Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/621/D7X78mO_LjVRyMPxk8Boqbl33O0.roa
File:                     D7X78mO_LjVRyMPxk8Boqbl33O0.roa (raw, json)
Hash identifier:          s6fRPafzBn1ZwgnvWOTz/8QlrFgQ5dZi6REDwDF6NMU=
Subject key identifier:   0F:B5:FB:F2:63:BF:2E:35:51:C8:C3:F1:93:C0:68:A9:B9:77:DC:ED
Certificate issuer:       /CN=63D7584E97DF7433476086F6057EA5E64D7A6D90
Certificate serial:       04
Authority key identifier: 63:D7:58:4E:97:DF:74:33:47:60:86:F6:05:7E:A5:E6:4D:7A:6D:90
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9dYTpffdDNHYIb2BX6l5k16bZA.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/D7X78mO_LjVRyMPxk8Boqbl33O0.roa
Signing time:             Thu 27 May 2021 05:07:33 +0000
ROA not before:           Thu 27 May 2021 05:07:33 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     138915
IP address blocks:        27.0.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63D7584E97DF7433476086F6057EA5E64D7A6D90
        Validity
            Not Before: May 27 05:07:33 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0FB5FBF263BF2E3551C8C3F193C068A9B977DCED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:f9:c4:ff:68:b6:a0:9d:17:bc:07:0d:6c:
                    b4:33:fd:9a:da:bc:58:05:ab:9e:bb:33:68:11:a1:
                    66:f8:bf:02:6a:30:fa:39:ed:ae:59:9a:a0:b4:31:
                    3f:20:9d:c8:a4:8b:d9:f7:10:08:3f:95:76:42:4b:
                    54:3c:68:b2:b8:8e:c5:86:de:e6:ff:80:38:25:5f:
                    00:0a:41:d9:81:19:07:dc:7d:5e:d4:29:e6:4a:c5:
                    0f:6e:98:ae:ba:b6:09:08:fb:88:66:4f:fb:a5:ec:
                    49:89:79:7a:6a:dc:27:88:ee:5f:88:46:c9:33:78:
                    d1:64:ea:36:67:2c:6d:e4:d4:7c:2c:4b:fb:c5:24:
                    00:f5:f6:bd:9b:2e:8b:24:e9:86:bf:4c:72:de:af:
                    c6:55:ec:c8:d9:9e:62:7d:a9:6a:13:06:25:4c:54:
                    5b:fc:23:e0:74:81:a5:02:cf:d3:23:e4:3c:c1:84:
                    4a:e1:b6:aa:fb:61:21:6e:2a:23:0f:c2:f1:c3:76:
                    97:d7:2b:f5:f0:9b:49:99:fd:11:69:85:15:06:10:
                    0f:2a:37:2a:aa:7a:d0:b2:59:ff:a4:1b:23:d5:fd:
                    53:cf:4a:d7:e9:98:39:98:cd:b4:78:e8:8d:10:a8:
                    bb:51:37:2d:94:5b:9a:32:a6:25:62:65:25:e5:6b:
                    ff:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:FB:F2:63:BF:2E:35:51:C8:C3:F1:93:C0:68:A9:B9:77:DC:ED
            X509v3 Authority Key Identifier:
                keyid:63:D7:58:4E:97:DF:74:33:47:60:86:F6:05:7E:A5:E6:4D:7A:6D:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/Y9dYTpffdDNHYIb2BX6l5k16bZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y9dYTpffdDNHYIb2BX6l5k16bZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/621/D7X78mO_LjVRyMPxk8Boqbl33O0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8a:af:44:4d:ee:e4:2d:da:13:53:e6:6d:a5:f9:ef:2b:54:
         5a:19:a2:fd:03:4c:f2:73:a8:2a:19:af:24:59:35:32:cd:5d:
         34:85:10:bd:91:5f:16:fe:74:a4:19:f1:97:12:f4:8b:2a:7d:
         13:a7:7e:8e:b8:4a:e8:24:cd:2b:13:55:f7:57:02:a6:60:79:
         45:34:7c:a7:43:fc:70:95:03:a6:6e:48:3a:22:34:10:50:27:
         e0:7c:71:a9:36:9c:8d:4f:f6:be:46:75:69:34:2b:0a:f8:3e:
         e9:b5:f3:70:bd:6b:c4:18:1e:ac:a2:d1:34:d5:e1:9a:5d:a5:
         86:3d:47:17:48:6d:43:57:f1:b6:38:b9:32:22:21:e7:f2:0a:
         11:c4:05:71:e7:a6:a7:e4:f3:f2:b0:55:b5:66:28:c9:59:96:
         98:68:39:24:02:61:c4:c7:b6:3c:d8:df:cd:2b:89:12:88:3f:
         9f:7a:7e:a4:5f:1c:6a:ff:7b:14:10:4e:46:5e:e4:40:5b:4c:
         fb:17:b1:33:3e:0e:19:b0:e2:77:07:6b:d1:48:0c:13:01:dd:
         b5:03:a9:fa:58:3d:04:f8:f9:1d:6c:50:bc:ae:a8:b4:db:52:
         9b:dd:7f:9d:90:37:d4:a5:ed:52:de:d7:69:a6:b5:92:5b:9e:
         67:5a:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----