Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/316/WCCFpDsldXNY36ytWij0vU2Bp20.roa
File:                     WCCFpDsldXNY36ytWij0vU2Bp20.roa (raw, json)
Hash identifier:          mTmH0B8tlO6HFeTqg1oIROKantF6aM4rLxNKlH7/2Zw=
Subject key identifier:   58:20:85:A4:3B:25:75:73:58:DF:AC:AD:5A:28:F4:BD:4D:81:A7:6D
Certificate issuer:       /CN=4BC6A9B58BBEEAD50DDD48F844782C8294A18B39
Certificate serial:       04
Authority key identifier: 4B:C6:A9:B5:8B:BE:EA:D5:0D:DD:48:F8:44:78:2C:82:94:A1:8B:39
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/S8aptYu-6tUN3Uj4RHgsgpShizk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/WCCFpDsldXNY36ytWij0vU2Bp20.roa
Signing time:             Wed 16 Feb 2022 08:50:14 +0000
ROA not before:           Wed 16 Feb 2022 08:50:14 +0000
ROA not after:            Thu 16 Feb 2023 08:46:42 +0000
asID:                     38378
IP address blocks:        119.40.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC6A9B58BBEEAD50DDD48F844782C8294A18B39
        Validity
            Not Before: Feb 16 08:50:14 2022 GMT
            Not After : Feb 16 08:46:42 2023 GMT
        Subject: CN=582085A43B25757358DFACAD5A28F4BD4D81A76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c6:04:e1:29:a8:62:54:31:23:8e:86:cd:ee:
                    da:54:8f:a8:67:22:1d:5f:d8:b7:8c:15:8c:76:89:
                    e4:d0:d1:7a:a0:ef:f5:02:0d:c6:87:cf:6d:a6:4d:
                    b3:a9:d1:94:7f:bf:02:de:ee:2c:27:79:a8:f6:67:
                    27:56:f0:c5:d0:dd:04:2b:55:4b:48:a6:29:23:b5:
                    94:37:73:00:04:1e:9f:2d:37:6b:3b:57:a8:ec:75:
                    24:d0:1d:13:3b:ac:57:4d:85:e1:41:b7:d5:85:55:
                    57:ab:c0:7d:cf:2f:0f:40:66:9f:b9:b0:93:62:bb:
                    9b:8e:e9:18:54:dc:7a:70:50:3a:6d:1c:79:bb:d3:
                    d2:fd:f1:ad:b6:74:3d:8f:c3:bf:03:c6:48:cc:5d:
                    f9:9a:5e:f3:5f:d4:03:2d:83:9f:f4:b4:83:e3:55:
                    85:91:a0:0c:58:59:03:5e:60:4b:42:da:00:f2:6b:
                    36:fc:7f:0b:5b:00:c9:52:70:71:0f:8d:3a:5f:5d:
                    11:76:84:5f:07:42:6c:e1:1d:95:87:69:2d:8a:50:
                    c4:cd:1d:9d:0b:87:45:9f:b5:b7:1a:40:de:f3:ef:
                    1d:2e:0b:83:0e:8a:4c:6a:bd:a9:a5:dc:2b:31:d3:
                    8a:fb:d0:8f:27:b1:d9:c4:02:e6:40:c6:f4:18:4d:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:20:85:A4:3B:25:75:73:58:DF:AC:AD:5A:28:F4:BD:4D:81:A7:6D
            X509v3 Authority Key Identifier:
                keyid:4B:C6:A9:B5:8B:BE:EA:D5:0D:DD:48:F8:44:78:2C:82:94:A1:8B:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/S8aptYu-6tUN3Uj4RHgsgpShizk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/S8aptYu-6tUN3Uj4RHgsgpShizk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/316/WCCFpDsldXNY36ytWij0vU2Bp20.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.40.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:7e:29:80:c2:b1:66:bb:8f:d8:49:5e:47:cb:70:a4:9f:67:
         3e:f8:26:11:93:00:6d:2f:a1:3b:cb:92:10:7f:cb:21:39:7d:
         60:15:b8:58:b2:80:e8:55:c2:78:04:4d:9b:5b:12:51:44:b2:
         6e:15:4a:bf:1c:8e:80:25:d7:8e:72:3e:b6:7a:cf:d5:ff:1d:
         2e:18:90:c3:72:e6:99:ef:7d:b8:6c:a8:e4:a5:a5:76:16:6a:
         56:ef:a9:89:0c:73:6b:5d:4c:8f:99:ce:a6:f7:9d:c3:63:dc:
         7d:4a:56:77:ad:ff:b8:eb:5b:9a:0b:72:a4:34:23:e1:ea:c0:
         02:8d:df:be:f1:6a:0e:de:17:15:81:43:f7:af:6d:8c:3f:ae:
         9f:c0:c7:67:2c:23:38:f0:c2:e0:a0:68:70:e7:01:47:19:d3:
         ca:53:7a:34:be:40:eb:69:66:ac:38:75:27:38:a9:73:d3:42:
         6b:a8:5a:e5:97:70:d2:de:bb:c5:ed:7b:01:f8:a1:fc:fd:db:
         53:16:5d:da:e0:13:3e:12:4d:7f:ef:a1:02:86:49:93:8c:1a:
         15:2d:09:28:cc:22:47:16:81:68:5d:ad:7a:59:f7:b3:f4:30:
         ec:89:e2:70:fb:f8:42:b6:91:28:54:db:8d:c7:31:36:eb:d9:
         5f:86:6d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----