Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/JvNpOrIMz5MQHTSHEtN_uDLp5o8.roa
File:                     JvNpOrIMz5MQHTSHEtN_uDLp5o8.roa (raw, json)
Hash identifier:          b26J7DdeveWtsv9wjcIcOqmdJE1WTjGeqJXzgVN/ee8=
Subject key identifier:   26:F3:69:3A:B2:0C:CF:93:10:1D:34:87:12:D3:7F:B8:32:E9:E6:8F
Certificate issuer:       /CN=BFB8536CF70F41D00B32505B278CAFCB387116CA
Certificate serial:       04
Authority key identifier: BF:B8:53:6C:F7:0F:41:D0:0B:32:50:5B:27:8C:AF:CB:38:71:16:CA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v7hTbPcPQdALMlBbJ4yvyzhxFso.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/JvNpOrIMz5MQHTSHEtN_uDLp5o8.roa
Signing time:             Thu 27 May 2021 05:02:38 +0000
ROA not before:           Thu 27 May 2021 05:02:38 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     398704
IP address blocks:        103.72.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB8536CF70F41D00B32505B278CAFCB387116CA
        Validity
            Not Before: May 27 05:02:38 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=26F3693AB20CCF93101D348712D37FB832E9E68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:2e:97:6f:92:97:47:15:dd:b8:08:05:2c:
                    fe:71:e5:e6:50:18:41:0a:2e:3c:51:f0:6c:6e:f3:
                    8e:c1:cb:eb:9c:21:dd:0d:c2:da:d4:9f:26:4b:cb:
                    dd:b7:21:9a:9f:67:82:16:67:28:98:19:c2:fc:04:
                    82:ae:ce:b3:69:d9:7e:52:6d:ce:db:ab:64:d1:76:
                    79:cd:9d:b4:14:6e:77:8a:7c:a1:46:e6:15:f8:1a:
                    dd:16:9b:ec:e7:f7:db:43:9e:a0:f5:16:8e:38:5d:
                    b6:ec:0c:b3:b9:2b:32:2d:75:ea:f5:57:f5:e4:d2:
                    0d:2b:e7:63:ec:06:fa:21:d9:23:43:27:d3:54:03:
                    a2:44:13:7a:7d:24:86:e7:3a:4d:b4:13:f9:f9:89:
                    4a:69:ea:e0:7f:9b:e8:db:40:75:82:58:54:37:2d:
                    5f:5c:4c:7e:f6:46:b2:a7:e4:38:22:d7:5b:a5:25:
                    8c:fa:68:3d:5d:ed:f9:75:d7:59:c3:75:03:11:a9:
                    f4:5a:bd:13:9d:67:a5:f3:6a:69:8d:b2:96:d6:4e:
                    11:3b:c1:3d:39:67:18:66:ff:0a:aa:ce:ea:b2:a0:
                    50:c2:61:05:38:ee:ed:44:59:12:91:f7:7d:17:84:
                    dc:df:7c:eb:d8:f4:e0:8d:39:03:33:d1:45:48:5d:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F3:69:3A:B2:0C:CF:93:10:1D:34:87:12:D3:7F:B8:32:E9:E6:8F
            X509v3 Authority Key Identifier:
                keyid:BF:B8:53:6C:F7:0F:41:D0:0B:32:50:5B:27:8C:AF:CB:38:71:16:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/v7hTbPcPQdALMlBbJ4yvyzhxFso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/v7hTbPcPQdALMlBbJ4yvyzhxFso.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/JvNpOrIMz5MQHTSHEtN_uDLp5o8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:01:f6:1a:d7:33:17:c4:4d:6f:a9:5f:5e:7e:b1:e2:72:e9:
         c6:6e:5d:4b:ef:39:8e:bf:73:0e:f3:0f:f7:77:3f:a9:33:3f:
         77:49:05:3d:a2:e7:36:e1:ee:60:b5:37:8e:83:f2:01:1e:90:
         f0:34:b6:43:78:df:c7:41:5f:96:25:73:fe:79:d9:7d:d6:ab:
         d1:fa:9b:72:fc:aa:05:33:80:6b:39:80:19:e9:e8:08:2c:51:
         e8:0f:e6:ba:9b:e1:b0:73:ec:84:bc:f0:c1:a0:d4:2a:cf:fb:
         60:c2:70:0f:9e:dd:2d:21:6b:e9:d8:86:eb:ee:7f:f6:34:11:
         cc:2d:ee:3f:2c:66:ac:5c:e0:7c:bf:42:6a:18:18:2d:ba:66:
         c8:ad:d8:dc:37:7f:1b:95:f0:d2:e4:4a:75:62:51:db:42:77:
         e8:c2:1d:f3:5a:e8:45:4f:86:f4:f5:38:92:6c:83:1d:9b:09:
         72:3e:86:03:ec:ba:9d:ee:d9:2d:1d:2b:44:b4:9d:b9:40:0e:
         2f:26:96:05:ca:a8:0b:fc:ab:c2:bf:a4:42:1c:a9:6a:d3:56:
         e4:4e:33:2e:5c:3b:16:86:5a:24:1c:f0:07:c2:54:26:25:87:
         4a:ac:5a:c2:08:bd:2e:96:ea:ff:a0:d9:1b:14:e0:7e:70:6e:
         c2:52:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----