Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/1kuIPocoN7VfJc7lOgksOdSlAuw.roa
File:                     1kuIPocoN7VfJc7lOgksOdSlAuw.roa (raw, json)
Hash identifier:          3R16cSE8YkOLl+fiiAfVpsQFFHgfpiPKLlh1YbPil8o=
Subject key identifier:   D6:4B:88:3E:87:28:37:B5:5F:25:CE:E5:3A:09:2C:39:D4:A5:02:EC
Certificate issuer:       /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial:       0958
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/1kuIPocoN7VfJc7lOgksOdSlAuw.roa
Signing time:             Tue 07 Jun 2022 10:08:07 +0000
ROA not before:           Tue 07 Jun 2022 10:08:07 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     22773
IP address blocks:        101.49.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392 (0x958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
        Validity
            Not Before: Jun  7 10:08:07 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=D64B883E872837B55F25CEE53A092C39D4A502EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:8b:7a:ad:d8:a4:33:dd:52:f5:74:ea:e0:
                    bc:96:c4:13:03:65:69:df:75:00:77:5f:fd:68:d7:
                    1a:07:55:64:5a:cb:d5:25:85:01:93:b7:59:f1:08:
                    f8:c1:2e:c5:e0:30:58:be:ba:02:36:43:01:a9:86:
                    5a:e7:63:0e:d7:8d:d5:b7:75:bf:c6:38:95:9f:a1:
                    bd:37:fd:e7:b4:39:56:43:de:da:09:ee:0c:32:b0:
                    0a:62:f1:ba:40:f5:34:d8:d4:5c:e5:46:00:0f:27:
                    5e:8d:61:eb:e3:69:a2:5b:60:ca:4d:76:4e:59:bc:
                    ee:b1:06:ee:89:81:03:ee:a4:0a:8d:c2:14:a5:cd:
                    6e:10:49:b5:b8:5e:0c:05:d3:8a:8d:40:5a:b1:a8:
                    d8:9c:2f:93:8c:b1:8e:57:c3:14:83:32:cf:c1:60:
                    56:da:46:49:d4:b9:4f:96:b9:95:1b:96:af:e6:7f:
                    67:a8:ed:26:a6:1d:38:0a:dd:ca:ea:79:07:bf:09:
                    5a:26:25:8f:53:d8:4b:8e:e5:c3:8d:d6:35:ba:1e:
                    58:cd:d2:35:c7:78:02:6a:b6:c8:56:50:b5:05:e8:
                    e1:38:3c:c5:88:d2:a6:f0:be:72:ae:4d:b0:2a:23:
                    a4:6a:e8:61:55:0f:62:7d:1e:15:c1:f5:a0:3a:05:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4B:88:3E:87:28:37:B5:5F:25:CE:E5:3A:09:2C:39:D4:A5:02:EC
            X509v3 Authority Key Identifier:
                keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/1kuIPocoN7VfJc7lOgksOdSlAuw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         75:f2:91:db:79:dc:15:a3:a3:e8:d8:26:ff:51:91:c8:bf:a7:
         9c:f5:fc:fe:46:d0:7e:97:ef:f1:f9:5e:0e:22:52:97:c3:14:
         d1:d0:8a:b8:a3:ea:18:7b:19:23:e0:45:bd:8d:a1:a4:b6:ee:
         9e:a1:7c:fa:4d:cc:ba:20:9b:8e:53:d9:fe:0c:cc:ef:a1:bc:
         00:81:e3:dd:25:d7:c8:0c:1e:61:8b:91:dc:71:41:f4:1c:4d:
         81:ba:09:44:4e:58:20:4b:e0:36:dc:7e:2a:bf:c6:66:96:cc:
         d8:e2:94:b2:81:8c:cd:f8:fb:99:2e:1d:8f:47:ed:42:fb:3a:
         d6:01:f6:37:09:93:76:ac:6b:1a:74:9b:45:ad:31:02:42:36:
         1e:b4:a2:4a:c2:51:83:11:29:7f:63:78:44:c3:59:0e:5f:bb:
         74:f9:97:90:6b:32:7d:3b:18:3a:e9:2c:09:c0:e6:d6:e6:d1:
         dc:04:52:35:1e:93:86:cc:29:18:17:96:e5:b2:8d:27:ba:f5:
         55:7c:14:b1:49:59:34:11:e5:2e:89:ee:0b:86:b3:d0:eb:8d:
         25:c3:2f:6d:8d:0b:25:a6:bc:25:9f:b7:3b:42:32:a7:52:df:
         0d:ec:50:cb:20:51:8f:a8:f5:23:9e:59:ea:23:5b:d6:e5:c4:
         6e:5e:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----