/24
                  122.11.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c7:bd:a7:ae:1c:20:da:5f:91:2c:14:7a:f4:2e:77:8f:66:
         8f:50:c6:d0:eb:96:8a:cb:a9:8c:2b:ab:28:cf:16:d6:20:a0:
         5f:e5:8e:8f:ad:ea:69:ff:b1:ae:05:2a:32:b7:48:78:fe:8a:
         11:ce:9e:fb:68:0a:07:58:cf:83:53:30:96:a8:d0:c5:39:73:
         18:e8:85:86:21:04:87:f3:1a:6d:c4:ea:0a:0b:6c:04:43:9e:
         35:d0:0f:71:b8:a8:15:be:d2:0b:6f:97:dc:f2:95:e2:78:92:
         5c:e1:35:bd:47:f3:de:0d:76:1c:ff:86:c4:9a:df:f0:af:a8:
         43:a0:40:78:7d:ee:59:be:d5:91:64:58:48:60:94:62:8d:3a:
         8b:38:39:27:df:02:70:47:74:62:6b:06:c3:e8:3b:0c:67:68:
         12:3b:8d:f3:0a:f5:b2:fc:ba:88:cd:3b:db:d7:d4:f4:47:8a:
         71:5b:93:11:98:ef:05:fb:26:d4:a5:60:67:c0:5b:d0:9f:e4:
         50:92:95:36:1d:51:61:f8:16:49:38:6c:de:59:5a:7b:5e:2d:
         9c:86:98:99:e8:e6:bb:6a:aa:72:8c:58:60:6c:9d:83:31:94:
         7f:89:57:55:93:53:66:ed:94:21:6d:13:94:b8:b0:e7:64:b5:
         d3:c5:32:ae
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NUNE
RTEzQzgzQ0NGMzFBQjc1REREQkQzRTQwMDA3REI5QjEzNkRCMB4XDTIyMDYwMTA3
MDk0OFoXDTIzMDYwMTA2NTg1NFowMzExMC8GA1UEAxMoMTkzOUEwOEEyRjA0QjVD
RDkxRUU0Q0FGMDE4QkVEOTlFODYzNkJBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKaDY7BieuOh10XZ+0ChQVm8aHNuLjwxRkkcbh+FAqJELcctE9Ui
lTk0YonyjRqFqPee2rRG64qIn8Iv5AaBaE+GaR5VH51Hp4NowvUI8aAOcMvCssXY
XaAbNJTdCUg2eQ3KvxyGk3hgqT/9sTsK3UfvHJrBd+/z4bZFcixlVQu/PCHyuVby
QTqz+uq7ok0Cl4eL1ePy8PMmVdRbrogWAfM/X/hoBDfv2FlBJQqLC5PwqOH4hrf2
E3Oa8wwEPcgZ98t1ATC96xgW4CWnEYSaiXkwHWQeDxZgXEOvXR6AoVatVpy/mVWY
YIjWPK3vX0RB84MQye4FKpmioUbikKQyYNMCAwEAAaOCAfkwggH1MB0GA1UdDgQW
BBQZOaCKLwS1zZHuTK8Bi+2Z6GNrrTAfBgNVHSMEGDAWgBR1zeE8g8zzGrdd3b0+
QAB9ubE22zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzc2
L2RjM2hQSVBNOHhxM1hkMjlQa0FBZmJteE50cy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZGMzaFBJUE04eHEzWGQyOVBrQUFmYm14TnRzLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjc3Ni9HVG1naWk4RXRjMlI3
a3l2QVl2dG1laGphNjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM
AwQAZ/z4AwQAegsAMA0GCSqGSIb3DQEBCwUAA4IBAQA9x72nrhwg2l+RLBR69C53
j2aPUMbQ65aKy6mMK6sozxbWIKBf5Y6Prepp/7GuBSoyt0h4/ooRzp77aAoHWM+D
UzCWqNDFOXMY6IWGIQSH8xptxOoKC2wEQ5410A9xuKgVvtILb5fc8pXieJJc4TW9
R/PeDXYc/4bEmt/wr6hDoEB4fe5ZvtWRZFhIYJRijTqLODkn3wJwR3RiawbD6DsM
Z2gSO43zCvWy/LqIzTvb19T0R4pxW5MRmO8F+ybUpWBnwFvQn+RQkpU2HVFh+BZJ
OGzeWVp7Xi2chpiZ6Oa7aqpyjFhgbJ2DMZR/iVdVk1Nm7ZQhbROUuLDnZLXTxTKu
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org