Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/74orGb-8LnpwjmXfOcgVEKDCL4w.roa
File:                     74orGb-8LnpwjmXfOcgVEKDCL4w.roa (raw, json)
Hash identifier:          9pZVYhM05YCctSrNEySllqcdjoVfueTsqvslde92tOA=
Subject key identifier:   EF:8A:2B:19:BF:BC:2E:7A:70:8E:65:DF:39:C8:15:10:A0:C2:2F:8C
Certificate issuer:       /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial:       0EC9
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/74orGb-8LnpwjmXfOcgVEKDCL4w.roa
Signing time:             Wed 15 Feb 2023 03:40:49 +0000
ROA not before:           Wed 15 Feb 2023 03:40:49 +0000
ROA not after:            Tue 16 Jan 2024 06:09:07 +0000
asID:                     63213
IP address blocks:        101.49.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3785 (0xec9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
        Validity
            Not Before: Feb 15 03:40:49 2023 GMT
            Not After : Jan 16 06:09:07 2024 GMT
        Subject: CN=EF8A2B19BFBC2E7A708E65DF39C81510A0C22F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:97:04:9b:d9:95:fb:f3:60:1c:76:bb:32:
                    c5:c2:2e:f0:e4:a7:31:4c:eb:ba:ad:79:bb:0e:31:
                    45:c0:11:34:89:b6:6c:8d:39:be:cf:b4:ea:f4:36:
                    2b:05:3a:05:86:1f:91:25:ec:73:51:61:77:2d:1e:
                    4a:6a:53:2c:f2:94:3d:60:a4:72:91:35:fe:41:d3:
                    92:4c:c3:2f:9e:19:3f:f3:b1:1b:fb:aa:a9:ef:12:
                    52:19:bc:07:74:8a:95:17:db:6b:bb:02:85:7e:bb:
                    13:8f:13:91:b8:19:36:c7:23:25:32:d9:a2:4b:e4:
                    24:cf:a9:b7:12:8d:5a:9a:6d:8d:79:ba:f4:ce:bb:
                    56:95:c3:0d:c1:9e:e5:bc:64:68:25:6f:d1:18:e6:
                    4b:b1:1d:eb:a0:93:62:47:86:df:bd:eb:eb:85:bd:
                    93:23:f6:a8:83:0f:9d:17:9f:c8:b0:ed:f0:84:1d:
                    05:2a:4a:72:ba:47:ab:aa:85:54:68:a0:46:27:c3:
                    1e:cc:33:8d:39:a7:41:b6:ce:55:24:de:b2:09:28:
                    28:80:ac:5b:c7:00:40:bd:31:a8:7e:84:7e:e6:51:
                    03:bf:fc:86:c1:f3:66:19:7a:77:d5:5b:2d:cd:d5:
                    6d:55:9f:65:35:e6:df:4a:3f:2b:5f:b5:19:df:1b:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8A:2B:19:BF:BC:2E:7A:70:8E:65:DF:39:C8:15:10:A0:C2:2F:8C
            X509v3 Authority Key Identifier:
                keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/74orGb-8LnpwjmXfOcgVEKDCL4w.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:93:36:0e:e6:a1:8f:4a:71:ad:76:21:49:ad:1b:af:9a:68:
         6f:cd:10:90:5f:1d:7a:d7:42:85:65:a4:a1:85:7e:73:1a:73:
         ae:7d:2e:e6:68:12:3a:49:18:b6:62:cc:64:f6:23:47:c2:53:
         24:4a:9e:be:94:90:02:7d:14:68:6d:9e:d7:d3:1b:d7:47:95:
         8a:9e:40:5c:e6:ac:10:f1:af:35:f1:77:15:60:5d:d4:4f:c4:
         c7:26:df:3f:d9:cb:4b:ef:6a:ee:88:61:51:92:56:ee:ad:37:
         98:2c:71:96:7b:28:86:bd:8f:dd:be:4c:41:14:70:b9:ef:23:
         68:77:45:d5:9c:a3:55:d3:84:c5:42:c0:62:55:cf:90:2a:11:
         37:47:3c:a7:a5:17:89:cd:77:d2:77:09:6a:cd:9a:47:f4:14:
         61:09:3f:f7:4b:d1:d5:ae:76:72:b0:79:53:9f:41:94:fa:6a:
         ae:8a:30:97:6a:60:27:29:82:a6:6a:8c:b2:45:fe:ae:c4:e8:
         b1:76:3a:9e:b9:22:1a:1e:a4:f5:32:ea:16:8e:bb:39:79:c7:
         b0:26:79:aa:60:2b:58:4c:c8:db:84:77:da:81:66:a8:72:b7:
         bd:e6:7c:32:d9:db:85:d2:90:34:25:d5:e7:53:73:b5:01:bf:
         e2:24:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----