Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/FCjAXWWSSqucyq_1EYf2JFcg3zY.roa
File:                     FCjAXWWSSqucyq_1EYf2JFcg3zY.roa (raw, json)
Hash identifier:          Otmt/G6hHG/XWzbER07GMVyL79tLxBuh5/LaLPx4dIQ=
Subject key identifier:   14:28:C0:5D:65:92:4A:AB:9C:CA:AF:F5:11:87:F6:24:57:20:DF:36
Certificate issuer:       /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial:       03
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/FCjAXWWSSqucyq_1EYf2JFcg3zY.roa
Signing time:             Wed 01 Jun 2022 07:07:33 +0000
ROA not before:           Wed 01 Jun 2022 07:07:33 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     13444
IP address blocks:        103.221.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
        Validity
            Not Before: Jun  1 07:07:33 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=1428C05D65924AAB9CCAAFF51187F6245720DF36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:ef:7a:1b:79:5e:63:bf:77:87:bc:e5:3e:
                    ba:97:51:27:05:cc:ea:a5:86:24:17:20:3f:73:5f:
                    93:df:71:f7:54:d9:cd:c2:2f:6e:60:dc:b2:ad:d5:
                    39:e5:ec:bc:35:bb:94:ab:29:86:6d:d8:37:6c:d9:
                    58:88:59:3b:e9:81:84:c7:15:0e:ef:e3:53:b5:1b:
                    ed:29:07:61:49:82:c2:73:51:a5:56:a4:20:6d:56:
                    08:f0:2a:4d:a5:db:4b:2a:de:b8:00:2a:6e:4d:fa:
                    25:a3:e2:d3:61:e1:74:3e:53:52:c3:63:ce:c2:70:
                    b4:54:e4:86:54:98:16:0f:b2:68:42:c5:de:95:63:
                    b8:c4:84:89:42:98:12:f7:4a:99:9d:f7:32:4e:51:
                    8b:f3:bb:db:3c:da:e8:6c:8c:75:54:28:9f:0f:a0:
                    44:5e:d4:47:b2:fe:df:7d:ec:db:12:26:be:36:28:
                    2b:df:48:60:cc:ff:23:f7:2a:37:2d:58:81:40:9b:
                    44:aa:43:47:18:fb:b6:29:f5:a1:7a:3a:2d:fe:68:
                    79:7a:e9:0e:a1:e3:fc:91:e9:8e:47:a5:49:27:48:
                    cd:9a:11:f6:e7:7f:1b:29:e9:21:c4:dc:6b:2e:f5:
                    a1:f4:c1:18:3b:51:be:77:cb:bf:0e:f7:4e:82:1e:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:28:C0:5D:65:92:4A:AB:9C:CA:AF:F5:11:87:F6:24:57:20:DF:36
            X509v3 Authority Key Identifier:
                keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/FCjAXWWSSqucyq_1EYf2JFcg3zY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:9e:e5:91:b7:9e:0f:fd:0e:28:fc:8e:19:98:cf:f9:6d:c5:
         f3:cd:e2:f2:af:8e:6b:b0:4d:9d:7e:f0:6b:3c:06:bf:dc:b4:
         54:74:f8:ac:bb:1a:15:cf:e7:81:32:d6:84:67:b7:2f:73:34:
         14:71:38:a4:6c:0a:6f:00:9d:4d:96:52:a0:df:45:64:fa:ce:
         83:38:97:e1:53:b0:91:22:52:1b:57:33:59:5c:72:8d:7a:42:
         1f:e0:65:42:44:ed:a7:a0:77:fb:ec:b9:eb:91:53:88:9b:11:
         11:0d:57:69:81:d9:0a:ed:9c:0b:59:9d:0f:62:d3:aa:af:9d:
         fd:39:74:ec:79:fa:e4:22:53:85:ab:7a:0a:5e:6b:37:1c:78:
         c2:e0:84:5b:41:56:81:b6:60:e4:1f:49:2e:02:f9:6d:53:e9:
         82:9e:f2:31:38:8f:6f:52:2f:75:bb:98:8d:94:6e:ca:97:f0:
         c6:83:dd:08:cc:92:8d:1e:3b:25:48:f2:f7:0d:91:be:f9:90:
         ed:c2:31:6d:21:84:cc:0e:1d:77:99:a1:6a:4e:94:b9:25:c8:
         0d:92:01:e2:1b:f3:35:a2:5f:7c:4a:41:9f:a9:52:0a:11:64:
         fa:42:f1:b3:f2:48:49:41:69:1e:58:4a:48:6b:5c:26:c2:5f:
         e0:cc:c6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org