Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2620/zBNJZVDQdrllN_oYLiHX_Lx0l28.roa
File:                     zBNJZVDQdrllN_oYLiHX_Lx0l28.roa (raw, json)
Hash identifier:          1wixm1dRaSyXnBo/U/ikVkoyvgWt+U3sMkRCaZZyqF8=
Subject key identifier:   CC:13:49:65:50:D0:76:B9:65:37:FA:18:2E:21:D7:FC:BC:74:97:6F
Certificate issuer:       /CN=63A0F163884E4E0EA98C0ED1ECFB6CBD41F66C19
Certificate serial:       06DD
Authority key identifier: 63:A0:F1:63:88:4E:4E:0E:A9:8C:0E:D1:EC:FB:6C:BD:41:F6:6C:19
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/zBNJZVDQdrllN_oYLiHX_Lx0l28.roa
Signing time:             Thu 03 Jun 2021 08:56:06 +0000
ROA not before:           Thu 03 Jun 2021 08:56:06 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     58593
IP address blocks:        163.228.0.0/16 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63A0F163884E4E0EA98C0ED1ECFB6CBD41F66C19
        Validity
            Not Before: Jun  3 08:56:06 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=CC13496550D076B96537FA182E21D7FCBC74976F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3c:b0:1d:40:b3:13:81:6e:f6:37:64:23:e3:
                    72:33:3f:08:92:f2:d9:40:04:12:2e:9c:63:61:6b:
                    67:12:55:cb:50:a1:70:67:16:4c:54:80:e0:cf:ea:
                    82:a6:e5:3b:d2:b8:85:62:35:3b:80:14:a9:1f:6b:
                    0a:38:22:93:40:e5:ab:a3:8f:04:c9:36:82:1c:6f:
                    e6:2a:97:f5:9e:f9:64:67:2f:a9:58:fe:e1:82:ca:
                    8a:ec:5d:49:7c:0d:e3:38:cb:9d:eb:11:ae:02:5a:
                    c6:6a:97:24:d2:1d:8b:1e:d2:d4:39:7d:ee:42:f6:
                    ad:f1:94:cb:35:5e:d9:bb:cf:a8:cd:7c:b0:da:72:
                    04:c0:90:41:bc:81:8b:c2:30:a8:d0:2a:20:5c:ec:
                    1e:c0:65:6d:a3:7d:c8:49:c6:4e:3f:bb:2d:c2:ad:
                    b0:3f:1e:45:1f:a9:be:b4:8b:9b:5f:6b:19:d5:55:
                    1b:cc:d6:5a:62:b2:ee:e7:2a:c6:af:81:7a:b1:60:
                    c8:47:65:d7:19:f4:3b:77:8e:55:eb:52:ca:d9:d1:
                    32:da:ec:6f:cd:39:77:29:7b:92:12:8c:1c:b7:b7:
                    21:8a:84:ef:c5:29:c7:35:19:e0:11:23:64:24:d2:
                    3e:03:38:ae:8d:f4:26:bb:a1:2d:a1:5f:5e:5b:23:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:13:49:65:50:D0:76:B9:65:37:FA:18:2E:21:D7:FC:BC:74:97:6F
            X509v3 Authority Key Identifier:
                keyid:63:A0:F1:63:88:4E:4E:0E:A9:8C:0E:D1:EC:FB:6C:BD:41:F6:6C:19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Y6DxY4hOTg6pjA7R7PtsvUH2bBk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2620/zBNJZVDQdrllN_oYLiHX_Lx0l28.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.228.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:3f:66:42:8c:1f:0d:05:27:b5:08:3d:dd:7d:af:da:ef:
         05:39:53:dd:2d:88:09:3d:07:86:8f:4d:bd:57:7d:cd:bf:68:
         5a:79:6a:7b:e9:03:0b:6e:bc:b6:66:a6:fd:6c:b6:2f:0c:4a:
         2e:c7:dc:99:50:6e:ad:7d:eb:63:db:7f:e8:5d:2a:73:c5:7a:
         e7:4c:3f:11:53:1c:0f:85:03:d6:81:d0:2f:e1:14:42:ea:d0:
         62:91:e7:3b:c6:93:36:98:a0:47:7e:9c:7b:76:58:0b:a5:b5:
         01:86:5b:7e:15:5f:aa:b3:2e:37:cb:2b:12:21:22:d0:7b:6e:
         de:a8:b8:af:58:c4:59:c3:98:53:09:75:80:36:89:5d:ae:1d:
         15:58:ec:03:24:a3:b4:61:25:8d:34:3d:5b:d6:4b:e6:19:9d:
         c6:c0:c8:a9:33:06:b1:bf:05:17:a8:54:9a:dd:3d:ad:30:2a:
         9d:63:ca:dc:78:0e:29:17:d3:d2:a8:14:9e:32:32:48:e5:2b:
         65:70:d4:ad:a0:ef:23:c2:19:bc:0b:e4:f5:c3:8c:c0:6d:64:
         76:b1:51:4b:b6:11:7a:6c:66:6c:98:93:33:e6:2b:ff:75:9f:
         07:5b:32:50:de:81:a6:05:5b:ec:eb:75:83:1e:30:6c:6d:95:
         d0:dd:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----