Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/rfkbtAmPrJUKaweVCi6zD0Brzb4.roa
File:                     rfkbtAmPrJUKaweVCi6zD0Brzb4.roa (raw, json)
Hash identifier:          fHnuIIqHEGJVWUsuMgXqKLnfOnO+8PWwjZMNInG+uCc=
Subject key identifier:   AD:F9:1B:B4:09:8F:AC:95:0A:6B:07:95:0A:2E:B3:0F:40:6B:CD:BE
Certificate issuer:       /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial:       08
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rfkbtAmPrJUKaweVCi6zD0Brzb4.roa
Signing time:             Wed 01 Jun 2022 07:07:34 +0000
ROA not before:           Wed 01 Jun 2022 07:07:34 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     59083
IP address blocks:        103.10.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
        Validity
            Not Before: Jun  1 07:07:34 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=ADF91BB4098FAC950A6B07950A2EB30F406BCDBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:b5:be:29:81:33:f1:1b:85:b1:cf:12:83:
                    6c:dc:0b:92:b7:06:31:88:f7:26:53:30:3d:02:fc:
                    57:f8:c5:07:95:a8:56:37:82:93:c4:58:f8:38:29:
                    6f:e4:a9:4e:1f:a2:f6:62:c8:ce:0e:9c:cd:72:af:
                    c5:80:40:bf:73:51:bb:dc:04:fc:a2:83:00:82:ee:
                    e7:a3:3c:c4:03:52:7f:35:d3:06:45:ce:c1:b2:b7:
                    5e:73:92:f1:9b:2a:d3:d0:73:02:74:ec:00:b8:9f:
                    6d:72:f6:0a:56:c6:bb:35:72:46:37:a8:81:67:25:
                    79:9c:78:c2:3f:b8:44:a8:d3:aa:fd:fb:93:0a:0e:
                    4f:ac:92:a0:36:c9:fc:66:6a:6a:62:c7:8e:f8:ee:
                    39:4f:b5:8a:c9:8b:8a:2e:b8:4d:7b:18:e4:3d:65:
                    60:20:c6:02:06:49:0b:20:c0:f4:15:7e:98:bd:d0:
                    73:79:8a:5c:02:0b:b9:40:12:26:4f:16:e7:5b:d8:
                    6b:e7:68:0a:aa:73:f0:26:9d:85:56:70:f0:05:0f:
                    5b:91:09:5d:00:4c:66:16:30:51:4b:5b:cb:71:5b:
                    4c:e0:52:87:fa:6b:5c:4c:9e:36:b1:90:89:18:9f:
                    74:7d:7e:ed:9e:fd:0c:a7:6a:93:1b:03:4f:97:35:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F9:1B:B4:09:8F:AC:95:0A:6B:07:95:0A:2E:B3:0F:40:6B:CD:BE
            X509v3 Authority Key Identifier:
                keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/rfkbtAmPrJUKaweVCi6zD0Brzb4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:97:c7:00:37:eb:8b:3d:b1:2a:6a:ec:11:84:e7:0c:d9:04:
         b9:fe:97:67:20:3f:b7:93:00:20:d3:0b:a9:af:6e:c1:07:13:
         b2:b4:70:38:f4:80:74:da:df:a2:9a:a7:c5:a5:b2:ba:cc:f9:
         de:a6:71:25:60:f1:89:68:9b:7a:5b:b9:c0:5b:2c:13:d9:de:
         a6:c8:04:bf:73:52:2d:0a:55:0a:a9:28:74:97:5a:87:64:6f:
         9c:a3:e4:95:a7:f5:29:00:70:ed:61:d3:bb:f1:14:9e:72:a7:
         80:11:19:61:0f:77:8c:33:58:8b:5e:08:5f:02:e2:00:76:68:
         d6:af:9e:b0:16:16:d9:14:60:50:90:eb:17:7a:bf:82:3b:52:
         b0:3e:ca:38:43:4f:a6:2c:5f:9d:12:26:48:ca:f9:fe:d2:0b:
         81:7e:b9:65:47:01:85:40:fb:1b:9f:3f:c7:be:0e:81:79:a3:
         6d:98:5b:33:60:9b:42:c7:75:76:47:2f:77:d8:51:4b:e7:26:
         db:1f:3a:50:46:ab:6e:99:ad:65:79:8d:29:a1:67:cc:eb:7e:
         a8:3e:60:8e:d0:31:74:f5:36:9d:65:ca:2e:3d:b4:33:e2:d8:
         73:e8:ad:ce:b4:0f:0d:d4:26:2e:f8:9c:4b:19:7b:13:59:0f:
         7d:37:ed:00
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NUI0
NzE0QzRGNjFCRUEwNEEwMkNGOUNGNTYzQUUxMzRGNDc5Qzg1MB4XDTIyMDYwMTA3
MDczNFoXDTIzMDYwMTA2NTg1NFowMzExMC8GA1UEAxMoQURGOTFCQjQwOThGQUM5
NTBBNkIwNzk1MEEyRUIzMEY0MDZCQ0RCRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALt7tb4pgTPxG4WxzxKDbNwLkrcGMYj3JlMwPQL8V/jFB5WoVjeC
k8RY+Dgpb+SpTh+i9mLIzg6czXKvxYBAv3NRu9wE/KKDAILu56M8xANSfzXTBkXO
wbK3XnOS8Zsq09BzAnTsALifbXL2ClbGuzVyRjeogWcleZx4wj+4RKjTqv37kwoO
T6ySoDbJ/GZqamLHjvjuOU+1ismLii64TXsY5D1lYCDGAgZJCyDA9BV+mL3Qc3mK
XAILuUASJk8W51vYa+doCqpz8CadhVZw8AUPW5EJXQBMZhYwUUtby3FbTOBSh/pr
XEyeNrGQiRifdH1+7Z79DKdqkxsDT5c1dZMCAwEAAaOCAfEwggHtMB0GA1UdDgQW
BBSt+Ru0CY+slQprB5UKLrMPQGvNvjAfBgNVHSMEGDAWgBR1tHFMT2G+oEoCz5z1
Y64TT0echTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Nzcv
ZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9kYlJ4VEU5aHZxQktBcy1jOVdPdUUwOUhuSVUuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81NzcvcmZrYnRBbVBySlVLYXdl
VkNpNnpEMEJyemI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AmcKADANBgkqhkiG9w0BAQsFAAOCAQEApJfHADfriz2xKmrsEYTnDNkEuf6XZyA/
t5MAINMLqa9uwQcTsrRwOPSAdNrfopqnxaWyusz53qZxJWDxiWibelu5wFssE9ne
psgEv3NSLQpVCqkodJdah2RvnKPklaf1KQBw7WHTu/EUnnKngBEZYQ93jDNYi14I
XwLiAHZo1q+esBYW2RRgUJDrF3q/gjtSsD7KOENPpixfnRImSMr5/tILgX65ZUcB
hUD7G58/x74OgXmjbZhbM2CbQsd1dkcvd9hRS+cm2x86UEarbpmtZXmNKaFnzOt+
qD5gjtAxdPU2nWXKLj20M+LYc+itzrQPDdQmLvicSxl7E1kPfTftAA==
-----END CERTIFICATE-----