Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/nvX-VigGLMY6Bq_JUJtRSpOLX2Y.roa
File:                     nvX-VigGLMY6Bq_JUJtRSpOLX2Y.roa (raw, json)
Hash identifier:          tPHwRa4VBci3IqgtvX7QpV5mcvAzLbcctk5d5io/RH4=
Subject key identifier:   9E:F5:FE:56:28:06:2C:C6:3A:06:AF:C9:50:9B:51:4A:93:8B:5F:66
Certificate issuer:       /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial:       017E
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/nvX-VigGLMY6Bq_JUJtRSpOLX2Y.roa
Signing time:             Wed 26 Apr 2023 04:28:21 +0000
ROA not before:           Wed 26 Apr 2023 04:28:21 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     34549
IP address blocks:        210.79.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
        Validity
            Not Before: Apr 26 04:28:21 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=9EF5FE5628062CC63A06AFC9509B514A938B5F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:4b:33:16:c3:ee:d2:09:79:c2:e0:91:49:
                    ee:41:d6:b8:d5:5f:82:28:c6:b8:c7:75:9e:cf:99:
                    96:bd:9c:0e:77:39:49:a3:6d:e1:8b:39:03:17:ee:
                    dd:d7:55:e1:39:e7:ef:7c:e9:e8:5e:60:1f:21:55:
                    46:90:b2:a0:ee:99:40:b7:d8:0a:de:1d:d2:50:5a:
                    65:e8:90:a3:fd:c5:ab:88:bf:e1:ea:d9:a0:44:d9:
                    63:e9:d6:cf:66:4e:16:bf:70:fa:4f:94:0d:ff:42:
                    c6:be:f1:99:f7:01:c0:0a:b4:6c:11:b9:f1:e9:bf:
                    32:e8:74:b6:43:b9:e4:18:de:f6:67:49:bd:fc:ce:
                    75:eb:fb:1f:69:da:37:96:5c:c3:56:aa:23:08:52:
                    60:3e:aa:82:13:e5:46:43:3f:e8:02:a2:8f:65:11:
                    87:6d:83:30:bb:46:e2:74:a5:c8:46:c2:35:f8:40:
                    68:a7:38:70:23:07:69:93:47:37:27:c5:6c:3f:e8:
                    b5:bb:2e:4f:c6:a4:8c:3a:23:5b:e0:db:d8:27:a8:
                    90:43:1d:84:61:7d:a0:9e:2b:f4:6d:58:33:6f:ee:
                    6f:d5:72:3c:da:6c:b9:9a:1e:42:10:5d:c5:79:fe:
                    b1:8c:28:20:6c:e1:4c:49:75:27:7b:45:55:9a:a4:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F5:FE:56:28:06:2C:C6:3A:06:AF:C9:50:9B:51:4A:93:8B:5F:66
            X509v3 Authority Key Identifier:
                keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/nvX-VigGLMY6Bq_JUJtRSpOLX2Y.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:79:9b:4b:7c:7e:d6:a0:04:9b:52:33:36:b4:aa:a4:2c:a9:
         e5:23:b0:72:13:67:74:4f:dc:2a:e0:34:bf:c1:ae:5e:bd:54:
         bd:aa:28:a4:e1:49:bd:85:2b:b8:02:62:34:6c:87:3c:5a:d3:
         c6:96:5c:d4:e0:66:4e:a6:73:ea:0c:17:ac:fa:e1:07:c0:ab:
         55:e8:34:1f:5e:5f:56:9c:6e:24:2c:75:10:57:12:5e:49:d3:
         94:77:d0:12:bb:93:dd:50:89:f5:b1:5a:e8:cd:a7:5e:7d:b5:
         96:fc:c7:8d:1d:5f:91:aa:9b:af:d0:40:d3:62:bb:86:b3:ea:
         00:ea:b8:26:f7:3b:51:56:32:30:14:29:e4:dd:ba:69:39:eb:
         6f:b0:c8:86:e1:96:de:d2:3b:37:10:a2:77:94:8d:c9:18:66:
         dc:46:0d:9a:ac:93:17:e8:f3:91:f7:5c:98:39:ca:b1:72:d8:
         5b:d4:be:00:a8:d4:bf:f2:11:fc:aa:85:af:a5:6f:c9:97:b1:
         6f:9e:bf:e5:55:5c:4d:05:5b:a9:63:e2:e8:f6:93:e3:90:6f:
         61:fb:5a:73:c2:4f:a4:db:16:0e:05:11:0a:af:86:b7:61:9a:
         9c:8e:a6:40:3a:d3:36:98:b6:30:27:ef:39:f2:7d:09:df:79:
         f0:fd:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----