Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/ysPKuaCmEHHplK9hdcokW33lEHY.roa
File:                     ysPKuaCmEHHplK9hdcokW33lEHY.roa (raw, json)
Hash identifier:          FTfgvrviAaSb6HC6+F5nYCTLiJi5x0Di1DsIdpWNoWk=
Subject key identifier:   CA:C3:CA:B9:A0:A6:10:71:E9:94:AF:61:75:CA:24:5B:7D:E5:10:76
Certificate issuer:       /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial:       01CB
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ysPKuaCmEHHplK9hdcokW33lEHY.roa
Signing time:             Tue 09 May 2023 04:34:06 +0000
ROA not before:           Tue 09 May 2023 04:34:06 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     34549
IP address blocks:        210.79.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
        Validity
            Not Before: May  9 04:34:06 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=CAC3CAB9A0A61071E994AF6175CA245B7DE51076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:7e:65:14:1e:da:15:f2:84:89:d9:b3:ec:
                    0e:7c:89:e5:db:a2:b8:fa:97:0e:b3:9e:b5:f3:51:
                    a4:39:b9:55:60:d6:2b:4b:25:6d:f2:a2:33:29:f7:
                    56:71:fa:78:ed:33:ec:46:1c:b7:c0:58:c4:3a:6b:
                    b2:0b:3d:a8:8d:af:72:2d:29:f7:17:59:3c:50:32:
                    62:41:83:dd:59:16:72:53:59:81:a9:2c:13:c1:37:
                    a2:9a:c4:04:8e:39:92:78:fa:47:83:e4:15:33:4e:
                    5c:2e:2b:88:5c:46:1a:70:13:aa:b0:05:0c:42:0d:
                    0e:47:79:c9:0b:6c:bb:37:37:cb:11:c7:a4:1f:25:
                    b5:c1:72:15:88:3f:c3:bc:ea:42:79:e0:5f:51:4e:
                    88:57:32:f4:c2:ce:b1:4d:d4:9e:98:56:84:6c:ef:
                    e9:3f:8f:bd:5f:c0:7e:f5:ff:39:19:e0:15:71:11:
                    3c:e8:fe:15:a8:47:c1:c8:b7:b6:f6:97:7f:ab:e2:
                    d1:ec:d1:df:bd:c1:b4:f1:97:a1:bb:3f:d3:34:23:
                    46:8f:bd:5a:52:25:64:48:c0:3c:20:19:0b:04:99:
                    3f:75:57:9b:d2:eb:8d:25:6e:d6:42:8a:53:86:44:
                    9a:68:7e:d6:16:80:bd:1b:c3:75:9c:e3:57:ce:56:
                    4d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C3:CA:B9:A0:A6:10:71:E9:94:AF:61:75:CA:24:5B:7D:E5:10:76
            X509v3 Authority Key Identifier:
                keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/ysPKuaCmEHHplK9hdcokW33lEHY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:55:fe:26:3b:0e:fc:f0:66:8f:fd:2a:f7:f5:46:72:2e:15:
         07:fd:eb:9e:97:80:a1:3c:1a:c6:ab:78:18:de:10:2b:54:6d:
         f4:db:d1:3d:f6:41:d6:2c:28:a1:e4:82:04:5c:18:a2:a5:9a:
         32:ff:d1:11:1c:59:fe:3d:f3:42:96:6b:3b:db:cb:ec:9f:6d:
         5b:44:6e:e3:24:af:83:18:c1:d4:5a:85:30:da:4e:7b:20:27:
         72:a1:fd:17:5f:03:35:90:1c:2d:9b:dd:b8:d5:51:b3:9b:4f:
         5a:8f:ab:f1:ac:47:5b:54:ca:f7:fb:81:1e:38:a9:86:32:cb:
         46:ed:63:e9:0f:c5:04:c4:11:99:b8:07:c8:05:0f:f8:01:30:
         e2:80:db:78:89:4a:63:f6:61:25:92:04:8b:03:4c:6d:45:8e:
         d8:ff:26:1e:3f:01:86:91:96:db:8f:36:47:0c:09:dd:20:aa:
         6e:71:b3:7b:4f:b4:36:3a:68:f0:9b:85:ff:20:c2:b8:50:8d:
         11:2f:b9:02:01:35:54:e3:95:1c:36:fc:16:9a:6a:80:83:f9:
         72:65:ef:99:35:48:bc:76:21:22:85:13:df:d7:28:52:22:8b:
         b0:f7:79:93:0e:fe:2b:02:d9:ea:fe:40:1c:86:fc:4c:98:16:
         ed:25:3e:f0
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICAcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yMzA1MDkw
NDM0MDZaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKENBQzNDQUI5QTBBNjEw
NzFFOTk0QUY2MTc1Q0EyNDVCN0RFNTEwNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8BH5lFB7aFfKEidmz7A58ieXborj6lw6znrXzUaQ5uVVg1itL
JW3yojMp91Zx+njtM+xGHLfAWMQ6a7ILPaiNr3ItKfcXWTxQMmJBg91ZFnJTWYGp
LBPBN6KaxASOOZJ4+keD5BUzTlwuK4hcRhpwE6qwBQxCDQ5HeckLbLs3N8sRx6Qf
JbXBchWIP8O86kJ54F9RTohXMvTCzrFN1J6YVoRs7+k/j71fwH71/zkZ4BVxETzo
/hWoR8HIt7b2l3+r4tHs0d+9wbTxl6G7P9M0I0aPvVpSJWRIwDwgGQsEmT91V5vS
640lbtZCilOGRJpoftYWgL0bw3Wc41fOVk0FAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUysPKuaCmEHHplK9hdcokW33lEHYwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL3lzUEt1YUNtRUhIcGxL
OWhkY29rVzMzbEVIWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALST1gwDQYJKoZIhvcNAQELBQADggEBAM1V/iY7DvzwZo/9Kvf1RnIuFQf9656X
gKE8GsareBjeECtUbfTb0T32QdYsKKHkggRcGKKlmjL/0REcWf4980KWazvby+yf
bVtEbuMkr4MYwdRahTDaTnsgJ3Kh/RdfAzWQHC2b3bjVUbObT1qPq/GsR1tUyvf7
gR44qYYyy0btY+kPxQTEEZm4B8gFD/gBMOKA23iJSmP2YSWSBIsDTG1Fjtj/Jh4/
AYaRltuPNkcMCd0gqm5xs3tPtDY6aPCbhf8gwrhQjREvuQIBNVTjlRw2/BaaaoCD
+XJl75k1SLx2ISKFE9/XKFIii7D3eZMO/isC2er+QByG/EyYFu0lPvA=
-----END CERTIFICATE-----