Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/pNvG1MDxLL7Lym7aHjBNl1rJUN8.roa
File:                     pNvG1MDxLL7Lym7aHjBNl1rJUN8.roa (raw, json)
Hash identifier:          7e67A3CV7B0gnggECUpxBfEMAmMCn0kKWvyh+wlm4WM=
Subject key identifier:   A4:DB:C6:D4:C0:F1:2C:BE:CB:CA:6E:DA:1E:30:4D:97:5A:C9:50:DF
Certificate issuer:       /CN=C0239CFC4C87E5787FC5A1E36C4E3737939A083C
Certificate serial:       0702
Authority key identifier: C0:23:9C:FC:4C:87:E5:78:7F:C5:A1:E3:6C:4E:37:37:93:9A:08:3C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wCOc_EyH5Xh_xaHjbE43N5OaCDw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/pNvG1MDxLL7Lym7aHjBNl1rJUN8.roa
Signing time:             Mon 01 Nov 2021 12:13:15 +0000
ROA not before:           Mon 01 Nov 2021 12:13:15 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     139119
IP address blocks:        2406:a7c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0239CFC4C87E5787FC5A1E36C4E3737939A083C
        Validity
            Not Before: Nov  1 12:13:15 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=A4DBC6D4C0F12CBECBCA6EDA1E304D975AC950DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:01:65:a3:d7:db:d2:48:05:92:ad:7d:45:42:
                    31:61:1d:34:e5:3c:a2:98:36:d5:0c:57:d2:ee:12:
                    bc:56:0b:8f:82:5d:5a:c4:be:e2:fc:73:dc:54:04:
                    9d:4a:42:b3:1a:ac:79:0f:fa:4d:5f:61:9d:92:cc:
                    a1:12:72:9b:39:31:06:9d:ac:dc:a6:ac:b8:b0:5c:
                    8c:70:2c:bf:73:85:8b:58:6c:34:7a:3c:1a:d3:3c:
                    44:9e:56:ad:87:cb:90:64:10:d5:f3:9d:00:45:cf:
                    fa:d2:82:d4:b6:e1:3f:b3:bb:77:54:ac:55:cc:47:
                    37:d4:a2:d2:ba:70:b1:0d:0b:70:65:11:f7:4a:26:
                    2c:46:8d:69:28:21:e1:cc:26:de:f9:2e:d1:e4:b7:
                    72:91:d9:40:81:44:ac:1e:e8:70:ab:0e:c2:15:c5:
                    49:70:8d:bf:66:f7:cc:e4:57:20:e4:76:16:ad:bb:
                    96:ff:95:9f:15:01:88:e1:e7:16:04:00:09:a4:f6:
                    a0:97:1d:26:64:b3:fc:82:11:31:f7:f1:44:2e:34:
                    db:e4:7d:18:3e:c5:00:db:d8:46:a8:25:3c:33:8a:
                    f2:b4:d6:c5:c5:b5:67:56:95:fe:88:6b:d4:3b:1d:
                    0d:7b:1b:43:a1:96:84:30:fa:c3:6e:03:17:08:1f:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DB:C6:D4:C0:F1:2C:BE:CB:CA:6E:DA:1E:30:4D:97:5A:C9:50:DF
            X509v3 Authority Key Identifier:
                keyid:C0:23:9C:FC:4C:87:E5:78:7F:C5:A1:E3:6C:4E:37:37:93:9A:08:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/wCOc_EyH5Xh_xaHjbE43N5OaCDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wCOc_EyH5Xh_xaHjbE43N5OaCDw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/pNvG1MDxLL7Lym7aHjBNl1rJUN8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:86:93:03:21:65:2e:ed:36:e8:68:f5:66:f0:fe:53:f1:22:
         6c:57:2f:1a:9e:0b:80:2c:fd:08:25:80:6a:33:1f:2e:28:ce:
         56:0d:d0:1e:53:f6:f4:8b:3a:30:d0:82:8b:a6:b6:4d:3b:90:
         29:7a:c8:30:b6:67:d7:1a:7a:c7:97:7b:49:15:55:cd:87:70:
         9e:50:74:89:cb:e1:a3:f5:bc:ea:f9:26:68:85:9c:0a:52:54:
         28:34:ed:13:fc:67:83:42:aa:36:34:9d:91:a0:ad:7d:26:40:
         76:44:fd:15:77:c6:34:ab:5a:54:89:7d:19:1b:c8:4a:69:65:
         c7:36:1e:59:a1:0d:f4:30:e1:06:87:96:b9:3f:e5:12:dd:15:
         f4:06:da:f4:6a:ba:45:66:98:13:48:c9:4d:8f:7c:e6:57:fd:
         d6:a7:fe:be:86:0e:e9:0a:d3:a9:ab:b7:b5:c5:ce:43:71:6a:
         88:47:bc:0a:67:73:49:b3:1b:dd:6d:6b:f6:71:80:4e:d0:cb:
         b0:f5:5c:27:da:0e:1e:ca:29:32:ac:78:8d:c0:cd:64:72:7e:
         96:c3:37:ac:3e:b0:d3:59:e6:5c:7f:16:c4:75:ac:a6:ed:aa:
         71:90:eb:d7:6b:a0:d2:15:e5:b7:60:bb:5f:b5:a5:45:89:3f:
         2b:9d:de:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----