Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2823/6PoDzV76VKyqj_H7jBZl0Zq1yOM.roa
File:                     6PoDzV76VKyqj_H7jBZl0Zq1yOM.roa (raw, json)
Hash identifier:          mMCRoXFC/hgyY8pDamGHrsng3jHWwJe2D3Fx6pX6AIM=
Subject key identifier:   E8:FA:03:CD:5E:FA:54:AC:AA:8F:F1:FB:8C:16:65:D1:9A:B5:C8:E3
Certificate issuer:       /CN=6647DAB6455116964FAC00012CCC83174D4E46E1
Certificate serial:       04
Authority key identifier: 66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/6PoDzV76VKyqj_H7jBZl0Zq1yOM.roa
Signing time:             Wed 01 Jun 2022 07:10:00 +0000
ROA not before:           Wed 01 Jun 2022 07:10:00 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     137730
IP address blocks:        2403:d9c0::/48 maxlen: 48
                          2403:d9c0:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6647DAB6455116964FAC00012CCC83174D4E46E1
        Validity
            Not Before: Jun  1 07:10:00 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=E8FA03CD5EFA54ACAA8FF1FB8C1665D19AB5C8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:bf:40:15:8d:31:49:12:b7:ce:f2:e9:e0:
                    c4:4e:df:5c:03:4b:64:61:9b:b5:de:52:3d:b4:2b:
                    38:69:8d:4a:1d:09:a5:18:b9:de:e5:0b:11:38:0a:
                    67:56:b8:a7:8e:90:1b:3f:35:e3:34:68:31:ec:63:
                    02:56:e8:9c:dc:7b:cd:9e:d6:7b:68:e6:74:f0:70:
                    01:49:70:80:44:cb:7d:0d:06:19:1b:77:ee:6e:3d:
                    ae:17:46:61:47:dc:f4:a6:92:89:4b:b5:cf:34:ab:
                    96:5c:a4:b2:e3:55:e2:6a:7e:94:ef:87:2d:e4:39:
                    c2:fd:9c:52:84:1b:70:c7:4b:5f:f4:3f:ed:be:51:
                    68:b5:d6:2b:65:80:2c:18:01:1d:ad:7e:a9:3f:db:
                    bf:be:89:27:58:12:58:36:16:1d:c8:b4:16:77:01:
                    20:e4:5f:61:d2:ac:5b:b2:3f:8f:b6:cf:74:90:7c:
                    c8:64:70:7f:f7:de:21:41:f4:b3:25:b3:ad:e5:d6:
                    a8:3e:6e:35:08:c7:02:0f:58:91:3a:97:7a:d1:28:
                    58:4a:89:50:8c:e9:85:12:c1:af:42:73:bd:30:06:
                    58:b6:e1:d5:9a:f5:77:46:67:c3:04:07:0e:3d:a2:
                    b0:6f:21:e1:74:6c:55:47:60:b8:fc:90:1d:94:81:
                    76:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FA:03:CD:5E:FA:54:AC:AA:8F:F1:FB:8C:16:65:D1:9A:B5:C8:E3
            X509v3 Authority Key Identifier:
                keyid:66:47:DA:B6:45:51:16:96:4F:AC:00:01:2C:CC:83:17:4D:4E:46:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/ZkfatkVRFpZPrAABLMyDF01ORuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZkfatkVRFpZPrAABLMyDF01ORuE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2823/6PoDzV76VKyqj_H7jBZl0Zq1yOM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:d9c0::/48
