Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/IZVI9igWMC8Psk3H_tRcrXYCH5Q.roa
File:                     IZVI9igWMC8Psk3H_tRcrXYCH5Q.roa (raw, json)
Hash identifier:          ri5mJiSl8fBeUWdjsa98BE8x6RbSX6ud/csfgIfUE8k=
Subject key identifier:   21:95:48:F6:28:16:30:2F:0F:B2:4D:C7:FE:D4:5C:AD:76:02:1F:94
Certificate issuer:       /CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
Certificate serial:       04
Authority key identifier: 8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/IZVI9igWMC8Psk3H_tRcrXYCH5Q.roa
Signing time:             Wed 01 Jun 2022 07:08:23 +0000
ROA not before:           Wed 01 Jun 2022 07:08:23 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     137798
IP address blocks:        2402:f8c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E3E027142C633D56598418DF6DEBC01BDD8008C
        Validity
            Not Before: Jun  1 07:08:23 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=219548F62816302F0FB24DC7FED45CAD76021F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:a2:84:be:0a:bd:ae:7c:c9:ff:57:47:a2:
                    38:cf:18:78:02:31:45:05:b8:61:0d:7a:f2:b8:e2:
                    5b:db:29:38:e3:4e:3a:01:f7:b9:7a:bb:7a:fb:08:
                    b4:a6:f9:94:12:63:e9:cf:ab:89:2e:8f:34:9d:21:
                    0a:33:04:d2:22:67:2f:4f:bd:9d:7e:09:9e:58:b8:
                    74:36:3c:59:40:94:c2:42:67:ac:ea:51:20:bc:94:
                    10:4d:60:e8:86:db:f3:1c:ee:4b:a9:83:61:eb:ec:
                    d7:b8:55:02:94:52:37:7d:13:e0:71:48:79:d0:cb:
                    3b:48:8c:e9:00:06:86:1c:ce:02:18:ea:bd:71:c4:
                    a9:fe:4c:30:9f:c3:70:cc:91:90:34:c1:1b:47:0c:
                    b4:09:e6:e2:1f:ec:f2:65:67:48:74:29:ed:5d:53:
                    e3:2c:be:a3:71:6e:9b:1e:a3:63:78:18:a0:dc:b4:
                    83:37:2d:cf:6d:2a:6b:af:70:57:f7:43:a5:63:c6:
                    d7:da:1d:cd:a5:8a:18:71:cd:aa:79:67:40:f7:38:
                    e2:46:26:8d:36:73:f6:55:dd:64:33:3b:81:eb:0b:
                    f2:cb:2b:57:af:c4:85:09:cd:74:70:11:f4:a3:f1:
                    62:35:ec:77:20:9c:d2:e0:de:5f:67:10:06:f1:0a:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:95:48:F6:28:16:30:2F:0F:B2:4D:C7:FE:D4:5C:AD:76:02:1F:94
            X509v3 Authority Key Identifier:
                keyid:8E:3E:02:71:42:C6:33:D5:65:98:41:8D:F6:DE:BC:01:BD:D8:00:8C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/jj4CcULGM9VlmEGN9t68Ab3YAIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/jj4CcULGM9VlmEGN9t68Ab3YAIw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/IZVI9igWMC8Psk3H_tRcrXYCH5Q.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:7b:ef:e0:94:02:15:5d:7a:bc:53:d8:d5:d7:e8:24:b2:74:
         f7:52:50:43:fa:4b:31:14:5f:d7:83:af:49:da:49:0c:b4:cc:
         10:e4:de:f3:b6:47:34:c6:7b:0a:d7:f5:12:ff:2e:b3:07:ee:
         5b:0b:95:ce:55:14:66:de:44:a4:10:42:cf:af:2c:4d:ca:ab:
         4f:58:79:bc:a0:1a:6c:0f:7d:df:b0:f6:ae:17:9d:e7:dc:c5:
         95:bc:d0:51:b3:a1:53:e6:2c:58:59:2c:5e:fa:cc:4a:8f:69:
         15:49:10:52:ee:d1:c8:a2:03:7a:80:2e:72:1e:51:64:95:a0:
         bb:11:57:f2:46:76:84:5f:b0:db:3c:6c:ac:a6:e7:e0:bd:dc:
         bc:8d:95:29:bb:61:6d:45:05:1d:fe:b8:38:ec:b1:96:e5:03:
         46:3e:c4:f3:71:12:08:8f:3c:3c:49:1e:e7:58:b3:b0:e8:93:
         6f:98:6d:85:4e:6e:a7:1a:e1:2e:5f:57:5e:b2:7b:a4:a1:9e:
         b2:4c:33:0c:43:12:52:6a:f8:a5:98:ee:99:c4:fc:bc:b4:b0:
         1e:5b:e7:02:df:e7:91:55:ca:fd:2d:86:c9:7d:42:1b:14:1a:
         6c:2a:04:2f:78:7d:0b:e9:b0:4e:ee:28:36:0c:68:60:40:ce:
         9d:e1:92:aa
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RTNF
MDI3MTQyQzYzM0Q1NjU5ODQxOERGNkRFQkMwMUJERDgwMDhDMB4XDTIyMDYwMTA3
MDgyM1oXDTIzMDYwMTA2NTg1NFowMzExMC8GA1UEAxMoMjE5NTQ4RjYyODE2MzAy
RjBGQjI0REM3RkVENDVDQUQ3NjAyMUY5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALTVooS+Cr2ufMn/V0eiOM8YeAIxRQW4YQ168rjiW9spOONOOgH3
uXq7evsItKb5lBJj6c+riS6PNJ0hCjME0iJnL0+9nX4Jnli4dDY8WUCUwkJnrOpR
ILyUEE1g6Ibb8xzuS6mDYevs17hVApRSN30T4HFIedDLO0iM6QAGhhzOAhjqvXHE
qf5MMJ/DcMyRkDTBG0cMtAnm4h/s8mVnSHQp7V1T4yy+o3Fumx6jY3gYoNy0gzct
z20qa69wV/dDpWPG19odzaWKGHHNqnlnQPc44kYmjTZz9lXdZDM7gesL8ssrV6/E
hQnNdHAR9KPxYjXsdyCc0uDeX2cQBvEKdncCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBQhlUj2KBYwLw+yTcf+1FytdgIflDAfBgNVHSMEGDAWgBSOPgJxQsYz1WWYQY32
3rwBvdgAjDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzM4
L2pqNENjVUxHTTlWbG1FR045dDY4QWIzWUFJdy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvamo0Q2NVTEdNOVZsbUVHTjl0NjhBYjNZQUl3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjczOC9JWlZJOWlnV01DOFBz
azNIX3RSY3JYWUNINVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAJAL4wAAAMA0GCSqGSIb3DQEBCwUAA4IBAQDQe+/glAIVXXq8U9jV1+gksnT3
UlBD+ksxFF/Xg69J2kkMtMwQ5N7ztkc0xnsK1/US/y6zB+5bC5XOVRRm3kSkEELP
ryxNyqtPWHm8oBpsD33fsPauF53n3MWVvNBRs6FT5ixYWSxe+sxKj2kVSRBS7tHI
ogN6gC5yHlFklaC7EVfyRnaEX7DbPGyspufgvdy8jZUpu2FtRQUd/rg47LGW5QNG
PsTzcRIIjzw8SR7nWLOw6JNvmG2FTm6nGuEuX1desnukoZ6yTDMMQxJSavilmO6Z
xPy8tLAeW+cC3+eRVcr9LYbJfUIbFBpsKgQveH0L6bBO7ig2DGhgQM6d4ZKq
-----END CERTIFICATE-----