Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2671/NipFJ9SLhT2moSP1H7uTvuFuuew.roa
File:                     NipFJ9SLhT2moSP1H7uTvuFuuew.roa (raw, json)
Hash identifier:          96TUqtGwdeArBDjozBzVXBT1NR3rEhIYqMUCY3J3OiA=
Subject key identifier:   36:2A:45:27:D4:8B:85:3D:A6:A1:23:F5:1F:BB:93:BE:E1:6E:B9:EC
Certificate issuer:       /CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F
Certificate serial:       0C39
Authority key identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/NipFJ9SLhT2moSP1H7uTvuFuuew.roa
Signing time:             Tue 23 Aug 2022 01:11:03 +0000
ROA not before:           Tue 23 Aug 2022 01:11:03 +0000
ROA not after:            Wed 19 Jul 2023 01:20:03 +0000
asID:                     34549
IP address blocks:        103.108.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F
        Validity
            Not Before: Aug 23 01:11:03 2022 GMT
            Not After : Jul 19 01:20:03 2023 GMT
        Subject: CN=362A4527D48B853DA6A123F51FBB93BEE16EB9EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:4c:ec:17:c6:d4:08:6d:05:0f:2c:12:36:
                    d6:97:b5:f0:3b:47:56:2e:e5:b6:91:b2:cd:a0:f8:
                    b0:cf:af:6a:6f:95:56:db:e4:c3:3c:22:68:e3:e7:
                    bf:ed:70:b4:3b:ca:8d:a5:6d:26:c7:93:f7:9f:de:
                    f8:bc:9f:26:d4:b4:53:9b:44:d2:26:5f:d3:bb:2c:
                    0b:0d:f2:8c:1a:4e:43:aa:11:7c:d6:9d:12:de:01:
                    3b:c3:4d:69:a7:15:96:b0:7f:83:dc:29:4f:ac:40:
                    28:7a:f7:db:ac:47:46:e2:d5:dc:d3:b1:5a:c5:cb:
                    fb:3f:44:29:d9:8d:39:f1:03:ba:2b:ce:3d:e8:e9:
                    41:af:60:a9:c5:0f:06:50:d1:12:54:d6:cc:0c:61:
                    a1:e4:20:b2:d4:f4:62:38:49:f0:51:1a:3b:0d:15:
                    b2:0c:55:0e:4d:5d:42:ce:06:34:af:6f:da:95:65:
                    05:01:5e:c9:73:17:02:30:4a:61:b1:fa:13:c9:04:
                    b8:a7:67:f1:09:23:14:c9:0d:cf:c2:7c:86:43:7e:
                    db:d0:0b:88:b9:68:44:ca:41:8a:30:55:6e:c3:a9:
                    51:54:a7:e8:c3:6f:bd:d2:ce:a9:53:ef:da:b9:f2:
                    f4:bc:bd:a7:49:64:96:49:57:08:45:c5:2b:ea:0f:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2A:45:27:D4:8B:85:3D:A6:A1:23:F5:1F:BB:93:BE:E1:6E:B9:EC
            X509v3 Authority Key Identifier:
                keyid:DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/NipFJ9SLhT2moSP1H7uTvuFuuew.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:19:07:38:9e:1b:ca:75:a3:0e:bd:1a:e3:f1:15:cf:ea:26:
         35:6e:82:d7:96:85:2c:be:1a:d8:88:61:4c:71:02:b0:0c:db:
         8f:f2:0e:28:87:f0:7a:99:8a:e5:cf:2a:c9:e1:c6:f7:01:64:
         5c:a0:b3:3d:bf:a9:a0:2e:d3:f6:5b:8a:32:11:e7:ed:9b:21:
         6c:f2:64:6e:61:26:dc:21:69:19:be:34:07:4b:12:ea:11:5c:
         1a:04:68:52:fc:ab:b1:21:3b:f7:2d:08:3d:16:73:a9:a3:c9:
         78:f5:27:d6:3c:56:85:9d:e6:0f:e5:43:a3:2d:de:51:21:8f:
         19:00:d0:dc:72:46:0d:87:8e:59:1d:16:8b:60:bb:97:ab:0f:
         91:83:2b:ea:15:c0:2f:2d:fd:1e:e4:3c:58:32:5f:61:07:cd:
         f6:f5:49:74:3d:8f:45:45:b8:3b:ac:30:56:7a:74:b3:1e:15:
         df:55:76:cb:dd:73:3d:a0:36:e7:3e:95:77:06:92:9d:cc:3f:
         0f:c2:7f:b6:58:66:eb:ee:68:7c:e0:f6:10:fe:eb:7d:ab:ee:
         31:10:e6:69:23:de:ce:c5:40:6a:d4:f2:fe:1e:ab:fb:95:cf:
         d5:4b:7a:4e:e7:87:9a:29:7f:a0:14:d0:14:28:7c:48:91:2e:
         ad:33:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----