Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/_0wjU80Dl1RA84FSbpA_N5Vaw-s.roa
File:                     _0wjU80Dl1RA84FSbpA_N5Vaw-s.roa (raw, json)
Hash identifier:          65VIMV9EEI4xbnrbiVl9SFcWzBbWzIfnQGrx/yWbm8A=
Subject key identifier:   FF:4C:23:53:CD:03:97:54:40:F3:81:52:6E:90:3F:37:95:5A:C3:EB
Certificate issuer:       /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial:       04A6
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/_0wjU80Dl1RA84FSbpA_N5Vaw-s.roa
Signing time:             Tue 30 Nov 2021 04:45:03 +0000
ROA not before:           Tue 30 Nov 2021 04:45:03 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     23724
IP address blocks:        2401:3480::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1190 (0x4a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
        Validity
            Not Before: Nov 30 04:45:03 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=FF4C2353CD03975440F381526E903F37955AC3EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:de:41:3e:a8:06:c9:f4:6e:8c:c4:7a:99:9b:
                    82:39:6a:43:29:18:18:95:dc:f9:39:97:35:4c:02:
                    a1:0e:23:1c:01:a1:df:37:a8:0e:eb:e1:07:b5:02:
                    5f:c0:96:e9:37:11:6e:92:af:c1:3c:f5:9c:bb:6a:
                    fb:4d:38:83:9d:83:27:c1:15:fe:1b:5e:be:4b:7f:
                    e6:59:e1:5c:f4:80:21:ed:27:83:83:d1:b0:e3:b0:
                    7b:6b:f6:b6:32:2e:a0:c0:91:0b:f1:84:d0:5b:9e:
                    13:dd:fd:a5:73:5e:e0:dc:6f:bd:9c:f8:a2:9f:ab:
                    62:43:06:7b:db:71:d3:bc:e6:a3:8f:4b:90:30:32:
                    a0:fa:1d:35:9f:b6:c9:fa:09:b8:49:cd:3e:8b:9b:
                    20:83:83:57:80:85:39:5d:cf:0d:8a:94:0f:8b:2b:
                    42:a7:45:08:38:dc:25:ed:a8:3a:d0:ce:b1:cf:96:
                    c4:95:fd:11:e3:7d:ab:36:58:3e:79:c6:1b:22:ea:
                    a3:95:bd:69:97:4b:90:ad:a0:0d:99:b8:a5:a1:b5:
                    0c:05:77:31:a7:a9:c5:f1:9a:c5:fc:74:ab:65:e7:
                    d7:e7:15:c8:dc:45:ce:f3:cb:8e:06:05:29:84:94:
                    0d:6e:4a:ce:0f:af:ee:9a:61:1f:a8:a3:f7:dc:8c:
                    a6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4C:23:53:CD:03:97:54:40:F3:81:52:6E:90:3F:37:95:5A:C3:EB
            X509v3 Authority Key Identifier:
                keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/_0wjU80Dl1RA84FSbpA_N5Vaw-s.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3480::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:24:3c:06:b4:fd:cc:33:c9:26:c6:41:0c:d9:3f:68:59:b4:
         23:1b:67:79:b9:cb:61:a9:23:06:43:f6:86:61:5f:42:c5:7f:
         06:b1:07:05:7c:3f:b2:98:e3:77:78:de:98:b2:e9:48:bd:34:
         b9:c5:b1:75:84:45:85:76:89:e8:ab:a0:b5:a7:0b:50:3c:c4:
         fb:2c:1f:06:3e:6a:1c:7c:6e:29:28:b8:64:09:62:5b:dd:b6:
         12:48:86:52:58:33:d1:75:ee:cf:52:53:b9:19:23:c8:50:04:
         cc:ad:86:87:11:87:82:cb:8c:7e:2b:f0:5f:9d:29:3a:95:e7:
         1e:31:8e:81:40:f0:4c:e0:16:d8:7a:1f:34:79:11:6b:b3:21:
         c7:c5:44:23:fb:81:9b:09:6c:df:f4:2e:70:48:83:0e:ca:f9:
         0f:18:d0:e7:2e:54:9f:d2:12:a5:17:58:8d:75:d8:50:22:ea:
         82:06:fe:d6:ea:a8:15:65:a0:a4:31:f9:1d:7f:4b:a2:48:0e:
         bc:15:86:8a:78:06:67:0b:51:97:49:3e:6a:dd:68:4a:27:de:
         5b:8c:31:94:27:27:22:34:e1:d0:7c:b1:60:bb:b2:8d:ae:03:
         04:18:6f:9f:89:1f:1b:64:1c:db:56:5e:3c:65:04:38:22:1f:
         cb:58:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----