Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/JGS3YQDXPUrjAAkiWgDmWHwrsMU.roa
File:                     JGS3YQDXPUrjAAkiWgDmWHwrsMU.roa (raw, json)
Hash identifier:          TcGWUqteHAgl6qY9pWmEGPC3si5wS87Hj48CpAsunpk=
Subject key identifier:   24:64:B7:61:00:D7:3D:4A:E3:00:09:22:5A:00:E6:58:7C:2B:B0:C5
Certificate issuer:       /CN=9F2B6854BE70947F0785FF966203BB650BDD1682
Certificate serial:       06F5
Authority key identifier: 9F:2B:68:54:BE:70:94:7F:07:85:FF:96:62:03:BB:65:0B:DD:16:82
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/JGS3YQDXPUrjAAkiWgDmWHwrsMU.roa
Signing time:             Thu 18 May 2023 07:23:14 +0000
ROA not before:           Thu 18 May 2023 07:23:14 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     17964
IP address blocks:        2403:8080::/32 maxlen: 64
                          2403:8880::/32 maxlen: 64
                          2403:a880::/32 maxlen: 64
                          2403:b080::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2B6854BE70947F0785FF966203BB650BDD1682
        Validity
            Not Before: May 18 07:23:14 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=2464B76100D73D4AE30009225A00E6587C2BB0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:e9:38:d4:9d:0e:1f:42:01:67:85:c3:e2:
                    bf:78:40:50:c6:25:64:e4:1d:09:fb:76:d5:cd:21:
                    51:bd:b3:18:29:73:d3:b2:5b:6e:a7:7c:8c:25:44:
                    e5:eb:3e:6a:a3:6e:27:35:a7:33:9b:08:46:a7:23:
                    4a:d0:1c:53:8b:c4:a2:7c:40:20:e4:e7:f5:e1:f8:
                    be:c2:2a:e6:17:47:8b:dc:45:ab:63:e0:e2:88:ff:
                    da:08:78:51:a2:c9:d1:aa:e4:69:af:01:49:ab:a0:
                    3a:6d:e1:9a:4c:ee:cd:98:63:e0:76:b1:61:c7:87:
                    be:b2:52:7b:6b:5f:13:b7:f1:b9:a2:f0:50:2f:80:
                    1d:75:ec:7c:7d:38:fc:45:f8:13:c7:ad:fd:d3:2e:
                    47:36:3b:be:ce:e1:7f:9b:3c:c4:6c:63:cf:28:29:
                    71:c1:2b:75:55:17:58:d1:d6:31:a0:9b:ac:3c:5b:
                    65:54:db:3c:c2:85:71:b8:28:33:26:7b:26:01:d9:
                    6d:63:a2:d7:2d:b1:c8:c4:b1:b1:a4:22:b1:67:2f:
                    57:7d:e3:6c:ce:cb:b1:25:a6:75:6e:c1:ab:c1:6b:
                    79:b6:ed:ab:66:da:b5:ad:9e:8e:72:bf:28:72:7a:
                    e2:6f:51:7d:55:68:a6:1f:a2:31:ff:9d:6d:7a:9e:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:64:B7:61:00:D7:3D:4A:E3:00:09:22:5A:00:E6:58:7C:2B:B0:C5
            X509v3 Authority Key Identifier:
                keyid:9F:2B:68:54:BE:70:94:7F:07:85:FF:96:62:03:BB:65:0B:DD:16:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/nytoVL5wlH8Hhf-WYgO7ZQvdFoI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/JGS3YQDXPUrjAAkiWgDmWHwrsMU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8080::/32
                  2403:8880::/32
                  2403:a880::/32
                  2403:b080::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:3d:6c:a8:40:82:ba:e1:68:70:2a:74:79:6e:76:da:6b:02:
         28:95:22:89:df:13:a2:45:77:33:37:02:67:ed:6b:3d:f6:56:
         ed:c4:2d:88:a8:dc:91:4b:5f:d9:5c:3d:c4:10:2e:b8:ba:24:
         72:bb:e0:e6:69:f6:a1:62:f6:26:7e:7f:a2:8f:ca:ed:01:88:
         c7:cd:fa:57:c3:0d:86:27:77:fa:b3:39:1a:85:80:8e:1f:af:
         a4:1f:61:19:dc:a7:7b:4f:39:74:d8:3c:11:21:2b:7c:f7:87:
         19:c0:30:e1:f1:12:3e:8f:7f:c7:39:16:bd:b2:dd:8b:f4:38:
         8d:9c:77:aa:04:43:d7:e7:12:dc:86:23:33:82:6e:91:ea:05:
         f0:e9:ab:1a:5d:8d:22:9f:e2:52:22:2e:20:1d:a3:5a:f5:53:
         8d:0d:30:c3:6e:81:37:9d:0c:d6:7c:b3:92:22:ec:09:03:ee:
         ae:0f:0d:f7:fe:6a:e6:f4:65:22:ff:62:00:69:3c:7c:78:3d:
         79:0d:aa:fe:bb:58:14:cc:ec:e9:1f:1d:54:e6:ec:58:c5:cb:
         b5:28:d6:96:27:2e:86:0c:cc:86:a2:ae:9c:16:f9:8d:07:56:
         21:aa:3a:09:b5:92:aa:97:65:0d:0d:35:15:b7:f4:f1:7b:2f:
         c6:0c:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----