                  2403:d9c0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:92:93:b7:c3:9b:31:7f:63:e7:06:13:e3:21:78:fa:64:bd:
         ae:38:ad:d2:6e:e4:be:44:af:12:b8:ce:b2:ce:46:50:2e:7b:
         c1:2f:2d:f2:0c:ec:5d:67:81:b2:25:01:c9:92:14:ed:26:8c:
         ab:f3:09:27:26:1a:8f:bf:a8:df:88:5f:55:db:7e:ac:01:c6:
         38:b7:3f:61:26:21:fb:72:a1:ec:f8:17:9f:53:d2:38:4e:a0:
         79:a9:62:59:a8:09:8f:5b:3a:79:b6:a6:ca:39:3c:b7:d9:44:
         ff:3b:62:d2:23:f0:2b:72:95:3b:56:c7:69:bd:49:8e:a0:46:
         5e:c1:17:5c:65:24:ce:04:0f:ef:40:a5:ca:3a:1e:2d:96:9d:
         43:a4:da:0d:64:2e:7e:50:aa:0b:6e:32:6c:7f:df:85:26:ac:
         01:68:e2:54:24:9f:b2:14:bb:96:46:5f:b5:06:3c:ab:49:91:
         4d:4f:6d:0c:32:e7:ab:36:ee:30:d0:ed:1e:ba:88:46:cb:8b:
         af:b2:e6:0d:d2:cb:38:44:0c:56:55:50:28:7a:b3:90:33:24:
         43:ce:a7:d7:1a:21:c5:52:61:99:c7:19:63:8c:db:a7:ce:84:
         58:6d:64:71:52:96:ef:37:09:45:b9:b0:bf:f2:c4:ca:b6:c1:
         8b:4f:da:34
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NjQ3
REFCNjQ1NTExNjk2NEZBQzAwMDEyQ0NDODMxNzRENEU0NkUxMB4XDTIyMDYwMTA3
MTAwMFoXDTIzMDYwMTA2NTg1NFowMzExMC8GA1UEAxMoRThGQTAzQ0Q1RUZBNTRB
Q0FBOEZGMUZCOEMxNjY1RDE5QUI1QzhFMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL7dv0AVjTFJErfO8ungxE7fXANLZGGbtd5SPbQrOGmNSh0JpRi5
3uULETgKZ1a4p46QGz814zRoMexjAlbonNx7zZ7We2jmdPBwAUlwgETLfQ0GGRt3
7m49rhdGYUfc9KaSiUu1zzSrllyksuNV4mp+lO+HLeQ5wv2cUoQbcMdLX/Q/7b5R
aLXWK2WALBgBHa1+qT/bv76JJ1gSWDYWHci0FncBIORfYdKsW7I/j7bPdJB8yGRw
f/feIUH0syWzreXWqD5uNQjHAg9YkTqXetEoWEqJUIzphRLBr0JzvTAGWLbh1Zr1
d0ZnwwQHDj2isG8h4XRsVUdguPyQHZSBdjsCAwEAAaOCAf8wggH7MB0GA1UdDgQW
BBTo+gPNXvpUrKqP8fuMFmXRmrXI4zAfBgNVHSMEGDAWgBRmR9q2RVEWlk+sAAEs
zIMXTU5G4TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yODIz
L1prZmF0a1ZSRnBaUHJBQUJMTXlERjAxT1J1RS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvWmtmYXRrVlJGcFpQckFBQkxNeURGMDFPUnVFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjgyMy82UG9EelY3NlZLeXFq
X0g3akJabDBacTF5T00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjAS
AwcAJAPZwAAAAwcAJAPZwAACMA0GCSqGSIb3DQEBCwUAA4IBAQCUkpO3w5sxf2Pn
BhPjIXj6ZL2uOK3SbuS+RK8SuM6yzkZQLnvBLy3yDOxdZ4GyJQHJkhTtJoyr8wkn
JhqPv6jfiF9V236sAcY4tz9hJiH7cqHs+BefU9I4TqB5qWJZqAmPWzp5tqbKOTy3
2UT/O2LSI/ArcpU7VsdpvUmOoEZewRdcZSTOBA/vQKXKOh4tlp1DpNoNZC5+UKoL
bjJsf9+FJqwBaOJUJJ+yFLuWRl+1BjyrSZFNT20MMuerNu4w0O0euohGy4uvsuYN
0ss4RAxWVVAoerOQMyRDzqfXGiHFUmGZxxljjNunzoRYbWRxUpbvNwlFubC/8sTK
tsGLT9o0
-----END CERTIFICATE-----