Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/Isr3HXqDcYC7RuaNuwGYNnpV6lQ.roa
File:                     Isr3HXqDcYC7RuaNuwGYNnpV6lQ.roa (raw, json)
Hash identifier:          Hobp72OvBPQ7Xcl/VYiKZBBsVPwowbzrf8BM5moZJR8=
Subject key identifier:   22:CA:F7:1D:7A:83:71:80:BB:46:E6:8D:BB:01:98:36:7A:55:EA:54
Certificate issuer:       /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial:       09
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Isr3HXqDcYC7RuaNuwGYNnpV6lQ.roa
Signing time:             Thu 27 May 2021 05:01:58 +0000
ROA not before:           Thu 27 May 2021 05:01:58 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     136897
IP address blocks:        103.198.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
        Validity
            Not Before: May 27 05:01:58 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=22CAF71D7A837180BB46E68DBB0198367A55EA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d9:9e:a6:f2:cc:44:6e:84:16:0c:c6:8f:75:
                    8d:df:43:98:b3:f9:69:a9:37:66:3d:b2:58:45:58:
                    f1:dd:41:a3:f8:6a:3c:6a:f6:d7:22:a7:94:d9:cc:
                    6b:b2:40:00:1c:15:8a:77:a2:1d:a1:88:48:26:23:
                    19:f2:8e:ea:89:27:47:08:7b:00:62:f1:fd:11:ef:
                    c5:e3:cd:cd:6c:90:7c:0b:9b:d8:3b:0c:20:5d:c0:
                    61:1d:75:90:13:df:47:62:59:2f:a6:bc:01:5b:b2:
                    64:1c:12:1f:bc:b7:16:18:c4:35:d8:aa:a5:f7:ce:
                    0e:8b:cc:a7:8c:6a:5f:fe:a6:50:8b:aa:ad:7b:fc:
                    4c:e2:2f:6f:52:26:7b:f7:f8:cd:de:44:58:86:f8:
                    2e:f4:2e:24:a6:e0:4f:06:77:cb:2b:f5:81:aa:3c:
                    75:96:fa:8c:0f:0b:a8:6c:73:c4:7c:07:61:5e:b3:
                    73:3c:24:1a:1f:76:51:2b:6f:45:eb:19:57:de:37:
                    38:db:fc:39:35:f4:d3:a5:ca:8f:d7:b2:60:eb:5b:
                    4d:27:a6:6b:23:21:2f:f3:16:4c:cb:8e:1f:97:2d:
                    72:fa:21:33:3b:55:a6:80:23:67:83:d3:ba:0b:41:
                    07:b5:2c:09:8b:f6:31:b4:6a:17:ef:03:9f:26:f9:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CA:F7:1D:7A:83:71:80:BB:46:E6:8D:BB:01:98:36:7A:55:EA:54
            X509v3 Authority Key Identifier:
                keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/Isr3HXqDcYC7RuaNuwGYNnpV6lQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:09:ae:40:77:8c:e9:a3:ec:5d:b8:8e:30:a4:ef:a5:74:69:
         80:6b:3c:56:82:c5:92:7c:73:cf:54:ba:1d:e0:92:c7:f2:50:
         b1:a8:38:ac:e0:70:23:a0:f4:04:b3:06:f4:1c:dd:2a:ae:42:
         8e:32:ea:4c:26:20:4b:8a:71:5a:47:08:cd:34:56:6c:01:1f:
         c1:ca:7d:e2:b8:83:18:80:79:11:4e:7e:ee:e3:d6:01:4f:88:
         09:98:a7:61:71:12:16:e0:e4:06:c2:db:25:ca:3e:91:23:e9:
         09:9d:1a:b5:07:01:1f:a5:fa:0e:29:9e:a5:b5:bf:05:1a:ee:
         53:b6:0c:24:f9:df:ca:c0:b2:69:a1:69:4b:2d:3b:bf:00:8a:
         1e:1f:46:24:49:88:f3:e1:91:40:46:b3:50:44:e5:ae:0f:71:
         1c:8a:db:98:c3:31:00:23:ce:ec:fb:cd:54:5a:3d:ac:06:8d:
         e7:c6:0b:a3:f2:86:0a:b1:15:cd:ec:fb:f3:0b:5b:38:d5:7e:
         97:2c:3d:01:ae:9d:af:9d:b5:4e:88:23:40:b9:5a:ab:bc:79:
         b4:db:5e:95:7a:43:81:35:63:17:07:05:dc:b0:2c:ee:e7:26:
         66:9c:78:f4:98:25:c1:a4:78:87:36:da:d9:45:a6:0a:f1:21:
         2c:44:9a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----