Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3073/xHoHFRvOBlIR8gv-eWgCjqIvkj0.roa
File:                     xHoHFRvOBlIR8gv-eWgCjqIvkj0.roa (raw, json)
Hash identifier:          id3EI84uyRrxEIhRNbMpZUnojnVxtq7FQM5BPB10iyc=
Subject key identifier:   C4:7A:07:15:1B:CE:06:52:11:F2:0B:FE:79:68:02:8E:A2:2F:92:3D
Certificate issuer:       /CN=512D841410BBAE51CCBFE812DA41E7814739B52C
Certificate serial:       0AD3
Authority key identifier: 51:2D:84:14:10:BB:AE:51:CC:BF:E8:12:DA:41:E7:81:47:39:B5:2C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/US2EFBC7rlHMv-gS2kHngUc5tSw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/xHoHFRvOBlIR8gv-eWgCjqIvkj0.roa
Signing time:             Tue 07 Jun 2022 02:15:59 +0000
ROA not before:           Tue 07 Jun 2022 02:15:59 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     131535
IP address blocks:        2407:31c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2771 (0xad3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=512D841410BBAE51CCBFE812DA41E7814739B52C
        Validity
            Not Before: Jun  7 02:15:59 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=C47A07151BCE065211F20BFE7968028EA22F923D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:1e:c6:45:9f:82:bb:3c:7f:cd:6a:ef:c6:
                    3b:7b:dd:8b:35:b1:e9:ae:1f:d0:31:10:f9:9a:1b:
                    34:c3:c4:c2:55:0a:2d:af:2b:cd:ae:fa:3b:df:db:
                    0a:de:19:27:fd:2d:58:2f:2e:b0:93:93:b9:b1:1b:
                    0f:97:94:cb:f7:03:b2:5c:18:d0:43:e4:25:78:ba:
                    13:27:27:61:55:7a:df:53:8f:41:49:b3:bf:a0:0f:
                    12:99:61:07:a3:73:0a:ad:63:9b:c7:c3:3c:51:40:
                    fb:31:88:52:3e:c0:ed:6d:29:9b:71:7b:b7:90:9f:
                    54:98:e5:f2:6a:04:0b:85:ab:b6:65:1e:9a:41:6d:
                    49:3e:98:b3:b5:8a:a4:0a:57:5a:af:90:df:cb:8c:
                    f2:48:c5:ca:79:a0:5e:f0:09:a4:2a:2b:81:10:90:
                    56:1c:a5:7f:ba:3c:13:0c:5e:96:65:ee:e5:21:8e:
                    71:a5:07:42:4a:f1:9c:0d:60:58:c1:40:46:cd:65:
                    0d:e5:ef:47:6b:34:02:da:62:0f:1f:c4:eb:bd:34:
                    e8:85:21:ee:5b:98:e2:28:2b:0d:68:be:83:2e:f9:
                    b9:1b:0a:0c:65:60:1f:52:4a:e2:b4:b8:6e:e3:de:
                    fa:fc:70:52:b2:d9:02:6d:0b:2b:83:6f:17:90:ef:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7A:07:15:1B:CE:06:52:11:F2:0B:FE:79:68:02:8E:A2:2F:92:3D
            X509v3 Authority Key Identifier:
                keyid:51:2D:84:14:10:BB:AE:51:CC:BF:E8:12:DA:41:E7:81:47:39:B5:2C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/US2EFBC7rlHMv-gS2kHngUc5tSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/US2EFBC7rlHMv-gS2kHngUc5tSw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/xHoHFRvOBlIR8gv-eWgCjqIvkj0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:31c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:cc:fd:da:44:b7:81:0a:c8:c7:cb:b3:99:72:73:59:80:60:
         57:87:3b:70:2b:1a:d6:8e:b0:31:73:f1:af:87:e2:95:d0:4e:
         62:b7:7d:07:05:0d:d6:fc:ed:d7:37:20:5b:ad:28:53:26:b7:
         ae:42:33:1b:58:7a:e0:af:e9:d8:fa:a6:23:10:01:77:69:d6:
         99:35:1c:12:38:10:09:2c:7d:19:33:19:35:81:ba:d8:8d:bc:
         15:d6:03:2e:1e:71:37:09:43:7b:dc:7b:bf:aa:bb:5c:cb:50:
         8e:de:78:6a:d4:3a:d7:af:1a:b2:fc:8b:71:54:7f:ad:32:93:
         9b:1a:25:96:0a:c9:93:ae:dc:8b:b7:13:80:92:59:be:b8:7a:
         7a:6d:0f:37:86:1a:af:2f:48:3c:44:2d:db:9a:5c:b8:4d:26:
         41:53:1c:ae:bc:74:1c:e2:c2:73:42:0e:e2:68:40:e3:25:7b:
         23:95:d3:4b:c3:f3:59:c6:4d:84:92:56:16:6f:70:c9:c9:f5:
         12:36:16:09:b0:2b:6a:3f:e7:f5:ce:4f:19:46:02:04:c2:56:
         68:b9:56:be:b9:88:9a:29:50:ba:02:db:41:f1:0f:c4:fd:e3:
         0a:c9:18:24:30:89:c1:0b:24:64:e3:c4:c0:74:d6:67:24:14:
         9e:b0:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----