Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/9n_40mtqYNscfFuMdGOZvABrDsU.roa
File:                     9n_40mtqYNscfFuMdGOZvABrDsU.roa (raw, json)
Hash identifier:          ZC1KvaYHjNuJ8CG9z/lXtxYrOLnZYNWgLIcAhFRxsgs=
Subject key identifier:   F6:7F:F8:D2:6B:6A:60:DB:1C:7C:5B:8C:74:63:99:BC:00:6B:0E:C5
Certificate issuer:       /CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
Certificate serial:       04F5
Authority key identifier: D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/9n_40mtqYNscfFuMdGOZvABrDsU.roa
Signing time:             Tue 03 Aug 2021 17:48:14 +0000
ROA not before:           Tue 03 Aug 2021 17:48:14 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     131484
IP address blocks:        2406:d140::/32 maxlen: 48
                          2406:d140:8000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
        Validity
            Not Before: Aug  3 17:48:14 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F67FF8D26B6A60DB1C7C5B8C746399BC006B0EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:89:e1:64:65:df:15:c1:f8:01:1d:5d:66:
                    93:55:19:62:ff:aa:e9:4e:c5:e9:68:f2:eb:71:71:
                    64:cc:d3:3e:e3:b7:a8:2e:c0:6c:bf:fd:9d:5f:b5:
                    be:9d:69:2b:89:4d:b5:6b:79:49:25:51:c7:65:1e:
                    6f:7a:a7:ac:fd:b0:bf:3d:16:5f:d7:99:d6:d9:54:
                    d0:a3:d3:4b:df:be:df:5c:64:79:0a:40:63:2f:08:
                    1d:9a:c2:f6:d4:b5:18:da:0f:3e:98:6a:c4:a9:93:
                    69:09:fe:ae:3a:81:7c:eb:8f:42:0f:b2:e3:57:55:
                    67:d0:2d:b6:35:ae:0f:8b:d3:b7:a1:31:05:de:4e:
                    e5:35:c5:50:e5:cc:7b:ca:5b:9f:83:e4:5a:7d:0a:
                    7e:cf:d5:aa:b8:0a:1d:4b:ab:c8:1f:c2:b4:b2:66:
                    a9:62:d7:ce:7b:8a:1c:6c:3b:a7:56:ce:a0:64:84:
                    0d:3c:29:f3:d8:a0:cf:e6:98:b0:d5:e3:f8:d2:be:
                    90:92:ea:e0:11:a1:0a:c8:c1:08:cf:6f:2d:cc:f3:
                    e7:65:5e:2b:b3:d4:80:87:45:6f:b7:a9:91:ce:64:
                    e8:ae:af:6b:82:be:ed:e5:37:4b:7a:fb:31:c6:66:
                    3e:d0:76:02:0a:93:ae:77:92:90:83:13:3a:04:71:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7F:F8:D2:6B:6A:60:DB:1C:7C:5B:8C:74:63:99:BC:00:6B:0E:C5
            X509v3 Authority Key Identifier:
                keyid:D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/9n_40mtqYNscfFuMdGOZvABrDsU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d140::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:61:b7:6a:6b:64:c2:d1:5c:8d:ac:24:36:01:3e:25:71:f8:
         25:d8:bb:d3:ab:5a:dd:2c:83:0e:4d:fd:7c:f2:cb:a6:e9:99:
         2e:7a:79:32:72:c7:ff:6c:d3:e3:9f:00:63:0c:7b:c2:66:e5:
         31:86:27:6c:b9:0e:20:69:5a:a5:9b:1b:8d:a2:8f:9b:f7:ba:
         ad:58:e8:e6:af:6d:b4:15:00:2c:2c:84:0b:4e:fd:75:a9:f1:
         f7:f5:0b:ce:76:69:55:e5:d9:34:af:6e:69:b8:b8:0d:fe:25:
         bc:fb:84:e5:72:f8:b7:75:80:84:9c:65:3d:33:65:c1:47:94:
         b0:c7:60:14:a6:f9:b6:46:c7:a9:75:d4:73:21:67:09:be:67:
         fe:ec:31:57:59:92:2a:2f:4e:a3:75:b0:74:44:3c:2e:6c:c4:
         4f:f2:37:15:87:7f:d4:05:e0:ba:92:2c:3d:8d:6c:46:4d:10:
         c4:35:06:e0:6c:a9:8e:31:56:2c:d4:7f:0c:1b:c1:11:f0:a5:
         7a:70:00:20:78:28:ca:3b:1a:08:7d:2f:ae:37:61:e5:dd:23:
         e8:11:ba:ef:1f:28:5d:f8:8e:74:21:38:25:08:44:1b:07:77:
         d0:c2:72:0a:58:ba:7b:08:34:7e:94:44:8b:ac:18:1f:5c:e1:
         3e:78:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----