Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/Ou6cRMRIoEMByiVliUu1uHJaNdU.roa
File:                     Ou6cRMRIoEMByiVliUu1uHJaNdU.roa (raw, json)
Hash identifier:          lAgnpDf8w61BGC+PoTRmQgHId+5eMzlyhAXSR3besYA=
Subject key identifier:   3A:EE:9C:44:C4:48:A0:43:01:CA:25:65:89:4B:B5:B8:72:5A:35:D5
Certificate issuer:       /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Certificate serial:       0CEE
Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/Ou6cRMRIoEMByiVliUu1uHJaNdU.roa
Signing time:             Tue 07 Jun 2022 02:10:03 +0000
ROA not before:           Tue 07 Jun 2022 02:10:03 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     131484
IP address blocks:        2406:d140::/32 maxlen: 48
                          2406:d140:8000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3310 (0xcee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
        Validity
            Not Before: Jun  7 02:10:03 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=3AEE9C44C448A04301CA2565894BB5B8725A35D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b7:43:3b:2f:1b:ff:b1:5b:d1:9f:0b:5d:c5:
                    43:20:7f:b6:11:a4:97:10:2b:fe:71:bb:01:1f:43:
                    09:69:ba:09:74:bf:67:14:cf:cb:f8:1c:df:9b:b5:
                    40:a7:79:f4:cd:72:98:3e:50:e6:0e:54:71:99:bd:
                    c4:de:a9:f0:81:91:f8:3a:f7:b4:29:58:39:85:bb:
                    0a:52:e1:c6:c0:18:55:87:b3:b7:74:95:04:7c:ad:
                    27:29:01:56:d9:78:62:14:7d:5b:d3:02:fb:11:01:
                    f1:c4:a3:41:f1:0b:59:7c:46:8e:41:eb:e6:3a:0b:
                    c9:a7:be:b8:64:df:f0:b9:9a:42:74:e2:a1:23:58:
                    48:d4:bb:3e:83:6f:78:a3:9e:be:7f:1f:c0:5c:cc:
                    c5:bd:d8:25:bb:25:66:70:a7:3b:86:e0:43:ed:55:
                    65:13:9e:67:f5:85:a8:02:c8:23:f0:ad:1e:ce:2d:
                    8a:48:9b:50:c9:b7:ba:98:ab:50:0e:82:ce:ac:53:
                    af:c7:5b:00:e7:8b:df:1b:a6:52:56:d7:80:cd:5e:
                    19:1e:91:cb:ee:f8:a1:45:79:3d:5b:77:c3:78:e7:
                    c5:d3:e3:78:d9:51:c2:3b:1c:fe:99:a0:58:9b:c9:
                    9d:6a:b9:b9:43:0e:dd:31:7d:09:70:dc:b8:af:67:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EE:9C:44:C4:48:A0:43:01:CA:25:65:89:4B:B5:B8:72:5A:35:D5
            X509v3 Authority Key Identifier:
                keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/Ou6cRMRIoEMByiVliUu1uHJaNdU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d140::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:be:d6:21:df:d0:ee:7b:86:54:d4:ce:e0:91:ab:d7:a8:60:
         e6:5c:b4:d2:50:fb:e8:53:71:23:b7:cd:7c:36:89:1d:9b:3a:
         7e:8f:f3:5e:c9:14:85:3d:97:f7:db:30:47:e6:5d:a2:ea:29:
         c9:18:82:07:fc:e4:6a:36:52:d7:82:ec:8e:e1:e9:1c:0a:ac:
         f5:87:d1:87:ac:7f:16:dc:bb:b3:0e:01:53:62:f8:96:8b:ec:
         d9:da:94:ca:fd:e6:8e:62:6e:9e:e7:ab:40:a4:44:85:ed:f2:
         76:e4:87:2a:4c:c1:70:8f:46:86:1c:6c:12:e2:ce:4c:eb:85:
         29:c4:c0:ee:4f:a4:ab:02:b9:98:d1:73:e5:35:07:e4:56:d0:
         d1:4b:b4:71:45:b7:43:c2:ab:da:85:5e:70:04:37:54:4d:1e:
         55:5c:df:e8:68:69:6d:2b:46:03:64:37:b2:08:f4:8d:10:2b:
         2e:e9:d5:92:7e:9f:a5:49:71:52:f3:36:9f:ff:7f:c6:52:92:
         47:22:a3:4d:13:08:f4:03:b0:34:68:d1:74:3d:4d:98:dc:87:
         e9:d1:6b:81:e1:d1:cf:fe:af:d7:80:4d:a7:97:4c:fa:3e:be:
         65:e3:f9:49:47:b2:c1:ad:64:0f:f2:47:f1:f2:8b:04:88:32:
         ff:27:87:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----