Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3067/6maqcYP5lrAXCeTLYet_D5vCajY.roa
File:                     6maqcYP5lrAXCeTLYet_D5vCajY.roa (raw, json)
Hash identifier:          sQ9uv0BZKAU0XLWFBHA+I0yMDg2ygmH2/+kV3lNc31U=
Subject key identifier:   EA:66:AA:71:83:F9:96:B0:17:09:E4:CB:61:EB:7F:0F:9B:C2:6A:36
Certificate issuer:       /CN=A1760B193072C0C3267E27BEF1ECB6CB51FA75F7
Certificate serial:       B3
Authority key identifier: A1:76:0B:19:30:72:C0:C3:26:7E:27:BE:F1:EC:B6:CB:51:FA:75:F7
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oXYLGTBywMMmfie-8ey2y1H6dfc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/6maqcYP5lrAXCeTLYet_D5vCajY.roa
Signing time:             Wed 31 Mar 2021 05:37:14 +0000
ROA not before:           Wed 31 Mar 2021 05:37:14 +0000
ROA not after:            Fri 25 Feb 2022 05:44:33 +0000
asID:                     24409
IP address blocks:        103.163.28.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1760B193072C0C3267E27BEF1ECB6CB51FA75F7
        Validity
            Not Before: Mar 31 05:37:14 2021 GMT
            Not After : Feb 25 05:44:33 2022 GMT
        Subject: CN=EA66AA7183F996B01709E4CB61EB7F0F9BC26A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:da:d4:7d:49:ac:53:82:14:a1:a0:b2:97:
                    e2:d8:9a:79:34:68:2f:bb:50:bb:27:d5:73:d9:bc:
                    23:64:a8:21:54:1c:c5:48:6e:ff:e0:92:2b:1a:b4:
                    73:e4:04:2a:e5:18:88:68:52:c0:d1:b2:05:f0:66:
                    17:fa:5f:c3:77:7f:11:06:7a:8a:91:fa:5f:63:f9:
                    fd:1d:03:dd:a8:8c:ec:4e:43:b3:18:5f:45:21:7f:
                    da:fa:b5:c6:0c:4b:28:9d:40:66:12:15:50:a3:56:
                    42:9b:4a:8b:48:b0:43:4d:41:6c:26:b6:d6:b0:ff:
                    13:28:d2:93:05:29:77:d7:35:7e:fd:20:4c:b5:36:
                    ff:bd:2b:af:23:5b:dc:30:9a:c4:45:42:1c:29:71:
                    76:f1:1d:0a:f6:80:19:fc:e1:92:2f:17:89:23:0e:
                    27:60:c1:d5:33:12:97:0f:34:cb:dd:56:11:de:90:
                    d8:69:d8:d0:95:3e:6b:09:93:59:3d:16:39:62:e2:
                    b7:4a:17:07:35:ef:50:d3:85:fe:6f:e9:bc:f5:96:
                    61:44:12:40:03:64:1e:f1:cc:e7:07:39:ae:54:89:
                    43:df:5a:12:a4:32:48:26:e2:5e:43:79:7d:d0:24:
                    da:41:8e:e4:dd:c1:79:fa:45:7b:58:85:1a:a0:af:
                    cd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:66:AA:71:83:F9:96:B0:17:09:E4:CB:61:EB:7F:0F:9B:C2:6A:36
            X509v3 Authority Key Identifier:
                keyid:A1:76:0B:19:30:72:C0:C3:26:7E:27:BE:F1:EC:B6:CB:51:FA:75:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/oXYLGTBywMMmfie-8ey2y1H6dfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/oXYLGTBywMMmfie-8ey2y1H6dfc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/6maqcYP5lrAXCeTLYet_D5vCajY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:d4:42:2d:a1:ae:70:ea:36:d4:07:b9:b2:62:91:51:67:5a:
         88:94:bc:8f:ec:7e:91:67:9b:30:43:9d:9a:a4:65:05:f0:aa:
         97:8f:fc:26:24:74:d5:8e:e1:cc:38:32:44:22:22:fe:26:f9:
         a7:77:1a:7c:90:90:c8:08:35:f9:d5:fa:09:58:86:a8:d0:13:
         bd:82:40:09:5a:77:f7:ed:45:9d:30:b3:19:01:ea:26:08:af:
         48:2c:66:bf:c3:b9:c1:15:a2:d9:ca:29:5d:19:cf:23:7f:f7:
         0b:13:61:47:2f:52:c3:b7:2e:95:dc:42:2b:30:7e:dd:2c:84:
         bf:89:99:81:04:4e:5d:4b:1f:9d:48:15:f1:86:f7:61:27:1b:
         a8:f4:ce:e3:a9:3d:bb:06:46:11:86:06:ff:86:35:e5:66:39:
         97:1e:32:60:7c:99:5b:7b:bb:6d:32:c5:38:47:f4:2f:d1:3e:
         6a:aa:80:b1:b1:d1:07:7b:44:09:69:e7:ab:0b:73:5b:3a:68:
         23:22:8a:79:69:4e:c0:b9:de:dc:5e:f6:63:94:96:a2:bb:4f:
         cf:85:f6:12:6d:c2:70:29:70:a3:5f:ce:65:cc:2f:0d:64:2a:
         67:1d:eb:85:19:c2:c5:a6:05:b8:1e:ce:8c:e3:2b:f6:63:68:
         00:f5:47:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----