Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/27/MfMHKuEnO5Sf66kSXOsE7OODx1M.roa
File:                     MfMHKuEnO5Sf66kSXOsE7OODx1M.roa (raw, json)
Hash identifier:          QJdiNYnMMJSrVcJexg5xIppe82eXRg02zn8M6lyg5+0=
Subject key identifier:   31:F3:07:2A:E1:27:3B:94:9F:EB:A9:12:5C:EB:04:EC:E3:83:C7:53
Certificate issuer:       /CN=0CEC5F4EB68CBD2CBF8B36793A1565B58664FEB6
Certificate serial:       04
Authority key identifier: 0C:EC:5F:4E:B6:8C:BD:2C:BF:8B:36:79:3A:15:65:B5:86:64:FE:B6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DOxfTraMvSy_izZ5OhVltYZk_rY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/MfMHKuEnO5Sf66kSXOsE7OODx1M.roa
Signing time:             Thu 27 May 2021 05:03:56 +0000
ROA not before:           Thu 27 May 2021 05:03:56 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     17964
IP address blocks:        2403:8080::/32 maxlen: 64
                          2403:8880::/32 maxlen: 64
                          2403:a880::/32 maxlen: 64
                          2403:b080::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CEC5F4EB68CBD2CBF8B36793A1565B58664FEB6
        Validity
            Not Before: May 27 05:03:56 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=31F3072AE1273B949FEBA9125CEB04ECE383C753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:97:a9:e2:06:40:42:db:0d:80:d6:28:b4:
                    2b:cc:02:06:74:b9:77:8c:cb:09:8c:1e:a4:99:33:
                    01:cf:d5:23:1d:af:2c:b5:0e:e6:a1:eb:5e:54:3a:
                    5e:35:bc:29:59:7f:49:c5:d4:61:9e:da:3a:2c:fa:
                    f7:dd:e7:65:1b:71:6a:b0:c2:29:03:c7:7c:59:b6:
                    41:c4:af:f7:b8:bc:04:16:64:88:d7:d0:31:7b:b3:
                    95:6f:43:db:ea:c1:a6:93:df:7b:20:dc:90:98:f5:
                    78:db:46:a7:dd:0a:a0:26:43:f0:c6:af:a9:ba:dc:
                    4b:e7:07:69:7f:68:c7:99:d7:53:1f:6a:5f:43:6a:
                    cb:7d:dd:54:48:50:61:de:88:58:d4:a2:75:2f:30:
                    7f:23:02:79:e9:df:4e:63:f9:44:f9:de:d5:a0:8a:
                    dd:07:75:7a:f0:b9:be:ca:af:3a:6c:c3:9b:6d:d7:
                    26:ca:e2:36:bd:23:a2:b8:3d:83:f4:aa:e9:f1:3f:
                    c7:92:23:8d:19:f2:6e:ed:d8:c0:ed:a4:c7:f7:9c:
                    a9:d7:2a:e0:e3:5a:2b:2a:b0:2c:de:eb:07:d7:25:
                    78:80:4d:10:14:e8:9b:ca:89:4a:af:24:87:52:d9:
                    86:4f:2b:22:74:6d:55:51:bc:43:88:bc:2e:48:b9:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F3:07:2A:E1:27:3B:94:9F:EB:A9:12:5C:EB:04:EC:E3:83:C7:53
            X509v3 Authority Key Identifier:
                keyid:0C:EC:5F:4E:B6:8C:BD:2C:BF:8B:36:79:3A:15:65:B5:86:64:FE:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/DOxfTraMvSy_izZ5OhVltYZk_rY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/DOxfTraMvSy_izZ5OhVltYZk_rY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/27/MfMHKuEnO5Sf66kSXOsE7OODx1M.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8080::/32
                  2403:8880::/32
                  2403:a880::/32
                  2403:b080::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:53:02:be:78:7f:0b:c5:bc:d0:24:a1:8d:45:7e:3e:01:11:
         3f:b7:83:52:3c:b6:23:46:8c:9c:63:94:0e:28:6a:8d:5c:35:
         bf:9d:91:34:b8:c3:5a:cf:e1:e4:88:2f:a0:81:02:1a:20:34:
         d4:b4:e5:7f:b1:d4:74:ee:ff:77:8f:9a:c3:a5:07:03:83:eb:
         3c:95:4a:e2:f7:70:af:ac:f5:93:8f:18:cd:e6:73:3e:70:21:
         ee:58:b4:f4:8c:ac:c4:f4:5e:0c:3f:81:33:75:0e:ea:8a:5e:
         1b:0c:b4:92:2a:0d:c8:93:2e:b2:b1:48:56:6e:94:93:e9:38:
         48:b1:1d:f0:4b:9a:57:ca:8e:a7:55:6b:4d:51:07:fb:fa:5d:
         41:54:ba:b5:f9:93:a6:c0:13:43:2e:21:f6:0f:3c:20:51:ef:
         d8:f5:f0:8e:aa:ae:c5:1b:d0:61:91:65:2f:a8:78:85:64:51:
         77:1f:7f:ad:44:7f:03:a6:a9:12:b3:26:db:9b:aa:21:4f:c9:
         21:6f:83:8a:df:3b:da:80:bc:1e:cf:91:46:f4:32:33:98:f5:
         b1:29:eb:fb:25:9c:7b:b4:e9:46:6f:8b:0e:47:fe:19:be:39:
         6b:a9:7d:35:fd:da:51:5a:3a:94:81:72:45:d3:00:30:8f:9f:
         ac:77:d5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----