Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/ChS6iktt8OXSTpuJqgDrBkHcOos.roa
File:                     ChS6iktt8OXSTpuJqgDrBkHcOos.roa (raw, json)
Hash identifier:          0v4M+4Y7P/7zAjJJIpy+tSRDPnpZCMTaopYAZYyL7t4=
Subject key identifier:   0A:14:BA:8A:4B:6D:F0:E5:D2:4E:9B:89:AA:00:EB:06:41:DC:3A:8B
Certificate issuer:       /CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
Certificate serial:       0716
Authority key identifier: D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/ChS6iktt8OXSTpuJqgDrBkHcOos.roa
Signing time:             Tue 16 Nov 2021 14:15:32 +0000
ROA not before:           Tue 16 Nov 2021 14:15:32 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     49544
IP address blocks:        103.159.122.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
        Validity
            Not Before: Nov 16 14:15:32 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0A14BA8A4B6DF0E5D24E9B89AA00EB0641DC3A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:0b:11:a4:c1:8b:38:35:58:25:5b:0a:c7:
                    cb:18:a5:ea:4d:04:75:af:ba:60:99:a9:00:e8:87:
                    55:c9:eb:8e:92:15:58:54:86:6f:4c:0c:c7:37:02:
                    95:ff:ba:c2:b0:1e:3d:03:14:dc:e9:ef:78:e3:29:
                    2b:79:04:fd:af:19:5d:1c:e1:3b:ea:da:52:80:a6:
                    b4:ac:9c:09:c7:aa:cd:43:4c:27:df:69:34:96:75:
                    51:84:5a:27:d4:60:01:76:ff:f8:a6:16:cd:1e:ea:
                    96:e8:81:a8:4f:90:a8:46:18:25:4f:59:07:5f:69:
                    88:24:f4:6a:02:bd:4f:b9:04:85:bb:78:4c:eb:6c:
                    5d:63:8d:c5:22:b1:3d:c0:8d:66:d0:00:c4:ef:ef:
                    62:1b:90:e3:f7:4f:1e:29:b3:2e:b7:6c:67:88:56:
                    16:aa:e3:2c:b0:f5:e5:c3:ae:52:b9:34:05:96:a5:
                    b9:96:4e:e4:3b:7d:dc:70:8b:53:5a:c3:1f:cc:88:
                    8c:8a:3f:9b:cf:f8:38:32:34:1d:64:9f:75:2b:4c:
                    86:51:8a:35:ed:f3:c3:c4:c1:20:3d:6b:c4:42:1e:
                    bf:a2:1a:d8:d8:c4:fc:3e:bb:0c:4b:ec:6e:af:f8:
                    d8:c2:59:1e:84:1d:e7:2d:e2:e5:72:cc:13:18:2a:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:14:BA:8A:4B:6D:F0:E5:D2:4E:9B:89:AA:00:EB:06:41:DC:3A:8B
            X509v3 Authority Key Identifier:
                keyid:D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/ChS6iktt8OXSTpuJqgDrBkHcOos.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:0a:3e:99:0c:7f:63:01:5d:23:9e:42:5e:8b:de:88:50:4e:
         b9:f5:c8:0b:d0:08:5d:5a:f2:f4:33:38:f7:d8:e9:c7:ca:73:
         37:18:da:d3:fe:3c:7d:b5:4c:62:ab:40:9c:a5:8e:02:5d:fd:
         09:81:13:76:1e:e9:cc:09:d5:79:30:27:7e:3a:f6:bf:e6:d8:
         61:18:87:50:29:7e:46:d3:f5:14:3e:e2:66:6e:82:93:15:50:
         d0:7b:7a:51:87:b3:4b:b8:16:b8:95:6f:f9:5f:20:5c:49:da:
         fa:77:84:78:1f:e5:91:0f:2e:db:1e:a0:06:65:45:03:14:97:
         c2:1f:13:8c:53:b0:54:87:a3:e9:bf:e7:93:c5:7c:23:09:fd:
         fa:62:ae:26:75:8a:c4:95:ff:28:6d:06:05:2b:11:0d:0c:c2:
         bb:6c:e7:84:49:63:86:4a:ef:94:11:b6:b3:73:0e:d3:24:9f:
         8c:5c:a7:9f:89:8e:f2:b3:1b:e8:45:b5:d5:a8:65:f0:a8:83:
         ed:64:fb:43:bb:26:e4:1b:fc:b5:7b:42:27:06:fc:16:3d:7b:
         b5:21:e1:43:ff:55:1e:f7:11:16:56:0e:5d:ea:12:31:62:1d:
         86:13:86:de:9d:88:f9:2a:f8:0a:e1:a9:4a:bf:e1:c5:89:59:
         73:27:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----