Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/v5P2c3vt-khCmNEUTfnPkCcLdWQ.roa
File:                     v5P2c3vt-khCmNEUTfnPkCcLdWQ.roa (raw, json)
Hash identifier:          vnqN2zFx2zJbM6p0Qz/El4/U+ZCO8TQsQaRPam8h6RU=
Subject key identifier:   BF:93:F6:73:7B:ED:FA:48:42:98:D1:14:4D:F9:CF:90:27:0B:75:64
Certificate issuer:       /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Certificate serial:       0914
Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/v5P2c3vt-khCmNEUTfnPkCcLdWQ.roa
Signing time:             Tue 07 Jun 2022 10:09:48 +0000
ROA not before:           Tue 07 Jun 2022 10:09:48 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     137797
IP address blocks:        2402:f9c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2324 (0x914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
        Validity
            Not Before: Jun  7 10:09:48 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=BF93F6737BEDFA484298D1144DF9CF90270B7564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:a9:7f:8c:6e:48:0d:02:39:4e:14:91:12:
                    ad:dd:f0:e7:aa:0c:65:00:9b:d6:ac:24:a6:74:32:
                    00:8b:83:a7:4b:05:99:c0:4c:f6:f8:38:7b:7b:57:
                    7d:ab:7b:a9:d5:7a:4c:50:83:0a:cf:ab:29:e0:8a:
                    ae:b6:1f:aa:0b:c8:42:19:d7:18:92:85:df:3d:69:
                    6d:b7:75:31:2e:62:02:42:f9:50:1d:43:48:99:7d:
                    60:2b:9f:a5:83:ad:b2:d7:fd:05:c5:26:a5:eb:f7:
                    73:e8:f5:f7:ff:8c:0e:a4:0e:65:72:b3:5b:a9:8e:
                    5a:7a:87:5b:4e:a1:6a:02:7c:3d:fd:61:cf:88:59:
                    24:ca:ce:11:04:40:63:64:ea:ad:b8:e8:c6:86:84:
                    34:0d:10:97:37:43:84:eb:dd:2f:5a:4e:7f:b2:7b:
                    32:5f:c2:43:ce:60:82:82:e1:45:d9:94:b1:21:7a:
                    da:b5:c1:b0:18:00:df:94:f9:a2:8e:31:9a:da:e1:
                    a8:2a:7e:f4:bc:bb:c1:7b:12:17:28:f5:15:09:ce:
                    92:8b:7e:ab:91:e5:bc:07:3b:d6:44:d2:da:5c:7e:
                    06:92:d8:e6:c0:f8:a1:9c:85:b8:81:7a:02:15:67:
                    bd:23:5c:7a:6c:41:bb:37:45:58:17:4f:72:e8:30:
                    d6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:93:F6:73:7B:ED:FA:48:42:98:D1:14:4D:F9:CF:90:27:0B:75:64
            X509v3 Authority Key Identifier:
                keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/v5P2c3vt-khCmNEUTfnPkCcLdWQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:f9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:ba:07:a8:31:b8:1f:04:60:02:00:e9:78:e9:00:34:a6:
         3d:a5:91:5d:a0:68:00:f2:cb:59:e6:35:af:6e:91:8c:ab:93:
         3f:e1:25:40:5b:f3:01:ca:7c:8c:b8:6a:d4:2d:97:09:a6:7c:
         c0:6b:db:1b:54:99:dc:1f:71:3b:c1:9f:36:cf:c9:fa:d0:ad:
         10:66:33:94:df:b0:9d:9e:d3:03:0a:e9:25:3e:b8:bf:78:55:
         e6:f2:c0:33:6c:de:1f:ed:21:82:ee:74:5b:4e:6f:da:05:e8:
         38:1e:6c:6a:e5:94:1d:27:58:ab:ea:78:de:46:45:94:b9:8f:
         8a:b6:ef:b2:e3:0b:ad:72:d5:17:3f:f0:2d:8c:a2:f4:d7:d2:
         6c:a4:c7:60:71:fc:07:49:39:60:55:b9:8d:e2:a3:9b:b3:21:
         6a:21:25:45:29:7c:85:42:62:53:f0:34:c1:ac:ac:bd:21:3d:
         7b:80:77:05:00:b1:9b:29:f1:b1:70:b1:d0:7c:ed:81:35:f8:
         27:21:8e:52:30:21:bd:18:02:37:5b:93:56:42:46:0b:f0:3e:
         76:96:a2:8b:06:9f:01:c3:fc:59:e2:7b:e3:0e:89:8b:d3:f1:
         2d:33:9b:32:b9:ce:bd:86:ae:63:f3:25:23:f5:85:af:37:da:
         95:77:ce:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----