Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2564/j_kpTNBSK3t7GObLuJuO84r6yXg.roa
File:                     j_kpTNBSK3t7GObLuJuO84r6yXg.roa (raw, json)
Hash identifier:          92qu/6Pnh10gXsJpooRaqzuk+tEHFKZQlp45GGTTNME=
Subject key identifier:   8F:F9:29:4C:D0:52:2B:7B:7B:18:E6:CB:B8:9B:8E:F3:8A:FA:C9:78
Certificate issuer:       /CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177
Certificate serial:       1D6C
Authority key identifier: 6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/j_kpTNBSK3t7GObLuJuO84r6yXg.roa
Signing time:             Tue 08 Apr 2025 01:43:53 +0000
ROA not before:           Tue 08 Apr 2025 01:43:53 +0000
ROA not after:            Fri 03 Apr 2026 08:00:09 +0000
asID:                     131530
IP address blocks:        2403:fc0::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7532 (0x1d6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A21A11AAC4EAE0A630659B31A230B08D6B58177
        Validity
            Not Before: Apr  8 01:43:53 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=8FF9294CD0522B7B7B18E6CBB89B8EF38AFAC978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:b9:4d:15:a1:93:00:08:b9:70:19:8c:b3:
                    4c:c8:7a:dd:6a:aa:e6:35:38:60:ae:4e:ec:2e:84:
                    f1:fe:10:e1:21:db:87:38:41:b1:78:c9:f7:55:90:
                    67:99:81:f3:02:3e:07:cc:75:3f:ae:c7:03:08:c1:
                    f3:c4:c1:2d:ca:7f:f3:4a:7f:6d:8b:9c:e9:13:f8:
                    83:83:2c:c0:12:0c:f4:da:78:91:18:cf:cc:ad:60:
                    96:95:9d:92:49:75:39:0f:cc:16:83:83:b5:d0:8d:
                    c4:95:f1:44:87:05:27:c6:f4:c7:4f:73:4f:96:c7:
                    6e:8f:01:df:ca:3e:63:4a:f8:7b:ea:6b:36:d5:a1:
                    b8:80:98:17:8e:9f:7c:92:6d:f9:cb:88:b2:51:f3:
                    61:d1:e6:25:e9:c7:7c:61:14:9c:ba:da:0b:6e:00:
                    28:ff:71:c1:e9:f6:f9:79:75:71:35:9f:c0:ac:ca:
                    d4:f1:78:4c:fc:ab:b8:27:45:35:f7:ff:88:f5:f1:
                    aa:7d:11:c2:ef:43:dd:7a:a1:08:2c:47:c1:da:52:
                    ed:cc:ed:24:f1:d4:26:a4:26:ed:81:84:c5:d4:7d:
                    df:48:aa:48:3b:f5:47:80:78:60:c8:f3:ad:bf:c9:
                    4a:7e:f8:fc:fd:b4:c1:be:21:04:44:38:31:cb:72:
                    3d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F9:29:4C:D0:52:2B:7B:7B:18:E6:CB:B8:9B:8E:F3:8A:FA:C9:78
            X509v3 Authority Key Identifier:
                keyid:6A:21:A1:1A:AC:4E:AE:0A:63:06:59:B3:1A:23:0B:08:D6:B5:81:77

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/aiGhGqxOrgpjBlmzGiMLCNa1gXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/aiGhGqxOrgpjBlmzGiMLCNa1gXc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2564/j_kpTNBSK3t7GObLuJuO84r6yXg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:88:f4:6a:88:97:35:31:99:e6:19:d6:4a:80:1d:22:be:e0:
         c7:c1:e2:12:c6:15:44:46:c6:9d:7b:83:bf:30:cb:b6:31:0b:
         1b:63:7e:28:d8:e4:3c:06:22:83:78:b1:fc:c9:88:4f:75:23:
         32:24:ef:fa:0d:2c:ac:b1:97:f5:8b:e3:27:41:a6:00:21:fa:
         c2:f1:b7:14:2e:b5:20:8f:c4:37:6d:bf:5d:b9:16:1b:a1:0d:
         79:77:f1:a3:d3:73:0c:b3:4b:db:04:b2:99:4e:f1:f7:ff:02:
         bb:6a:9d:7a:03:e4:5d:6e:6c:c8:79:74:4d:8a:8a:bc:0d:68:
         08:9e:08:55:c4:bf:91:71:a4:f3:21:4d:a7:62:71:04:5b:6a:
         92:04:e2:d1:54:6b:62:9b:53:1c:d2:c9:a5:f5:da:ff:a5:e0:
         94:a2:73:45:1d:61:d3:86:b6:8f:83:db:73:e8:25:bd:69:e2:
         3c:9a:5c:bc:70:13:6f:26:66:fe:05:83:ae:48:8b:8d:dc:95:
         ea:b4:0f:65:f9:9e:fa:c9:3e:03:34:cd:ab:3c:f9:18:4c:4a:
         ea:97:79:ac:ff:4f:93:73:80:e1:d2:10:54:75:16:f7:0e:f3:
         40:8e:82:f6:5d:64:de:46:b5:63:c0:0c:b0:30:49:e1:73:2c:
         0e:e0:39:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----