Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/j7PyKkXXj_cqWaHsL_y7AhVHWFA.roa
File:                     j7PyKkXXj_cqWaHsL_y7AhVHWFA.roa (raw, json)
Hash identifier:          bdLvN1FZnfg+gFMYGBCLo6KdOaM+oikkTqa8d0r2V2A=
Subject key identifier:   8F:B3:F2:2A:45:D7:8F:F7:2A:59:A1:EC:2F:FC:BB:02:15:47:58:50
Certificate issuer:       /CN=18BC3268C26DCC45A94B17F515018722A06416DF
Certificate serial:       04
Authority key identifier: 18:BC:32:68:C2:6D:CC:45:A9:4B:17:F5:15:01:87:22:A0:64:16:DF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLwyaMJtzEWpSxf1FQGHIqBkFt8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/j7PyKkXXj_cqWaHsL_y7AhVHWFA.roa
Signing time:             Fri 16 Apr 2021 03:23:41 +0000
ROA not before:           Fri 16 Apr 2021 03:23:41 +0000
ROA not after:            Sat 16 Apr 2022 03:09:10 +0000
asID:                     137718
IP address blocks:        2406:d440::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18BC3268C26DCC45A94B17F515018722A06416DF
        Validity
            Not Before: Apr 16 03:23:41 2021 GMT
            Not After : Apr 16 03:09:10 2022 GMT
        Subject: CN=8FB3F22A45D78FF72A59A1EC2FFCBB0215475850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:16:45:0f:61:e0:91:1c:5f:d1:c1:ff:92:
                    cc:06:72:1a:9e:1f:2f:dd:48:14:38:51:11:ab:30:
                    ea:54:30:e3:85:b2:40:e1:05:7c:75:93:64:60:4d:
                    6d:16:29:e6:b4:2d:bb:16:e5:62:63:8b:96:d3:66:
                    a1:4a:ef:56:4d:f8:28:ac:e2:05:1b:04:03:c6:d9:
                    6f:a7:04:45:bb:8a:0f:d9:f1:99:37:94:ec:80:cb:
                    c5:be:b7:9d:92:57:12:a0:27:4b:ce:8f:95:88:11:
                    4c:03:4f:fd:36:6a:72:18:30:02:ff:64:92:48:0c:
                    7c:f0:f0:ea:48:5e:cc:93:f6:43:58:35:30:b4:5d:
                    ec:85:90:2b:81:60:85:41:49:2e:69:21:39:30:74:
                    3c:ff:d9:9c:92:50:fb:29:c2:1d:87:bc:db:3d:0b:
                    52:c9:5d:c1:3a:99:09:68:7f:54:26:12:a8:ee:fd:
                    e6:2e:4e:1c:0e:10:70:d3:a6:18:83:52:33:ee:d9:
                    00:58:69:2f:1d:d6:d1:0c:bf:1f:43:46:c9:28:15:
                    41:b9:d5:b0:84:d1:89:a1:62:d5:f5:0f:c0:b1:ae:
                    56:55:1b:a4:d3:1b:83:0f:98:c9:44:2f:f2:8a:e8:
                    e7:c5:e3:a7:8b:0f:cb:4b:71:86:14:f3:8a:b9:cb:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B3:F2:2A:45:D7:8F:F7:2A:59:A1:EC:2F:FC:BB:02:15:47:58:50
            X509v3 Authority Key Identifier:
                keyid:18:BC:32:68:C2:6D:CC:45:A9:4B:17:F5:15:01:87:22:A0:64:16:DF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/GLwyaMJtzEWpSxf1FQGHIqBkFt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLwyaMJtzEWpSxf1FQGHIqBkFt8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/j7PyKkXXj_cqWaHsL_y7AhVHWFA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:08:84:54:66:90:7a:e2:98:9f:c3:e2:b6:67:10:01:68:71:
         c4:bc:00:55:fa:ce:d3:3a:a1:65:d2:49:c0:65:cc:f5:fe:6e:
         53:90:fb:c7:22:89:32:f5:ef:2b:29:c2:b8:a1:c2:0b:6a:3a:
         1c:8d:ea:f0:76:03:52:14:8a:d2:56:0d:1d:36:18:3a:f6:9d:
         15:0a:e0:be:2f:46:b4:e9:9d:65:43:19:ca:28:76:65:c8:e2:
         56:c1:28:92:54:03:5e:4d:09:bc:b1:eb:d4:ef:e8:d6:1e:86:
         5f:cc:0e:e7:36:14:1a:56:94:cb:5e:04:ee:a4:6d:ed:c1:0d:
         8a:45:9d:f8:f8:db:0f:70:2d:e6:bf:92:da:b6:e8:e9:da:29:
         29:87:5f:1a:aa:5d:20:94:8f:2b:4a:da:2b:0a:78:e4:7a:25:
         0d:57:08:67:35:a1:22:f0:e7:72:41:e9:95:ef:5e:ae:80:ce:
         75:2f:85:23:f7:5d:04:c0:a0:ef:fe:84:1c:04:4a:dd:7a:39:
         28:94:a6:8d:3a:c3:af:9e:7f:c2:17:54:bb:55:5a:7e:5a:5f:
         1c:9f:0b:08:df:1a:76:5e:bb:df:ec:b4:bc:d3:01:14:b1:23:
         ee:a4:04:00:64:84:11:20:d9:b5:9b:81:78:5d:f4:21:b2:d7:
         f8:89:21:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----