Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/3cfdPMBIR8dt5WgoeZkQvTbBYIA.roa
File:                     3cfdPMBIR8dt5WgoeZkQvTbBYIA.roa (raw, json)
Hash identifier:          74yzN3ukLI0PXEUZIjaXJs/r1PuJzcO7xKhMTH60fnM=
Subject key identifier:   DD:C7:DD:3C:C0:48:47:C7:6D:E5:68:28:79:99:10:BD:36:C1:60:80
Certificate issuer:       /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial:       0A12
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/3cfdPMBIR8dt5WgoeZkQvTbBYIA.roa
Signing time:             Tue 12 Jul 2022 04:17:28 +0000
ROA not before:           Tue 12 Jul 2022 04:17:28 +0000
ROA not after:            Fri 09 Jun 2023 06:51:49 +0000
asID:                     7018
IP address blocks:        101.49.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578 (0xa12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
        Validity
            Not Before: Jul 12 04:17:28 2022 GMT
            Not After : Jun  9 06:51:49 2023 GMT
        Subject: CN=DDC7DD3CC04847C76DE56828799910BD36C16080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:92:29:81:48:6f:5c:5e:98:81:dd:86:a1:
                    a5:e9:6c:9a:5d:07:2f:84:be:08:a9:c3:5a:e3:e7:
                    f2:5c:56:de:6d:86:d0:ad:81:77:ec:98:dc:e8:a0:
                    09:51:0f:7a:56:05:a4:eb:05:a5:54:01:fa:af:63:
                    0a:c2:01:ca:2f:d8:1c:6c:ec:13:8f:7d:86:7f:78:
                    53:d8:44:1d:82:bf:a3:68:a1:35:4f:f9:ef:65:c4:
                    42:9d:56:d0:71:b3:c7:92:80:5c:03:65:a8:02:27:
                    5b:81:b2:ce:c7:e4:7d:56:24:c3:f7:86:dd:91:dd:
                    cd:a8:1b:29:e2:ed:1b:59:ca:2e:8d:fb:1b:c1:8c:
                    8c:99:31:12:2b:3a:e4:3c:41:c9:fd:b9:a6:1d:18:
                    cf:6b:af:89:45:33:ec:93:da:8d:f5:20:da:76:44:
                    28:ad:02:63:f7:45:2e:1a:94:5f:c4:a2:06:a5:f4:
                    bc:b4:1f:96:ea:ac:ae:ec:f2:45:0e:d2:b2:85:dd:
                    26:f5:4e:f5:9b:3e:45:1e:be:46:5e:fc:89:4b:37:
                    bd:55:70:0b:98:a5:23:8b:b3:8e:e5:b1:b8:fb:82:
                    d0:b8:21:9c:e9:e2:cd:62:ce:99:6a:2e:33:46:f5:
                    40:57:32:cd:0b:9e:ff:33:6d:a5:c5:a9:ec:4f:f9:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C7:DD:3C:C0:48:47:C7:6D:E5:68:28:79:99:10:BD:36:C1:60:80
            X509v3 Authority Key Identifier:
                keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/3cfdPMBIR8dt5WgoeZkQvTbBYIA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         e7:40:81:9b:a0:19:fc:d9:3f:ca:22:b0:58:ed:cf:ee:ab:79:
         76:9f:d5:a7:f1:ff:ee:6f:5c:f9:77:8a:4f:98:a1:c0:9f:90:
         6b:12:2a:37:23:32:36:a3:f9:80:10:1a:d4:f3:4b:16:70:04:
         09:f8:1a:93:f7:0a:17:f6:dd:f6:77:1e:87:38:5c:b1:e2:79:
         a2:9f:ea:de:86:5b:4f:89:97:3f:7e:29:aa:a8:7a:5f:ab:16:
         4f:49:86:ab:7a:21:88:9a:88:3b:a0:b9:5e:b8:44:d1:a2:c9:
         ee:0b:77:f3:37:1a:d3:29:05:f1:1d:92:3d:1a:a3:ab:c0:65:
         2d:e5:5d:11:8f:0e:7b:d2:a4:8e:ad:ad:b5:70:9d:88:94:f9:
         9b:a3:8a:eb:63:2b:35:d0:13:ec:2e:09:18:33:ac:d2:04:12:
         25:21:0b:61:26:1d:88:34:49:75:b4:97:8c:33:bb:2d:90:30:
         56:a5:f5:19:79:b4:59:36:64:5b:86:db:a8:6a:ca:1b:fd:d6:
         2a:9e:6e:a6:da:29:60:0d:1a:a4:a0:e0:9e:d3:56:59:cb:4b:
         0f:9c:3d:bd:24:e7:1a:d7:53:f6:7f:ee:c1:2d:cd:92:05:36:
         0d:e4:bc:6a:54:07:98:c0:b8:ff:f7:f5:ef:e4:e6:c0:98:6a:
         97:34:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----