Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3054/w3-MKPCjNXm_BNH0sEa9xhcMVLU.roa
File:                     w3-MKPCjNXm_BNH0sEa9xhcMVLU.roa (raw, json)
Hash identifier:          MxmY6J4zTozGGPmKKZn9VTdS7SFC3n4o72qHUgZMUps=
Subject key identifier:   C3:7F:8C:28:F0:A3:35:79:BF:04:D1:F4:B0:46:BD:C6:17:0C:54:B5
Certificate issuer:       /CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Certificate serial:       0717
Authority key identifier: 93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/w3-MKPCjNXm_BNH0sEa9xhcMVLU.roa
Signing time:             Tue 21 Jun 2022 01:54:29 +0000
ROA not before:           Tue 21 Jun 2022 01:54:29 +0000
ROA not after:            Fri 09 Jun 2023 06:51:49 +0000
asID:                     137732
IP address blocks:        2406:f4c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
        Validity
            Not Before: Jun 21 01:54:29 2022 GMT
            Not After : Jun  9 06:51:49 2023 GMT
        Subject: CN=C37F8C28F0A33579BF04D1F4B046BDC6170C54B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:66:eb:95:3d:79:3a:03:6d:9b:ad:c0:aa:
                    bf:4e:60:fe:83:48:ba:43:ed:1d:00:28:f5:e4:4e:
                    d0:a8:db:58:98:94:00:22:41:c2:cb:37:87:3a:c7:
                    c2:d8:c0:c8:d6:ac:3a:b8:c7:a5:b9:0a:ff:56:5c:
                    a1:52:72:f1:cf:7f:37:c3:42:07:90:80:a6:ee:22:
                    03:ba:83:7a:68:b2:2c:c8:49:57:d4:e6:b9:3a:58:
                    6a:56:13:f2:cb:9a:95:48:f9:d8:81:70:4c:69:a1:
                    1d:eb:73:21:bf:5b:87:6c:b1:15:3b:13:19:d3:94:
                    cf:3b:2d:7b:58:39:d5:06:62:fb:c0:e5:2c:ea:8b:
                    e5:e7:e2:05:96:42:92:f7:48:a7:44:fe:b1:fd:1c:
                    ca:4b:21:55:db:d6:c0:11:40:ec:c3:0f:a2:0a:85:
                    99:a4:29:bd:a4:6c:23:0f:c7:26:76:8f:ee:82:cd:
                    93:9c:32:8a:3c:cc:fa:39:b7:d0:be:a5:fd:cd:54:
                    63:e8:d4:53:64:23:5b:62:aa:1e:55:ba:c5:ac:c6:
                    ca:4c:ba:3a:24:4c:14:56:22:60:4d:e7:e5:32:22:
                    f0:6d:2f:5f:39:f3:1c:58:b9:ef:0d:3f:29:56:9d:
                    04:03:a7:a8:21:9b:e8:fe:b4:bf:8c:5c:8e:d4:af:
                    27:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7F:8C:28:F0:A3:35:79:BF:04:D1:F4:B0:46:BD:C6:17:0C:54:B5
            X509v3 Authority Key Identifier:
                keyid:93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/w3-MKPCjNXm_BNH0sEa9xhcMVLU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:bd:16:07:77:70:f8:f1:73:05:59:43:f9:e2:4e:da:ad:5f:
         75:f4:48:21:47:fc:b0:24:c8:4a:1c:97:33:b1:ff:0f:0c:42:
         28:80:d8:90:5c:77:ca:4f:c6:80:ba:45:c8:ac:d3:32:8e:5b:
         80:65:b9:09:0e:2c:0d:0f:8a:27:a5:62:7f:3c:7e:ea:99:8b:
         5f:7a:5f:7b:8a:25:ff:56:cb:bb:60:b2:ad:be:95:5d:fd:d2:
         73:36:49:30:d6:04:14:f4:4b:64:b2:ea:fa:1b:86:59:48:d6:
         3b:8f:ca:98:f5:76:06:b4:0c:8a:03:51:d1:c7:41:98:da:02:
         60:46:1a:c0:9a:02:7c:d4:b9:d4:70:46:16:7f:55:51:cf:47:
         eb:09:15:59:41:55:80:e7:c4:72:12:3f:ec:f2:80:87:5a:8f:
         d3:3d:b5:e3:3c:6f:e6:dd:3b:26:79:84:e5:54:db:41:cf:29:
         6d:2a:cc:29:81:5d:77:f7:1c:cd:50:d9:06:e3:14:46:0d:85:
         0b:ba:d1:25:14:77:c8:ac:4d:59:eb:a4:89:b1:7c:19:ae:0c:
         ec:1c:9a:17:21:eb:5f:36:49:f7:0c:7b:22:28:92:c2:70:cf:
         9b:48:a4:84:77:a8:60:c7:0d:3b:3c:a8:14:0f:d4:9b:d1:4d:
         ee:a1:27:65
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTNF
NzQ5RTY1NEIyQTlEQ0M1QkZCMzRDMkNBOUFFNzVGRDgzMEJERDAeFw0yMjA2MjEw
MTU0MjlaFw0yMzA2MDkwNjUxNDlaMDMxMTAvBgNVBAMTKEMzN0Y4QzI4RjBBMzM1
NzlCRjA0RDFGNEIwNDZCREM2MTcwQzU0QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCe7mbrlT15OgNtm63Aqr9OYP6DSLpD7R0AKPXkTtCo21iYlAAi
QcLLN4c6x8LYwMjWrDq4x6W5Cv9WXKFScvHPfzfDQgeQgKbuIgO6g3posizISVfU
5rk6WGpWE/LLmpVI+diBcExpoR3rcyG/W4dssRU7ExnTlM87LXtYOdUGYvvA5Szq
i+Xn4gWWQpL3SKdE/rH9HMpLIVXb1sARQOzDD6IKhZmkKb2kbCMPxyZ2j+6CzZOc
Moo8zPo5t9C+pf3NVGPo1FNkI1tiqh5VusWsxspMujokTBRWImBN5+UyIvBtL185
8xxYue8NPylWnQQDp6ghm+j+tL+MXI7UryfZAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUw3+MKPCjNXm/BNH0sEa9xhcMVLUwHwYDVR0jBBgwFoAUk+dJ5lSyqdzFv7NM
LKmudf2DC90wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA1
NC9rLWRKNWxTeXFkekZ2N05NTEttdWRmMkRDOTAuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2stZEo1bFN5cWR6RnY3Tk1MS211ZGYyREM5MC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNTQvdzMtTUtQQ2pOWG1f
Qk5IMHNFYTl4aGNNVkxVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFACQG9MAwDQYJKoZIhvcNAQELBQADggEBADi9Fgd3cPjxcwVZQ/niTtqtX3X0
SCFH/LAkyEoclzOx/w8MQiiA2JBcd8pPxoC6Rcis0zKOW4BluQkOLA0PiielYn88
fuqZi196X3uKJf9Wy7tgsq2+lV390nM2STDWBBT0S2Sy6vobhllI1juPypj1dga0
DIoDUdHHQZjaAmBGGsCaAnzUudRwRhZ/VVHPR+sJFVlBVYDnxHISP+zygIdaj9M9
teM8b+bdOyZ5hOVU20HPKW0qzCmBXXf3HM1Q2QbjFEYNhQu60SUUd8isTVnrpImx
fBmuDOwcmhch6182SfcMeyIoksJwz5tIpIR3qGDHDTs8qBQP1JvRTe6hJ2U=
-----END CERTIFICATE-----