Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/HTsYGQi4kERFYb28B2Rs6X0cMb4.roa
File:                     HTsYGQi4kERFYb28B2Rs6X0cMb4.roa (raw, json)
Hash identifier:          PW0NTfcCxehXF3dJLm0964OS7mzv0GIJq5nu7WW8c/U=
Subject key identifier:   1D:3B:18:19:08:B8:90:44:45:61:BD:BC:07:64:6C:E9:7D:1C:31:BE
Certificate issuer:       /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial:       03
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/HTsYGQi4kERFYb28B2Rs6X0cMb4.roa
Signing time:             Thu 27 May 2021 05:01:55 +0000
ROA not before:           Thu 27 May 2021 05:01:55 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     13444
IP address blocks:        103.221.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
        Validity
            Not Before: May 27 05:01:55 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=1D3B181908B890444561BDBC07646CE97D1C31BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:39:4d:e9:a7:a5:6a:d1:7d:52:1b:cd:c9:
                    04:99:8b:ce:a9:e6:ab:70:4b:3e:42:f7:ee:29:90:
                    f8:94:9a:21:86:5f:4e:89:c3:cd:1c:16:4c:c4:ae:
                    b6:d6:d3:0c:ef:b7:99:55:fc:8e:e5:3a:c4:86:bd:
                    df:ca:fb:95:95:06:38:fc:a0:9d:9c:b7:13:30:f7:
                    35:e3:7b:9d:71:8c:22:43:6c:7d:3a:81:ba:6a:aa:
                    a4:e7:74:73:01:79:f9:73:b8:ec:40:88:a2:6e:8b:
                    46:6c:a3:3f:3e:a5:a1:4f:dd:58:ef:e7:08:bc:38:
                    c6:3c:e0:0d:ba:dd:01:35:74:ee:fd:b2:68:12:74:
                    4a:80:eb:43:33:5d:c7:a3:27:f6:37:fb:50:e4:2a:
                    d8:f7:42:35:59:70:dd:6a:c6:19:56:32:42:e7:74:
                    4e:26:49:3f:c6:59:5a:98:ba:29:c7:e4:e0:69:27:
                    ad:6f:b5:ab:5a:71:59:ce:99:8d:99:69:43:ec:49:
                    f9:bd:22:65:4d:3c:7c:e8:9c:a1:78:bb:cf:91:72:
                    6b:f8:12:5d:d7:49:80:bf:e6:4b:73:61:9f:8b:bb:
                    09:61:31:51:7f:59:e6:21:98:0d:f1:63:b0:ec:2b:
                    1b:04:b4:36:04:08:a7:78:e9:51:be:40:c3:de:02:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3B:18:19:08:B8:90:44:45:61:BD:BC:07:64:6C:E9:7D:1C:31:BE
            X509v3 Authority Key Identifier:
                keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/HTsYGQi4kERFYb28B2Rs6X0cMb4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:98:ae:ce:45:b1:d2:12:9c:f2:a1:74:c5:2a:fe:49:5c:
         c9:77:a5:70:7c:42:dc:88:69:a4:63:77:7f:43:42:d3:e0:8b:
         f4:7e:16:5b:1e:a7:9f:54:4d:5d:e5:57:97:b6:12:a5:0d:ae:
         95:5a:fc:a6:88:5d:bd:9d:9d:b7:55:52:2b:18:6a:d6:d3:5f:
         15:0a:fe:44:1e:e2:2b:f0:d1:ae:a5:cb:7f:15:10:95:38:e6:
         44:7b:99:af:61:e6:dc:cc:9b:39:67:f8:2d:d8:bf:2b:b2:81:
         73:94:80:a9:26:72:0d:ef:b7:6f:9c:f2:91:a1:51:7b:b7:a7:
         7b:0b:32:a6:24:9a:15:f9:74:01:e9:f6:cc:17:e1:3d:ee:a4:
         c6:ce:03:46:74:92:83:ec:bc:3f:62:2e:0a:75:f6:73:1a:25:
         02:33:59:3d:3e:46:3f:98:06:af:1d:64:b1:37:63:26:69:c1:
         bc:40:3f:a3:2c:4f:f6:6c:3f:c2:56:91:6e:a9:48:91:df:d7:
         4f:67:e1:a5:11:d6:0f:f0:6e:47:67:6e:24:2a:64:ac:08:a5:
         93:13:29:65:fb:21:78:67:c8:5a:bc:ee:68:6f:b2:bb:78:55:
         01:9c:1c:62:bd:22:b5:00:06:ff:18:74:c3:c8:7c:fa:11:58:
         ac:61:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----