Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/ygw6UmSRrXH4RP7vMXpJFCNY8KU.roa
File:                     ygw6UmSRrXH4RP7vMXpJFCNY8KU.roa (raw, json)
Hash identifier:          d0ye8vVP4pEyH5glz0nKsjTiErWG7srVNEr4+IsmnC4=
Subject key identifier:   CA:0C:3A:52:64:91:AD:71:F8:44:FE:EF:31:7A:49:14:23:58:F0:A5
Certificate issuer:       /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial:       10
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ygw6UmSRrXH4RP7vMXpJFCNY8KU.roa
Signing time:             Wed 01 Jun 2022 07:07:37 +0000
ROA not before:           Wed 01 Jun 2022 07:07:37 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     50983
IP address blocks:        2403:1b80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
        Validity
            Not Before: Jun  1 07:07:37 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=CA0C3A526491AD71F844FEEF317A49142358F0A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:89:11:71:a1:89:25:87:6d:75:82:2b:c1:c3:
                    93:75:09:23:5e:c9:7c:14:a4:ae:ca:f1:e9:2f:54:
                    f2:63:13:ef:98:9b:9f:1e:0d:c0:15:6b:98:0c:3a:
                    59:45:d2:82:c5:e3:b0:0e:2b:77:01:bd:a4:00:9d:
                    b1:12:ca:ea:c0:82:aa:4f:4a:21:bc:53:73:fc:df:
                    a5:98:78:60:ee:ac:03:e1:73:42:64:d5:54:45:65:
                    48:55:57:02:30:ce:13:60:46:ef:9b:02:d6:b7:be:
                    97:bc:82:9a:a7:71:19:7c:74:f0:23:70:41:b6:ae:
                    4f:34:ac:f9:03:03:b6:d0:9f:de:e2:85:24:98:a7:
                    9e:ca:98:e4:d4:1d:7e:e6:d0:5f:d6:c0:f7:20:cf:
                    f8:43:cb:a8:63:55:50:b4:c9:f4:41:e0:d5:8d:82:
                    90:c0:21:d0:14:4a:c1:0e:6b:9a:8d:22:c4:4d:fe:
                    33:31:77:d4:8d:ab:fe:44:22:48:04:a3:e4:fd:cd:
                    40:dd:57:66:e0:b8:be:36:63:c8:32:68:3e:6f:b5:
                    ac:87:12:08:a7:70:ba:3b:36:18:23:9d:d0:6c:8f:
                    c7:d2:7b:1d:e1:33:42:83:9f:8a:68:bc:91:d9:dc:
                    52:8a:23:23:d7:95:25:43:9f:8b:9e:ec:d8:eb:66:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0C:3A:52:64:91:AD:71:F8:44:FE:EF:31:7A:49:14:23:58:F0:A5
            X509v3 Authority Key Identifier:
                keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/ygw6UmSRrXH4RP7vMXpJFCNY8KU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:1a:43:b4:bb:55:1a:72:95:78:f1:c0:bc:7d:cc:d1:b8:e0:
         c7:97:7b:ce:89:59:17:55:a9:9e:aa:e9:c9:f1:fa:fa:1a:be:
         e8:fb:8a:6d:ad:5b:7d:a4:6e:84:37:ad:a7:1b:96:b3:60:17:
         57:16:a3:3d:ed:39:23:e2:02:60:cd:b8:65:69:72:86:da:25:
         e3:d2:4c:95:b8:68:02:96:71:9d:a1:a8:60:19:44:7a:9f:6f:
         93:9a:1d:18:a2:99:30:41:3b:e8:e3:93:dd:c2:22:48:f9:45:
         ad:83:f8:74:43:d5:18:f5:7d:f0:78:05:a6:98:0e:d8:58:8b:
         8b:e3:6a:a3:1e:52:62:29:15:82:64:69:1e:30:39:26:97:fb:
         7a:7d:3d:7a:3d:82:65:52:96:91:c3:69:34:84:89:86:31:47:
         44:b5:8b:99:34:73:3b:52:89:92:ad:e4:af:b0:a0:a0:8f:8a:
         a6:a5:38:c4:cd:ca:be:87:b7:c7:1d:e2:ed:f8:4f:af:02:9c:
         86:61:db:c4:61:60:7f:bd:7a:5b:e0:88:cc:63:c1:5f:48:c8:
         0b:f2:56:e4:b8:c7:ea:09:62:7e:a8:4f:c8:c7:c5:39:df:dc:
         6a:9c:06:c8:16:00:d2:8a:dd:4d:f0:3a:97:36:52:fc:97:21:
         f9:b8:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----