Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/mkyLwx9KvUNpOLLfymRexw_cKgY.roa
File:                     mkyLwx9KvUNpOLLfymRexw_cKgY.roa (raw, json)
Hash identifier:          O6BhbMAj8MELUKoH5f8Ot04NFYafQVEM+mTSlPQ1VIY=
Subject key identifier:   9A:4C:8B:C3:1F:4A:BD:43:69:38:B2:DF:CA:64:5E:C7:0F:DC:2A:06
Certificate issuer:       /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial:       0A51
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/mkyLwx9KvUNpOLLfymRexw_cKgY.roa
Signing time:             Tue 07 Jun 2022 10:05:35 +0000
ROA not before:           Tue 07 Jun 2022 10:05:35 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     4811
IP address blocks:        2401:3480:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
        Validity
            Not Before: Jun  7 10:05:35 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=9A4C8BC31F4ABD436938B2DFCA645EC70FDC2A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:71:a0:0b:8b:29:42:f8:30:48:9e:68:51:
                    d1:31:a0:cb:d1:27:70:38:10:88:a1:79:77:42:12:
                    14:7d:71:5b:8a:d1:93:2e:46:e3:73:70:75:e5:07:
                    8a:6f:49:12:3a:9b:33:cc:49:ce:9e:ca:99:0d:dc:
                    8d:21:a3:10:73:77:a6:1a:df:2a:34:d2:92:55:4d:
                    41:e8:80:56:d8:68:40:e5:b9:d0:49:58:6e:35:1f:
                    fc:91:49:d0:86:48:a0:35:4c:cc:0d:67:52:67:ee:
                    4a:e8:33:5a:1b:e3:bf:9c:11:9c:80:ec:41:da:4d:
                    05:2e:a1:85:24:64:02:3a:c5:09:2e:bb:7f:f8:b7:
                    95:9d:2c:70:f8:f1:4f:12:61:48:d1:42:35:d8:04:
                    ca:4e:1b:88:7d:fa:e7:79:28:71:16:6b:62:55:09:
                    b7:2d:a8:e0:d6:54:b8:f3:ac:5b:a7:39:93:2f:8b:
                    5a:21:04:39:b9:25:48:7c:82:4e:8c:f2:51:a0:99:
                    83:0d:26:e9:26:59:15:e5:ba:2b:ae:2f:10:1b:19:
                    f2:df:d7:37:2f:24:2e:23:4f:a4:84:27:f8:79:34:
                    16:68:46:df:d2:cf:27:ef:53:95:87:19:97:59:0f:
                    84:53:8f:13:6b:bf:9e:9e:85:04:bd:ab:17:cc:78:
                    b2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4C:8B:C3:1F:4A:BD:43:69:38:B2:DF:CA:64:5E:C7:0F:DC:2A:06
            X509v3 Authority Key Identifier:
                keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/mkyLwx9KvUNpOLLfymRexw_cKgY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3480:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:ee:fc:d4:88:9a:10:8d:0d:32:d5:1b:26:7a:ae:ad:45:04:
         3a:a2:2e:ad:76:ef:51:0d:8d:36:79:1b:d7:36:96:a1:fd:e4:
         06:45:fa:a2:4a:a8:30:8d:ed:d0:58:c1:68:63:09:9b:16:45:
         e9:1f:51:51:8e:45:1d:48:80:97:97:bb:26:6d:cf:49:cb:39:
         1f:66:3a:5f:ee:a9:97:1e:cf:5c:6f:6f:19:c8:2e:27:cc:ea:
         8b:fe:42:85:ab:7e:83:f3:8b:23:28:60:d6:43:3b:3d:34:10:
         ff:16:96:1a:d1:bf:d0:3a:92:cc:8e:b5:18:75:dd:8e:f0:93:
         01:38:a2:4b:be:85:9a:29:2e:ec:95:66:f9:09:63:62:8d:c8:
         b8:ca:81:2e:29:1d:ce:c7:02:70:24:89:43:af:b5:ed:2e:b3:
         f0:e5:21:5f:47:c2:e6:76:7f:01:de:23:3d:e4:61:b4:e8:a4:
         07:62:b8:21:26:d0:11:09:4e:08:34:e2:41:70:51:d7:01:58:
         72:eb:0c:a8:35:c7:6b:d4:a6:eb:a5:11:64:0c:c6:b0:7a:ad:
         9c:90:eb:8d:d3:36:57:63:ec:41:80:4c:f4:9d:79:24:57:7a:
         64:1a:d0:2c:a2:4d:a3:8b:49:a2:a2:64:12:12:8f:b4:a9:4f:
         23:81:5a:af
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICClEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3
MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yMjA2MDcx
MDA1MzVaFw0yMzA2MDcwMzM0NDNaMDMxMTAvBgNVBAMTKDlBNEM4QkMzMUY0QUJE
NDM2OTM4QjJERkNBNjQ1RUM3MEZEQzJBMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCil3GgC4spQvgwSJ5oUdExoMvRJ3A4EIiheXdCEhR9cVuK0ZMu
RuNzcHXlB4pvSRI6mzPMSc6eypkN3I0hoxBzd6Ya3yo00pJVTUHogFbYaEDludBJ
WG41H/yRSdCGSKA1TMwNZ1Jn7kroM1ob47+cEZyA7EHaTQUuoYUkZAI6xQkuu3/4
t5WdLHD48U8SYUjRQjXYBMpOG4h9+ud5KHEWa2JVCbctqODWVLjzrFunOZMvi1oh
BDm5JUh8gk6M8lGgmYMNJukmWRXluiuuLxAbGfLf1zcvJC4jT6SEJ/h5NBZoRt/S
zyfvU5WHGZdZD4RTjxNrv56ehQS9qxfMeLKtAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUmkyLwx9KvUNpOLLfymRexw/cKgYwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI
l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3
L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L21reUx3eDlLdlVOcE9M
TGZ5bVJleHdfY0tnWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAkATSAIAAwDQYJKoZIhvcNAQELBQADggEBAJnu/NSImhCNDTLVGyZ6rq1FBDqi
Lq1271ENjTZ5G9c2lqH95AZF+qJKqDCN7dBYwWhjCZsWRekfUVGORR1IgJeXuyZt
z0nLOR9mOl/uqZcez1xvbxnILifM6ov+QoWrfoPziyMoYNZDOz00EP8WlhrRv9A6
ksyOtRh13Y7wkwE4oku+hZopLuyVZvkJY2KNyLjKgS4pHc7HAnAkiUOvte0us/Dl
IV9HwuZ2fwHeIz3kYbTopAdiuCEm0BEJTgg04kFwUdcBWHLrDKg1x2vUpuulEWQM
xrB6rZyQ643TNldj7EGATPSdeSRXemQa0CyiTaOLSaKiZBISj7SpTyOBWq8=
-----END CERTIFICATE-----