Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2930/qEMWdQNuZ0B7x6nb2pnxGA9JhOY.roa
File:                     qEMWdQNuZ0B7x6nb2pnxGA9JhOY.roa (raw, json)
Hash identifier:          2kwSZL87J4316c2EJo2owGPjoy5QZY4JLQNWCaNrVoc=
Subject key identifier:   A8:43:16:75:03:6E:67:40:7B:C7:A9:DB:DA:99:F1:18:0F:49:84:E6
Certificate issuer:       /CN=B6BB335CF607EEE20F458E3DA1DDA8E47FAF8BF9
Certificate serial:       06ED
Authority key identifier: B6:BB:33:5C:F6:07:EE:E2:0F:45:8E:3D:A1:DD:A8:E4:7F:AF:8B:F9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/trszXPYH7uIPRY49od2o5H-vi_k.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/qEMWdQNuZ0B7x6nb2pnxGA9JhOY.roa
Signing time:             Fri 12 Nov 2021 02:45:54 +0000
ROA not before:           Fri 12 Nov 2021 02:45:54 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     131482
IP address blocks:        103.143.132.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6BB335CF607EEE20F458E3DA1DDA8E47FAF8BF9
        Validity
            Not Before: Nov 12 02:45:54 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=A8431675036E67407BC7A9DBDA99F1180F4984E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:c9:f0:70:82:82:9b:ea:14:0d:ad:da:54:
                    ba:4d:4a:d6:ec:44:4f:f7:65:7e:25:03:23:b1:7a:
                    13:21:a6:4e:df:3f:fa:85:66:1a:e7:c7:de:1a:b5:
                    9b:01:a5:ba:3e:a2:24:f6:8a:b0:30:2b:05:be:15:
                    b1:9b:c2:49:12:21:99:fc:78:a6:a5:f8:a9:9e:18:
                    fb:44:d5:0e:fa:64:97:95:92:aa:09:47:5a:46:f2:
                    31:45:d7:dc:c2:5b:ae:f3:f9:f5:58:83:d0:cb:39:
                    5f:63:83:66:a8:3d:a7:c7:15:a9:a2:fd:93:fe:48:
                    d6:8d:bf:d6:55:d8:08:82:f1:b7:70:38:03:5c:63:
                    e9:1c:9d:e5:81:fd:05:34:ba:52:d7:09:22:be:7a:
                    84:b0:dc:92:57:ba:9d:d6:49:c0:8e:48:b9:af:80:
                    9f:03:bf:0e:77:76:75:dd:ce:9e:f1:a9:5c:b3:c9:
                    11:a1:57:82:1a:41:00:6a:a7:4c:e0:50:98:e3:c0:
                    e1:6a:66:b9:c0:79:17:b5:30:d5:a9:ee:00:75:51:
                    bf:33:98:95:87:9b:4b:ed:aa:95:e8:07:a6:e5:af:
                    50:1b:8a:30:18:b0:1d:95:4f:f9:81:04:cf:3e:dd:
                    55:54:c1:d9:ce:af:c1:a1:0c:10:11:7a:72:83:a3:
                    0e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:16:75:03:6E:67:40:7B:C7:A9:DB:DA:99:F1:18:0F:49:84:E6
            X509v3 Authority Key Identifier:
                keyid:B6:BB:33:5C:F6:07:EE:E2:0F:45:8E:3D:A1:DD:A8:E4:7F:AF:8B:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/trszXPYH7uIPRY49od2o5H-vi_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/trszXPYH7uIPRY49od2o5H-vi_k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/qEMWdQNuZ0B7x6nb2pnxGA9JhOY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:21:79:88:96:82:81:0a:98:9c:3c:c9:0f:f0:c1:12:aa:
         c9:9e:55:b6:b8:42:c7:16:a3:3a:24:95:8d:19:de:b3:47:3c:
         30:d5:f4:87:bd:4e:6d:63:5b:91:c3:de:5c:5c:0b:d5:f7:14:
         e3:35:e9:89:f0:cb:c5:fc:f0:5b:78:9f:40:89:c9:f6:3d:2d:
         bf:a8:61:1d:e2:99:1d:ec:48:ca:83:c4:dd:0b:2d:fa:c3:7d:
         11:a7:48:4d:5a:17:c6:59:d9:04:0e:9c:d2:84:2e:f3:e2:f2:
         12:43:1b:fc:62:29:79:09:d4:22:e0:77:df:5f:52:6a:d6:73:
         4f:56:c4:89:fb:87:fb:e9:cf:0a:4a:a1:63:c4:19:ea:96:7c:
         98:dc:97:a1:e2:a0:9e:ae:98:e6:86:e7:bc:f5:bc:eb:88:c7:
         c1:6e:ed:9d:c9:da:5b:40:93:c8:9b:69:ea:e4:66:d4:f0:b3:
         1e:c4:c3:9e:25:d1:b5:ba:ca:ad:20:05:e9:62:27:ad:68:8e:
         81:29:89:a1:cd:c7:73:07:6e:8c:cb:2d:c4:54:e0:7f:fc:b7:
         e8:c9:5b:93:ba:7a:87:ea:ad:83:8b:8f:d4:8f:4f:1e:c0:a8:
         7b:d9:02:4e:5a:b7:42:1d:09:cb:0c:f2:da:b5:ae:49:b9:99:
         ae:39:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----