Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1584/Wgne08RY9iwIl8po8pdcf0Xc6GU.roa
File:                     Wgne08RY9iwIl8po8pdcf0Xc6GU.roa (raw, json)
Hash identifier:          WMY4pE9czerED+MQuAOi/9IGnKmMKrNvI0I77Eb5WWU=
Subject key identifier:   5A:09:DE:D3:C4:58:F6:2C:08:97:CA:68:F2:97:5C:7F:45:DC:E8:65
Certificate issuer:       /CN=F76C9E43361DEA446077AD7029057380AFFF3266
Certificate serial:       0D52
Authority key identifier: F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/Wgne08RY9iwIl8po8pdcf0Xc6GU.roa
Signing time:             Tue 07 Jun 2022 02:17:32 +0000
ROA not before:           Tue 07 Jun 2022 02:17:32 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     24424
IP address blocks:        2404:280::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3410 (0xd52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F76C9E43361DEA446077AD7029057380AFFF3266
        Validity
            Not Before: Jun  7 02:17:32 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=5A09DED3C458F62C0897CA68F2975C7F45DCE865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:40:37:65:ab:f1:13:16:69:38:64:7b:b9:
                    01:11:4f:d1:a2:9c:57:9a:55:d3:d4:a4:b0:fb:65:
                    6e:fe:b4:b4:6f:ab:88:97:93:1d:dc:82:8a:54:23:
                    50:c3:91:93:ad:d7:9b:fa:d7:c7:b8:06:f2:e3:2a:
                    58:d3:60:96:b0:de:cd:19:da:d5:7e:88:a9:df:ae:
                    bf:65:6c:f6:e2:eb:81:33:39:23:30:78:21:38:25:
                    77:8c:70:07:17:1e:cf:56:eb:7c:ce:eb:3c:02:f2:
                    24:69:d2:81:a1:be:1d:a0:13:81:aa:7a:68:5d:be:
                    2f:8f:68:16:a8:5b:8a:6b:68:b9:d5:ce:81:62:2a:
                    48:20:92:41:45:c9:7e:ea:28:bf:c0:6f:3e:5b:46:
                    02:50:40:6c:53:a8:76:0b:45:c5:0f:ec:19:23:21:
                    b8:ea:91:45:13:5d:46:b7:22:71:28:f7:a8:e5:3f:
                    c7:10:87:4a:a0:6c:ec:cc:e9:3a:63:77:cb:93:39:
                    e0:5b:14:2e:5d:2c:9c:63:a1:f2:0d:75:93:20:ca:
                    d5:26:db:00:3c:1e:a6:aa:ee:c6:8c:f4:92:03:b6:
                    cb:73:75:95:ef:cd:13:e0:7a:ed:cf:ca:53:3d:5b:
                    c7:ea:60:65:b5:66:3d:b9:ce:8c:43:49:ae:85:2c:
                    35:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:09:DE:D3:C4:58:F6:2C:08:97:CA:68:F2:97:5C:7F:45:DC:E8:65
            X509v3 Authority Key Identifier:
                keyid:F7:6C:9E:43:36:1D:EA:44:60:77:AD:70:29:05:73:80:AF:FF:32:66

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/92yeQzYd6kRgd61wKQVzgK__MmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/92yeQzYd6kRgd61wKQVzgK__MmY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1584/Wgne08RY9iwIl8po8pdcf0Xc6GU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:280::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:58:6c:53:78:db:f5:36:d2:59:fb:16:9e:8d:41:3e:84:df:
         5d:c6:af:31:54:1b:c7:7e:c7:1e:1d:f0:75:ce:16:de:f9:8c:
         03:15:87:6b:87:d0:31:25:0f:d5:7c:9e:32:7d:72:0b:9a:0a:
         7e:65:02:8a:e7:9f:d2:49:94:5b:48:96:dd:8f:be:b1:04:78:
         e0:e5:bd:88:c8:53:c9:a6:46:ee:08:36:6c:d9:a0:1a:c1:b4:
         80:aa:6d:d9:af:4c:7e:5e:6a:24:a2:74:06:e7:c6:16:c5:f9:
         b4:27:e4:eb:b1:9a:34:58:07:06:33:81:59:0f:ee:01:fd:a9:
         77:90:58:31:d7:0d:fc:3f:c2:53:d9:bd:81:11:ba:71:d5:9d:
         6f:49:a3:d2:80:ee:1d:05:22:e3:f3:94:e7:21:c0:96:2b:10:
         8e:a2:e3:56:2f:fb:9d:00:19:74:39:49:64:0b:ba:31:b5:68:
         aa:b2:1f:41:73:1b:9f:30:99:5f:83:62:c9:68:e2:ba:3d:83:
         66:de:58:f4:8d:7d:fc:dd:6a:70:5a:6f:f6:b2:63:aa:3b:cc:
         a7:d1:c3:06:75:ee:de:86:97:f5:06:b1:c1:bc:a6:43:d4:73:
         f4:30:d5:44:16:43:ca:d8:ee:ce:79:da:fd:a9:f6:c1:2c:02:
         22:3a:35:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----