Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2930/497G07BstwlLDoKIsECLCj8Slic.roa
File:                     497G07BstwlLDoKIsECLCj8Slic.roa (raw, json)
Hash identifier:          3jSS3KANjSDzDtFmREwk+n/Dhxg7PtJjWV9YTkPF7NY=
Subject key identifier:   E3:DE:C6:D3:B0:6C:B7:09:4B:0E:82:88:B0:40:8B:0A:3F:12:96:27
Certificate issuer:       /CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
Certificate serial:       139D
Authority key identifier: B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/497G07BstwlLDoKIsECLCj8Slic.roa
Signing time:             Fri 19 May 2023 05:55:26 +0000
ROA not before:           Fri 19 May 2023 05:55:26 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     131530
IP address blocks:        103.143.132.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5021 (0x139d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
        Validity
            Not Before: May 19 05:55:26 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=E3DEC6D3B06CB7094B0E8288B0408B0A3F129627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:c0:44:b8:c5:db:d3:af:69:fa:98:83:fe:
                    12:bb:eb:06:37:0b:5c:77:87:9c:e7:e4:9d:61:cf:
                    e5:dc:ba:11:5b:83:c9:20:f5:ef:dc:ad:46:d0:68:
                    30:54:36:9e:0b:aa:f1:89:7c:a5:83:2d:da:40:e6:
                    b4:1a:3a:57:4e:5d:cb:5a:e6:6a:ec:02:29:b2:bc:
                    93:3a:68:9f:bf:fa:bb:ea:6a:f1:f3:34:c2:c6:b0:
                    13:c5:03:27:b3:70:61:59:00:4e:a7:a7:75:ae:a9:
                    23:8b:47:25:24:c0:14:d8:bc:d9:19:34:93:13:8d:
                    14:05:6d:29:c8:13:cb:80:3e:a7:39:c8:6c:18:f0:
                    af:33:26:dd:a0:d0:af:eb:20:38:db:66:02:0e:a2:
                    44:d8:e9:42:bd:6c:fa:3f:35:44:d8:1c:83:55:95:
                    c3:9b:9b:9e:d3:43:c4:7e:27:05:34:11:9a:95:2a:
                    25:9f:d2:8e:d0:95:59:24:a7:db:da:2e:2f:f5:70:
                    03:4b:db:97:97:03:e0:1d:9e:27:1b:e3:cc:f6:48:
                    78:6b:2e:71:cc:c8:67:a8:48:49:ea:a3:1f:14:75:
                    cf:c3:d8:8a:69:3a:8e:4d:85:4b:09:c2:4e:15:01:
                    bf:6d:59:d4:0e:f9:0a:73:47:a4:92:1b:28:a2:fd:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DE:C6:D3:B0:6C:B7:09:4B:0E:82:88:B0:40:8B:0A:3F:12:96:27
            X509v3 Authority Key Identifier:
                keyid:B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/497G07BstwlLDoKIsECLCj8Slic.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:e6:43:fb:ad:b1:0e:ec:bc:ba:6f:81:30:72:0e:87:cb:88:
         c5:18:47:a0:ba:ff:e9:4e:28:c8:a2:df:7d:a9:eb:5a:cb:33:
         9a:80:d6:3b:2a:49:c5:fa:88:c7:dc:b4:d4:d1:3a:62:5a:94:
         7e:28:38:75:07:54:39:a1:00:03:27:7f:84:f8:ab:c0:c5:ae:
         07:d9:88:0d:c5:2d:e6:dd:9b:b3:99:27:b0:7c:76:91:02:e9:
         6e:b3:fa:43:a5:ad:d7:7c:46:3e:04:a5:c4:ce:09:a6:4a:ec:
         ae:19:3e:5f:18:8d:c4:74:c3:9b:4a:f7:04:b9:33:2c:42:51:
         e4:ba:9b:9f:cb:11:57:57:7e:30:87:0d:9b:e4:c9:2e:34:26:
         58:d2:4e:6d:27:60:a6:51:8f:60:84:15:82:c0:9e:83:f0:06:
         c8:18:0a:8e:fe:ff:d0:cc:ab:f7:d4:79:09:b9:fb:93:cf:f9:
         65:0b:48:8a:ef:a8:2e:ee:bf:f6:e5:f8:d0:f1:6e:1e:98:41:
         95:0c:01:d2:fe:25:f3:27:81:ee:91:77:1b:5a:04:62:b9:ea:
         cc:84:51:72:78:5d:6f:cb:bc:16:4d:33:d5:5c:90:d5:e3:30:
         86:ed:ca:b8:ea:78:a8:ec:f3:d2:5c:e4:34:92:fe:71:42:6e:
         a7:00:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----