Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/4LFpsshtCl5LnmvDpGa1XkKk3Zc.roa
File:                     4LFpsshtCl5LnmvDpGa1XkKk3Zc.roa (raw, json)
Hash identifier:          H+dSHzfMctOI3Gj/2fDC8ZeBR0PmkSs86M/cV9LGMtw=
Subject key identifier:   E0:B1:69:B2:C8:6D:0A:5E:4B:9E:6B:C3:A4:66:B5:5E:42:A4:DD:97
Certificate issuer:       /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial:       0397
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/4LFpsshtCl5LnmvDpGa1XkKk3Zc.roa
Signing time:             Fri 26 Aug 2022 14:26:01 +0000
ROA not before:           Fri 26 Aug 2022 14:26:01 +0000
ROA not after:            Wed 19 Jul 2023 01:20:03 +0000
asID:                     398465
IP address blocks:        180.223.0.0/18 maxlen: 24
                          180.223.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
        Validity
            Not Before: Aug 26 14:26:01 2022 GMT
            Not After : Jul 19 01:20:03 2023 GMT
        Subject: CN=E0B169B2C86D0A5E4B9E6BC3A466B55E42A4DD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:21:46:0a:7b:c3:31:44:80:d0:0a:a9:8e:
                    1a:d5:4f:26:39:d9:3d:37:ed:86:47:0d:25:16:21:
                    0f:a6:b4:a6:a9:4f:eb:9d:10:fd:34:a2:ea:a7:92:
                    9f:f5:fd:13:8b:3c:ec:f8:f9:f6:c1:73:ce:cc:c5:
                    ab:d6:d5:88:de:51:80:4a:73:50:5b:b1:e4:c5:0b:
                    e6:3a:f4:27:02:a7:50:47:81:dc:fc:33:49:41:c5:
                    0d:dd:e9:cf:69:e0:12:bd:36:28:e1:fe:19:d6:b0:
                    ef:0e:d5:57:56:22:b6:a4:0e:ad:63:8f:14:b1:d0:
                    7a:71:86:4f:14:66:70:fd:25:d3:a5:d1:63:59:8b:
                    76:e7:fa:c0:df:aa:b7:72:07:31:7e:9e:fc:f7:68:
                    08:7d:61:bd:9e:12:6e:2b:63:c0:74:87:00:72:58:
                    63:10:68:4d:ba:7e:a7:43:8d:4a:f6:9e:21:38:5e:
                    db:56:22:0f:01:90:56:b4:fd:62:31:9e:31:a7:ba:
                    b1:ab:a3:ad:4d:48:8c:0d:5b:c5:20:d8:35:43:4d:
                    9c:21:e6:76:1c:e7:61:5c:6b:ee:91:aa:44:76:cb:
                    00:b0:4e:8d:dd:cb:b7:e9:34:1c:ba:f1:aa:5a:1f:
                    49:72:ac:4a:a0:e3:f5:cd:1c:57:3b:5c:8c:1b:df:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B1:69:B2:C8:6D:0A:5E:4B:9E:6B:C3:A4:66:B5:5E:42:A4:DD:97
            X509v3 Authority Key Identifier:
                keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/4LFpsshtCl5LnmvDpGa1XkKk3Zc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.0.0-180.223.79.255

    Signature Algorithm: sha256WithRSAEncryption
         a5:11:26:c0:33:2d:1c:51:81:c5:17:30:40:9b:ca:20:60:37:
         6e:57:6b:38:7f:61:c3:86:8d:ad:71:b2:f2:d6:31:4f:52:43:
         7c:df:c1:f9:37:d2:99:5f:ac:43:41:4d:3b:5b:7c:2b:52:97:
         38:e6:e1:ce:23:0b:60:79:95:6f:24:e6:fc:75:28:81:84:70:
         09:10:fd:ca:8f:42:b7:c7:69:20:74:8f:ad:dc:8a:8a:25:7f:
         89:f0:37:a3:09:90:2a:b7:a2:89:32:5a:b9:1e:61:fc:1d:47:
         fd:93:b6:6b:99:0a:7e:b7:ca:2c:38:84:f8:ca:3c:8b:7c:cc:
         85:3a:1f:4f:b9:80:29:6d:91:1e:4f:16:55:9e:91:13:3b:c3:
         04:51:89:8d:4f:e2:69:d6:77:20:e9:ea:75:2d:03:37:42:85:
         e3:52:0f:32:3a:5e:57:25:86:30:3a:20:db:05:8d:a4:64:17:
         9e:fc:9a:ae:3c:a5:1f:c4:af:d2:97:58:e6:80:10:47:21:33:
         72:4c:f8:07:ef:97:f8:8a:7f:15:09:ee:7b:3b:9c:46:87:62:
         4a:05:00:fc:2c:98:6b:69:96:b2:b9:a3:43:df:8c:ca:03:f4:
         ff:ed:62:28:ed:ab:81:cb:47:d2:e3:92:b2:19:9f:40:3f:3e:
         13:f7:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----