Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2694/2We9WMEv_m0n1_vHgXS9DcAKcKQ.roa
File:                     2We9WMEv_m0n1_vHgXS9DcAKcKQ.roa (raw, json)
Hash identifier:          zF3vJC8vlZF3jJBrENEVkpr7wEj5X8i0pJIiXNO1W5M=
Subject key identifier:   D9:67:BD:58:C1:2F:FE:6D:27:D7:FB:C7:81:74:BD:0D:C0:0A:70:A4
Certificate issuer:       /CN=407EE73C228188EDA8B8A4B89B4CD59201140388
Certificate serial:       03
Authority key identifier: 40:7E:E7:3C:22:81:88:ED:A8:B8:A4:B8:9B:4C:D5:92:01:14:03:88
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QH7nPCKBiO2ouKS4m0zVkgEUA4g.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/2We9WMEv_m0n1_vHgXS9DcAKcKQ.roa
Signing time:             Thu 27 May 2021 05:04:39 +0000
ROA not before:           Thu 27 May 2021 05:04:39 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     59024
IP address blocks:        103.111.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407EE73C228188EDA8B8A4B89B4CD59201140388
        Validity
            Not Before: May 27 05:04:39 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=D967BD58C12FFE6D27D7FBC78174BD0DC00A70A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6b:25:54:a1:f4:14:d3:10:25:57:3d:be:25:
                    91:05:fb:0c:95:bd:fa:be:97:df:b5:1b:e6:3a:5f:
                    3e:1e:99:ab:28:48:57:e7:26:51:f2:60:e1:3f:20:
                    5b:f6:50:ca:45:7d:3f:3d:c8:63:6d:5f:5b:46:8f:
                    87:4c:14:e9:d7:73:30:e5:72:dc:59:a1:d7:9b:10:
                    0e:ab:52:76:51:3e:ef:8b:5a:31:84:01:83:d5:02:
                    0a:f2:eb:70:bb:92:7c:54:22:9d:ed:a1:1b:e5:ee:
                    e9:55:3b:44:7d:5b:84:66:b0:90:25:63:bd:5c:c8:
                    bb:a2:23:bc:15:a8:e2:8c:5d:86:be:d2:b2:a3:ca:
                    d9:95:bc:e1:27:fd:75:19:c7:c0:7f:2b:93:02:68:
                    fa:6b:c7:7e:ee:43:a4:e0:fd:06:d5:4d:56:31:1a:
                    6b:1c:e2:d7:77:a5:2d:b3:f5:8d:62:84:fb:59:81:
                    13:49:ff:4b:fc:80:62:a1:bd:c5:4a:a3:9d:e4:22:
                    33:a1:fe:ea:86:e2:f7:48:81:7c:ed:16:a6:e1:64:
                    45:ba:bb:70:ed:a0:b4:e3:2d:1e:c9:cb:55:b5:7c:
                    ec:a6:f5:08:f3:77:ff:c9:bc:95:8e:93:b9:33:47:
                    43:3b:23:29:e6:c9:8b:70:67:a7:31:5c:49:32:62:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:67:BD:58:C1:2F:FE:6D:27:D7:FB:C7:81:74:BD:0D:C0:0A:70:A4
            X509v3 Authority Key Identifier:
                keyid:40:7E:E7:3C:22:81:88:ED:A8:B8:A4:B8:9B:4C:D5:92:01:14:03:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/QH7nPCKBiO2ouKS4m0zVkgEUA4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/QH7nPCKBiO2ouKS4m0zVkgEUA4g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2694/2We9WMEv_m0n1_vHgXS9DcAKcKQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:1a:cc:fe:d7:49:96:89:bf:72:09:e1:5e:d9:c8:5e:8e:
         f7:d2:34:7c:5f:3a:89:db:03:6c:be:f8:c6:99:ef:bd:a1:72:
         8d:8a:4f:14:1f:53:f7:8f:02:b1:06:49:36:d6:77:66:7d:7a:
         ff:be:7e:59:9b:b0:70:e9:35:ea:13:bd:86:1d:a6:2d:94:df:
         51:10:fb:97:dc:7d:8a:b9:7a:cc:c5:14:91:63:24:dd:fd:c0:
         6f:4e:ec:87:a3:5f:67:16:99:20:92:f5:cd:55:80:e3:8c:4b:
         bd:7f:87:e0:d7:54:10:6a:05:cd:bb:4a:03:6f:ec:83:1e:d8:
         9c:75:d0:77:7b:8a:08:25:d6:f7:f0:c0:83:fb:5a:99:de:47:
         d4:90:e5:e0:ab:8f:4a:80:f5:76:f2:74:a3:86:84:eb:f0:03:
         e9:6d:8c:0f:55:2a:cd:d4:0b:0e:2b:38:f1:ba:6d:78:d1:eb:
         61:9b:c1:93:fc:e6:fd:8a:ad:0c:f2:4e:91:ab:35:01:30:8d:
         00:bc:11:59:e6:c1:22:cf:cb:da:6a:1b:dd:c1:42:5e:73:c8:
         24:71:d3:df:3b:e6:4c:ca:e2:c5:ec:1a:fa:3d:9b:e6:a7:60:
         ab:d8:7c:3b:21:f5:07:e7:77:d0:0c:db:89:23:94:64:80:9a:
         f6:48:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----