Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/nP76Ur14bECDOujkiFmWsKw4tqA.roa
File:                     nP76Ur14bECDOujkiFmWsKw4tqA.roa (raw, json)
Hash identifier:          p9DuwIhFRyZSu6BF0cHteRCJj6XzIOJxE4JGzUqz79c=
Subject key identifier:   9C:FE:FA:52:BD:78:6C:40:83:3A:E8:E4:88:59:96:B0:AC:38:B6:A0
Certificate issuer:       /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
Certificate serial:       05
Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/nP76Ur14bECDOujkiFmWsKw4tqA.roa
Signing time:             Thu 13 Jan 2022 05:45:57 +0000
ROA not before:           Thu 13 Jan 2022 05:45:57 +0000
ROA not after:            Fri 13 Jan 2023 05:40:42 +0000
asID:                     146845
IP address blocks:        2407:9b40::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353
        Validity
            Not Before: Jan 13 05:45:57 2022 GMT
            Not After : Jan 13 05:40:42 2023 GMT
        Subject: CN=9CFEFA52BD786C40833AE8E4885996B0AC38B6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:7c:61:a5:5e:c4:5a:28:0e:e9:e5:9f:78:
                    2e:60:80:76:42:63:b6:28:ac:26:d5:19:5e:ba:5e:
                    04:02:1b:9b:ec:69:e3:14:f5:2f:5d:ec:1a:c3:25:
                    f5:14:9e:dc:a0:0f:e0:80:d4:2b:88:c9:bd:d4:95:
                    06:44:a7:d4:95:d7:a0:cd:18:83:c7:b6:2b:6f:38:
                    f2:7c:f1:1c:30:84:70:12:4a:1d:22:bd:11:7e:9d:
                    b7:91:85:c4:a4:28:85:8a:59:15:22:97:c7:e8:33:
                    35:6e:f7:ac:23:d0:e4:55:a9:ff:36:52:dd:b4:69:
                    61:59:00:c8:73:73:71:33:e2:b7:e8:4b:f3:b5:e4:
                    97:89:7e:51:ee:15:ac:ae:d8:31:04:67:e8:48:9a:
                    29:f2:3d:5e:9c:44:c4:44:2c:2e:f7:6b:6d:e3:e6:
                    0c:86:c7:6f:6c:7c:54:a3:61:8c:3e:b6:c3:72:58:
                    3a:57:fd:30:e9:e1:ee:0f:83:25:c3:3d:1d:9d:bb:
                    06:44:bc:0e:72:fa:15:da:63:f1:75:a4:ae:ad:9a:
                    24:fb:17:20:9d:28:5c:ce:47:f3:f9:03:e0:b8:a9:
                    c0:a1:29:7e:46:a2:07:9c:3d:cd:23:f8:e9:48:65:
                    3d:fe:85:c0:ef:14:84:ce:98:1c:92:96:47:a7:02:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FE:FA:52:BD:78:6C:40:83:3A:E8:E4:88:59:96:B0:AC:38:B6:A0
            X509v3 Authority Key Identifier:
                keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/nP76Ur14bECDOujkiFmWsKw4tqA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:c0:81:e4:83:5a:d3:c0:e9:fc:7b:e0:99:5a:08:72:46:ed:
         02:67:1b:52:d5:b3:0b:a0:cf:37:9e:81:08:e7:28:36:67:da:
         50:61:6a:21:60:9f:a6:89:b6:54:a1:98:29:bd:8d:40:05:46:
         06:cf:c5:37:b8:f0:3d:dc:95:96:25:11:e9:16:90:69:02:ec:
         14:b7:9a:30:90:3f:ff:23:6e:45:e7:53:0d:58:2b:fc:b5:ca:
         43:56:d0:52:33:c1:93:87:d9:da:35:0b:a0:d7:45:92:9c:60:
         91:32:ca:b3:9a:ba:68:28:2a:63:cb:8a:65:5b:7f:bd:76:32:
         5b:8a:fc:2e:91:bf:fe:ed:2b:70:af:69:6b:41:bf:aa:4c:0a:
         8b:68:e7:30:05:b7:c4:75:9c:95:0e:07:04:d6:a0:81:44:28:
         dc:4e:87:ee:e5:21:ce:56:09:fb:22:cb:38:27:b8:c0:b0:ba:
         4b:34:b3:c6:9f:4b:06:d0:be:a0:a9:cb:9e:66:f4:93:7d:e7:
         b9:bf:5a:53:f4:de:5c:d3:a2:31:08:57:56:ba:cb:7e:7e:98:
         ef:cf:f9:ee:7f:05:16:e7:54:52:3a:98:7f:7c:64:29:0d:e9:
         be:7c:ec:63:53:f3:67:e5:da:15:dc:77:9a:56:f7:9a:13:3a:
         d7:00:2f:3c
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMkFC
NkM5QjZFMTY1MzM0QzAzMkQwNTFENUZDN0QxNTQ3RTRFMzUzMB4XDTIyMDExMzA1
NDU1N1oXDTIzMDExMzA1NDA0MlowMzExMC8GA1UEAxMoOUNGRUZBNTJCRDc4NkM0
MDgzM0FFOEU0ODg1OTk2QjBBQzM4QjZBMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALlvfGGlXsRaKA7p5Z94LmCAdkJjtiisJtUZXrpeBAIbm+xp4xT1
L13sGsMl9RSe3KAP4IDUK4jJvdSVBkSn1JXXoM0Yg8e2K2848nzxHDCEcBJKHSK9
EX6dt5GFxKQohYpZFSKXx+gzNW73rCPQ5FWp/zZS3bRpYVkAyHNzcTPit+hL87Xk
l4l+Ue4VrK7YMQRn6EiaKfI9XpxExEQsLvdrbePmDIbHb2x8VKNhjD62w3JYOlf9
MOnh7g+DJcM9HZ27BkS8DnL6Fdpj8XWkrq2aJPsXIJ0oXM5H8/kD4LipwKEpfkai
B5w9zSP46UhlPf6FwO8UhM6YHJKWR6cCoRsCAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBSc/vpSvXhsQIM66OSIWZawrDi2oDAfBgNVHSMEGDAWgBTSq2ybbhZTNMAy0FHV
/H0VR+TjUzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4
LzBxdHNtMjRXVXpUQU10QlIxZng5RlVmazQxTS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA5OC9uUDc2VXIxNGJFQ0RP
dWpraUZtV3NLdzR0cUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAebQDANBgkqhkiG9w0BAQsFAAOCAQEAVsCB5INa08Dp/HvgmVoIckbtAmcb
UtWzC6DPN56BCOcoNmfaUGFqIWCfpom2VKGYKb2NQAVGBs/FN7jwPdyVliUR6RaQ
aQLsFLeaMJA//yNuRedTDVgr/LXKQ1bQUjPBk4fZ2jULoNdFkpxgkTLKs5q6aCgq
Y8uKZVt/vXYyW4r8LpG//u0rcK9pa0G/qkwKi2jnMAW3xHWclQ4HBNaggUQo3E6H
7uUhzlYJ+yLLOCe4wLC6SzSzxp9LBtC+oKnLnmb0k33nub9aU/TeXNOiMQhXVrrL
fn6Y78/57n8FFudUUjqYf3xkKQ3pvnzsY1PzZ+XaFdx3mlb3mhM61wAvPA==
-----END CERTIFICATE-----