Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1587/kdvZq9H1-LQaXnJniDHYHAd3_tE.roa
File:                     kdvZq9H1-LQaXnJniDHYHAd3_tE.roa (raw, json)
Hash identifier:          dsqpGmHJC1oeXbHRh+FNUu6eRSELSHWRiyMsqu7FZWg=
Subject key identifier:   91:DB:D9:AB:D1:F5:F8:B4:1A:5E:72:67:88:31:D8:1C:07:77:FE:D1
Certificate issuer:       /CN=2DE14F2AC7F0238137052EAA315C5BD643134022
Certificate serial:       1055
Authority key identifier: 2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/kdvZq9H1-LQaXnJniDHYHAd3_tE.roa
Signing time:             Wed 24 May 2023 03:53:40 +0000
ROA not before:           Wed 24 May 2023 03:53:40 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     59033
IP address blocks:        2402:1440::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4181 (0x1055)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DE14F2AC7F0238137052EAA315C5BD643134022
        Validity
            Not Before: May 24 03:53:40 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=91DBD9ABD1F5F8B41A5E72678831D81C0777FED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:64:23:aa:78:8e:2b:d2:52:ae:81:74:ad:ea:
                    de:df:2f:49:fd:db:cf:11:81:6d:18:a1:f6:1e:83:
                    e3:d6:5f:a5:44:3f:1f:f2:6d:1c:8e:d0:ef:3b:a8:
                    51:26:97:5e:09:ba:f6:4a:e4:3d:e3:aa:0b:c7:a1:
                    64:17:3f:b7:16:5c:e1:cf:63:0b:cf:b0:79:a3:64:
                    b6:66:28:82:0b:ba:a8:41:d4:7c:76:00:37:a7:8e:
                    49:df:ae:6f:52:92:e0:ec:52:fd:e4:9a:12:fe:24:
                    52:2b:9a:5c:82:fe:14:f3:d7:18:67:e4:1e:18:18:
                    ba:ed:7f:fc:75:c4:24:cc:1a:79:7d:3e:f6:95:60:
                    9b:b4:a4:b8:3d:cf:e9:dc:c4:a8:1a:dd:94:f9:8f:
                    ba:a7:e2:cb:16:23:0b:f4:62:4f:a6:fa:7f:ee:7d:
                    ca:d8:ee:0f:65:d6:3f:96:86:5e:27:1b:f7:0a:82:
                    00:14:5a:55:da:1a:5e:9e:cb:84:de:8a:b1:9f:02:
                    92:b3:a4:3e:46:e3:2d:46:6f:21:6f:7d:e2:e6:3d:
                    4a:f4:8e:04:53:60:c3:f4:0d:97:ae:09:13:12:04:
                    fb:2d:95:62:58:19:db:08:38:ea:5a:0d:66:0a:06:
                    40:e3:5e:d5:7b:b3:bb:4d:da:5c:e4:01:a4:e2:11:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DB:D9:AB:D1:F5:F8:B4:1A:5E:72:67:88:31:D8:1C:07:77:FE:D1
            X509v3 Authority Key Identifier:
                keyid:2D:E1:4F:2A:C7:F0:23:81:37:05:2E:AA:31:5C:5B:D6:43:13:40:22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/LeFPKsfwI4E3BS6qMVxb1kMTQCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LeFPKsfwI4E3BS6qMVxb1kMTQCI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1587/kdvZq9H1-LQaXnJniDHYHAd3_tE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:b7:5f:20:df:58:7c:af:38:bd:36:d5:c1:62:a7:5c:77:bb:
         88:e3:4b:3c:7a:68:ca:8c:ed:8a:fe:81:5e:59:97:c2:f2:b0:
         ae:d8:04:d6:12:09:23:c4:3c:1d:a3:35:fd:ea:d7:19:af:33:
         ab:8e:2e:78:d0:cd:17:37:30:c6:e4:3f:45:2a:dc:85:31:be:
         22:7c:11:9b:07:03:75:ba:05:0f:c4:dd:4b:b0:e2:d2:6d:69:
         49:f0:76:69:6e:cb:2d:88:ff:31:53:31:da:75:97:25:f4:c1:
         c0:c0:7d:b5:67:ce:9a:96:6b:5f:69:76:66:7f:49:d6:58:18:
         26:bd:b4:30:d2:38:fa:12:f8:28:1e:46:88:1f:7f:1d:0f:9f:
         dc:34:86:f2:ba:bd:5e:cb:c3:2f:9b:4f:48:d0:ce:a0:d5:aa:
         28:36:3a:9c:22:0c:8b:18:bb:62:cd:55:c8:ce:34:94:4b:77:
         71:ab:05:e0:82:d2:91:5a:3f:f0:ff:db:de:8f:e1:f1:62:c5:
         20:0c:88:2a:4c:ec:3f:29:0f:dc:5f:dd:4a:6a:10:22:25:79:
         db:e6:23:c9:9f:75:cf:fa:ff:2d:f2:69:a3:cb:8b:3e:a0:dd:
         21:b8:c4:8a:f4:cf:54:a6:2f:18:72:c6:51:3c:fc:1f:46:45:
         52:d8:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----