Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2930/v9sJWtbAkQ8SuhIsYYPktVDhUDY.roa
File:                     v9sJWtbAkQ8SuhIsYYPktVDhUDY.roa (raw, json)
Hash identifier:          5ILXO6yhoNeOSS5AqVafR/7rRbcQsevi/GI0RUE0MTw=
Subject key identifier:   BF:DB:09:5A:D6:C0:91:0F:12:BA:12:2C:61:83:E4:B5:50:E1:50:36
Certificate issuer:       /CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
Certificate serial:       139B
Authority key identifier: B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/v9sJWtbAkQ8SuhIsYYPktVDhUDY.roa
Signing time:             Fri 19 May 2023 05:55:26 +0000
ROA not before:           Fri 19 May 2023 05:55:26 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     131482
IP address blocks:        103.143.132.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5019 (0x139b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
        Validity
            Not Before: May 19 05:55:26 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=BFDB095AD6C0910F12BA122C6183E4B550E15036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:2e:7d:84:36:55:79:66:e8:7d:9f:e8:a8:
                    d2:84:d0:f3:7f:14:2c:f6:21:7c:6c:94:0d:12:23:
                    7c:9a:09:6c:13:ce:ac:f1:74:f4:f3:9e:80:fe:4e:
                    3a:e8:c5:e6:67:86:a1:11:7f:10:c7:6b:49:a2:09:
                    df:9c:a9:21:70:6e:6f:8c:53:43:1c:12:cd:50:e1:
                    e2:0f:53:a8:9f:d3:82:6f:b4:39:35:d1:7a:56:ba:
                    cc:b1:61:d7:be:0b:94:a4:06:80:00:f4:70:4a:14:
                    17:bb:a8:7b:a4:c2:8c:2d:01:ce:ce:29:ad:04:96:
                    5d:c3:37:c1:c6:a8:90:25:00:62:6c:00:0b:10:b9:
                    38:40:5d:b2:08:4c:bf:bf:45:12:68:2d:ea:5c:60:
                    05:9f:24:20:76:40:50:d4:ed:7a:a4:a1:fc:ae:04:
                    dd:a7:99:0e:e6:ab:2d:f6:8a:b5:51:33:90:6b:b9:
                    01:d9:98:36:40:10:48:d6:28:84:c3:0d:5c:2a:17:
                    db:12:88:5d:fb:fd:ad:71:ab:f9:c0:07:7c:88:09:
                    9f:e9:ed:3a:15:59:e6:85:c5:b0:25:d5:8b:cb:3e:
                    c1:2c:03:80:ee:a2:b1:c6:cb:f1:59:c4:13:15:a8:
                    11:a8:c4:67:39:a5:33:1c:31:37:64:5f:6a:07:36:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DB:09:5A:D6:C0:91:0F:12:BA:12:2C:61:83:E4:B5:50:E1:50:36
            X509v3 Authority Key Identifier:
                keyid:B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/v9sJWtbAkQ8SuhIsYYPktVDhUDY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:e4:e2:61:13:98:6b:7b:05:db:da:3e:cc:07:2b:fd:b4:25:
         7e:f0:ab:f7:0c:12:b4:b4:1a:0f:7d:09:6a:e9:48:2c:0d:f2:
         55:6b:d8:de:05:37:5d:d1:87:7d:ec:16:d4:c3:7a:2c:f2:7b:
         07:f2:d7:b1:9d:78:d3:c8:72:17:e1:0d:2e:bf:9d:cd:38:1a:
         83:2a:3a:44:12:8b:02:eb:9f:fb:44:5c:c1:39:6d:36:07:f0:
         5c:72:e5:5a:50:b3:4c:43:f9:f8:ab:f0:48:c2:6a:c3:3e:fb:
         33:8b:9d:b8:06:59:73:2b:a4:6a:06:b8:d3:dd:d7:db:93:b7:
         e5:28:39:b1:bd:84:7b:92:e3:d4:e1:c7:10:42:5a:42:60:42:
         f9:d7:0c:4b:a9:ef:0a:f8:38:3f:03:15:5e:ba:c2:b7:c4:03:
         36:f5:06:54:2a:1e:37:1a:b5:b6:fb:29:14:67:74:b8:b7:1a:
         45:22:99:17:a9:16:65:3b:54:b5:4f:e1:98:1e:cd:84:bf:ef:
         9d:02:9e:7a:cc:b1:b7:cc:72:d7:6f:ef:c4:86:70:41:aa:b5:
         2e:b6:7b:c9:26:91:c8:f8:53:0e:f2:17:04:ed:e0:b5:37:3d:
         d3:e2:5c:dc:cc:06:40:9c:9f:44:a6:e1:d9:61:47:d8:b6:4a:
         b7:84:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----