Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/aOgtZ9dWTKUDytylRzTksQACYfk.roa
File:                     aOgtZ9dWTKUDytylRzTksQACYfk.roa (raw, json)
Hash identifier:          yH+3uw9feV6EpqwjZpMkWb22icTMRF2/Z5WHNiTOsyg=
Subject key identifier:   68:E8:2D:67:D7:56:4C:A5:03:CA:DC:A5:47:34:E4:B1:00:02:61:F9
Certificate issuer:       /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial:       0D4A
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/aOgtZ9dWTKUDytylRzTksQACYfk.roa
Signing time:             Wed 30 Nov 2022 07:24:22 +0000
ROA not before:           Wed 30 Nov 2022 07:24:22 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63213
IP address blocks:        101.49.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3402 (0xd4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
        Validity
            Not Before: Nov 30 07:24:22 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=68E82D67D7564CA503CADCA54734E4B1000261F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:1f:0f:c7:2b:2f:07:29:44:7c:11:1d:43:
                    34:f3:88:60:fc:44:6a:a0:43:05:70:1a:f7:c1:20:
                    85:54:d1:48:c3:b8:b1:df:7b:bb:ce:1c:aa:36:02:
                    2f:4f:73:05:65:04:01:f9:c4:28:f5:00:5e:07:f0:
                    ba:a8:4b:65:5b:08:fd:b7:da:b0:cc:99:e0:35:89:
                    d4:75:7f:44:8a:99:1b:e0:14:07:e9:c3:46:a6:5e:
                    e3:c5:f6:c1:4b:22:d6:2c:22:7c:e4:01:ce:51:b7:
                    4f:5e:a1:37:df:c1:1e:ba:30:99:a9:0c:76:de:f9:
                    0b:a5:44:02:d8:40:26:38:25:58:ae:6f:27:5c:34:
                    4b:43:e4:56:05:ed:25:9f:34:a9:72:a7:7a:9f:33:
                    8d:ec:5f:d9:5f:b8:04:18:28:4d:3d:2b:4a:7f:14:
                    87:25:5b:0b:18:f9:3f:78:a1:46:ad:b3:2a:50:d6:
                    ea:74:ed:57:7d:8c:31:49:4c:25:db:82:08:fa:c6:
                    72:1d:f3:c9:cb:7c:55:45:bc:40:3b:f8:00:1b:9c:
                    63:5f:b8:12:ea:c0:76:9c:5e:20:c7:8a:d9:d3:5d:
                    e4:2f:0c:8a:5c:e3:e0:1e:91:83:f2:6b:1b:5f:2b:
                    87:82:01:6b:89:08:a0:e9:69:6a:7f:72:6c:9a:a0:
                    4b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E8:2D:67:D7:56:4C:A5:03:CA:DC:A5:47:34:E4:B1:00:02:61:F9
            X509v3 Authority Key Identifier:
                keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/aOgtZ9dWTKUDytylRzTksQACYfk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:fa:4c:42:0d:cc:86:58:49:e0:5c:95:66:5c:85:f4:42:7f:
         db:d0:81:c6:e6:94:cb:34:70:4a:c0:3b:51:dc:ab:d5:9c:6c:
         ba:30:c7:e6:bf:9d:5c:4c:1b:bd:fd:05:1c:c6:d4:12:16:61:
         e0:4d:7a:e2:d3:62:50:22:8b:cb:a7:4b:91:f1:b0:31:eb:85:
         90:9e:55:2a:fb:ae:d0:a0:5e:fe:70:92:b6:c0:0a:f3:2f:cc:
         91:bc:68:0b:d7:d2:f6:02:e3:44:e2:56:7e:ef:d7:64:14:d3:
         98:f6:a2:ec:6b:f5:3c:d8:3a:67:32:94:16:a7:3b:fc:bb:df:
         17:a1:e5:3f:0c:6b:bd:51:9c:6b:5d:7b:e8:f9:0f:f8:a4:ac:
         95:b1:e5:4d:57:53:99:0d:59:d2:b3:40:de:d8:c1:d8:3f:35:
         15:8b:aa:15:98:e6:4b:bb:60:fb:78:2f:cb:a1:a4:bd:63:41:
         da:fb:11:be:23:96:42:20:78:5f:a8:cc:7c:8b:2b:a8:0d:c8:
         87:7c:77:d8:4e:79:9e:c5:10:d6:76:eb:39:af:ff:2b:f4:67:
         49:5e:c5:26:4b:e4:83:57:4d:68:e7:62:16:e6:9e:b1:94:7c:
         ee:0d:3d:20:ce:67:07:43:bd:79:6c:b1:8a:ba:32:14:28:37:
         88:82:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----