Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1211/zFqkmf5p6o9JwHLgXZAXSF1DjWY.roa
File:                     zFqkmf5p6o9JwHLgXZAXSF1DjWY.roa (raw, json)
Hash identifier:          eWKDI4jM+O7PoLwIFnryxctfVfqKeaNkhG/XywTN6aQ=
Subject key identifier:   CC:5A:A4:99:FE:69:EA:8F:49:C0:72:E0:5D:90:17:48:5D:43:8D:66
Certificate issuer:       /CN=183D882201945BE13993B4C6DAC954F8EE426C97
Certificate serial:       04
Authority key identifier: 18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/zFqkmf5p6o9JwHLgXZAXSF1DjWY.roa
Signing time:             Wed 23 Nov 2022 07:22:41 +0000
ROA not before:           Wed 23 Nov 2022 07:22:41 +0000
ROA not after:            Thu 23 Nov 2023 05:43:14 +0000
asID:                     63701
IP address blocks:        45.123.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183D882201945BE13993B4C6DAC954F8EE426C97
        Validity
            Not Before: Nov 23 07:22:41 2022 GMT
            Not After : Nov 23 05:43:14 2023 GMT
        Subject: CN=CC5AA499FE69EA8F49C072E05D9017485D438D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:49:1e:4b:65:db:b4:69:fb:79:a6:61:8d:
                    d1:09:20:a5:8c:4d:d8:12:be:7a:83:0b:c8:b0:4b:
                    07:27:39:ee:97:7f:47:91:91:0d:3f:40:0b:30:3c:
                    be:ff:f0:19:ec:f4:28:ff:20:5e:b5:7f:9a:71:e1:
                    cc:2d:8c:cb:48:4f:dd:0a:85:d0:ac:70:2e:fb:60:
                    2f:7f:c0:3b:e8:b3:1f:f4:28:27:4e:a5:75:2b:d2:
                    5a:6f:51:24:58:12:02:d9:0d:17:59:85:c7:ae:f1:
                    08:1d:64:bc:70:d1:5a:9c:dd:47:d2:7e:8b:3f:70:
                    0a:53:0e:5d:8a:22:86:5b:30:e2:6c:ed:dd:97:ec:
                    fc:1b:86:02:89:2d:ff:0e:e6:5c:98:ae:69:11:72:
                    0f:84:f4:5c:41:94:12:ac:64:c4:2b:64:e5:36:b1:
                    ea:13:d7:53:95:9a:36:49:fa:ad:29:f6:58:97:41:
                    2c:76:65:9e:bd:ce:f6:1b:d7:4a:07:67:c7:8d:dc:
                    fd:73:37:a6:f6:eb:d7:32:33:92:f2:84:d3:f8:7c:
                    14:8e:fb:3b:f6:70:c5:57:c7:70:9c:0c:88:64:ef:
                    8b:56:cb:4e:e3:15:38:53:08:f7:14:ec:7a:39:89:
                    ab:9a:aa:76:27:80:55:92:e8:4c:ab:dc:7e:a0:fe:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5A:A4:99:FE:69:EA:8F:49:C0:72:E0:5D:90:17:48:5D:43:8D:66
            X509v3 Authority Key Identifier:
                keyid:18:3D:88:22:01:94:5B:E1:39:93:B4:C6:DA:C9:54:F8:EE:42:6C:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/GD2IIgGUW-E5k7TG2slU-O5CbJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GD2IIgGUW-E5k7TG2slU-O5CbJc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1211/zFqkmf5p6o9JwHLgXZAXSF1DjWY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:1d:de:4e:0e:7f:c8:83:3f:03:de:f6:9a:e3:1e:4f:5c:e4:
         cd:fd:2f:e2:9a:5e:f8:e4:ad:8a:50:11:0b:2c:eb:4a:82:4d:
         48:e5:99:4f:36:6c:6d:68:0b:9b:c0:bf:d2:24:15:c6:55:c6:
         96:b3:75:96:8b:b2:e0:19:6b:8f:80:46:54:14:8d:4b:48:7c:
         3e:de:7e:d9:cd:09:6b:03:bf:d3:69:98:88:06:ef:ca:4c:77:
         8d:53:96:ea:48:f7:69:d1:2b:a7:ba:0a:17:32:78:d2:5c:04:
         a5:6d:19:f4:e1:a2:92:7d:ca:b9:cd:92:7d:91:23:ca:1c:12:
         a1:de:84:cd:ed:b0:9f:e2:fe:0f:e5:99:38:cd:e8:92:59:24:
         fb:2e:58:52:fd:e7:5d:df:f6:53:91:d2:27:ce:6e:9d:9a:8d:
         76:f9:4e:d8:e3:fc:e3:24:c1:fa:c1:5c:16:a0:f2:65:13:97:
         e1:71:08:1e:eb:34:7a:6c:3f:50:eb:b0:fd:81:b5:ab:50:5a:
         dd:d5:23:77:15:25:5c:d1:7f:2b:16:ad:a5:e6:ea:d3:2e:0c:
         9d:0d:4b:ed:3d:03:75:2d:2e:71:80:f9:46:45:81:e3:47:a1:
         2a:d4:5c:78:61:ec:82:3d:fc:aa:08:d0:5c:f2:bd:39:f3:07:
         13:d6:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----