Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/tKYhqGstESDMcSLw53Mmk96ySrQ.roa
File:                     tKYhqGstESDMcSLw53Mmk96ySrQ.roa (raw, json)
Hash identifier:          ghB9ustJIKY+E6L86Ti090t4gVRw4c6AlBiEjMwm+60=
Subject key identifier:   B4:A6:21:A8:6B:2D:11:20:CC:71:22:F0:E7:73:26:93:DE:B2:4A:B4
Certificate issuer:       /CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
Certificate serial:       06
Authority key identifier: 02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/tKYhqGstESDMcSLw53Mmk96ySrQ.roa
Signing time:             Thu 27 May 2021 05:05:30 +0000
ROA not before:           Thu 27 May 2021 05:05:30 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     4816
IP address blocks:        103.39.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02605E38FE471260DDE7ACE69743E2F3D4F2F0C6
        Validity
            Not Before: May 27 05:05:30 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=B4A621A86B2D1120CC7122F0E7732693DEB24AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2a:79:72:f1:4a:f8:8b:d1:a5:4a:cd:a5:35:
                    5e:90:5e:ec:3e:14:8d:47:e8:6d:f9:11:64:20:d1:
                    33:c9:3f:1b:fc:07:db:e5:b2:cc:9b:7a:28:05:cc:
                    7e:05:13:80:db:f7:99:13:ee:fb:9e:b4:96:42:f0:
                    87:3e:8c:6b:1f:25:65:df:8c:46:3a:2d:57:5c:e9:
                    b0:3a:f9:02:ec:a1:9f:e5:d1:0c:3d:42:05:7c:52:
                    70:84:5a:0c:0d:de:17:19:57:77:35:8a:ab:af:e8:
                    fa:f9:f6:5d:45:1e:38:30:ec:53:28:ee:25:dd:e3:
                    75:0b:49:9f:42:2e:37:03:8b:98:e7:f1:f2:69:71:
                    dd:05:b8:34:99:49:b2:6f:a2:c3:6b:26:fc:31:19:
                    ab:39:3a:e1:fa:c8:5a:20:e8:53:a3:47:28:5b:c8:
                    ef:64:28:fe:31:30:11:31:65:0b:64:0a:05:b9:9c:
                    b3:68:b0:75:90:f0:9f:8a:b9:86:9d:fe:92:d3:c8:
                    1d:6c:23:ed:74:b9:c0:62:86:0d:4c:d3:ef:17:3d:
                    6b:39:11:e8:fd:2e:93:fe:ff:23:f1:fa:16:46:a8:
                    e0:34:64:38:95:d7:60:ad:83:8c:ad:36:5d:7b:cc:
                    55:cb:1e:d3:4a:e6:5a:17:41:b9:23:92:53:55:59:
                    e6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A6:21:A8:6B:2D:11:20:CC:71:22:F0:E7:73:26:93:DE:B2:4A:B4
            X509v3 Authority Key Identifier:
                keyid:02:60:5E:38:FE:47:12:60:DD:E7:AC:E6:97:43:E2:F3:D4:F2:F0:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/AmBeOP5HEmDd56zml0Pi89Ty8MY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AmBeOP5HEmDd56zml0Pi89Ty8MY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/tKYhqGstESDMcSLw53Mmk96ySrQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:3c:83:20:1a:7d:b4:09:fc:19:31:c5:c1:1e:b1:f8:97:7f:
         e4:c0:b0:4b:c1:3b:b7:ad:eb:0e:1e:aa:0f:de:ff:24:39:ba:
         8b:d8:e0:ff:fa:44:e3:68:05:ab:9d:6b:ed:ed:c2:5f:04:9b:
         8c:95:b3:2a:3a:06:e1:97:68:33:92:7c:d5:a5:ae:07:72:36:
         9a:9a:ba:3b:15:6e:da:ff:2c:7f:5d:7a:7f:e9:ec:71:87:82:
         85:fd:b6:d7:bb:4e:87:f7:69:a6:05:02:fb:d0:11:ba:67:18:
         5b:d9:28:72:c3:91:11:7b:12:9a:ae:d6:72:6f:d6:e1:12:01:
         04:72:11:12:c3:e7:a5:63:8f:6a:64:05:34:8b:ce:04:96:0a:
         36:53:09:0c:9f:e1:94:90:06:31:cd:6d:9c:3f:a5:90:b1:43:
         fe:65:57:ce:1c:29:58:6b:9b:49:e3:29:3d:eb:c0:50:97:24:
         2c:9e:04:52:b7:b5:a1:62:b5:33:91:7d:6d:c9:a2:82:31:c0:
         aa:b6:c9:40:04:0c:65:2f:1c:ce:a3:76:c6:9d:22:0a:e7:c2:
         41:4a:7c:c8:66:6d:3a:19:06:40:8d:34:fb:3f:73:72:6e:a4:
         4a:23:94:8e:f2:9a:41:70:f3:c5:00:9b:d1:2b:b7:86:45:6a:
         cd:f9:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----