Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2779/IJLwoHA40IRVqkDBl0UaHw8jSAs.roa
File:                     IJLwoHA40IRVqkDBl0UaHw8jSAs.roa (raw, json)
Hash identifier:          MP7ZIhuiPa/kpx9D6zvA/TOEWrWCHyqbauPkGq3tbUA=
Subject key identifier:   20:92:F0:A0:70:38:D0:84:55:AA:40:C1:97:45:1A:1F:0F:23:48:0B
Certificate issuer:       /CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
Certificate serial:       7E
Authority key identifier: 1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/IJLwoHA40IRVqkDBl0UaHw8jSAs.roa
Signing time:             Thu 13 Jan 2022 09:57:11 +0000
ROA not before:           Thu 13 Jan 2022 09:57:11 +0000
ROA not after:            Wed 21 Dec 2022 07:13:29 +0000
asID:                     21859
IP address blocks:        103.119.28.0/24 maxlen: 24
                          103.119.29.0/24 maxlen: 24
                          103.119.30.0/24 maxlen: 24
                          103.119.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A1D06CAC926E98C67F1F614F512AF4F1438C3DF
        Validity
            Not Before: Jan 13 09:57:11 2022 GMT
            Not After : Dec 21 07:13:29 2022 GMT
        Subject: CN=2092F0A07038D08455AA40C197451A1F0F23480B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:1c:24:47:d5:55:2b:0f:8f:f0:3c:a4:db:
                    fc:95:62:1f:6f:8d:f9:36:15:d3:b7:76:9f:28:23:
                    b7:e2:3e:ca:52:8f:dd:e7:f5:f0:42:78:97:58:b9:
                    7a:75:cb:c8:11:43:1a:46:58:2a:88:9a:79:57:56:
                    20:ce:5a:f2:4f:ec:51:41:28:e9:6b:b6:de:fb:d4:
                    16:c4:85:6e:82:55:62:e9:33:75:e7:e4:3c:20:53:
                    79:dc:9e:d6:a5:1f:8d:ab:d0:40:26:be:08:78:9b:
                    f7:69:93:5e:68:7b:b2:c0:9e:d0:32:48:e0:30:a1:
                    4c:19:1f:8a:c6:a2:79:70:e9:fc:34:0b:26:93:8c:
                    d8:7b:22:c0:88:ac:eb:b7:2f:c3:de:97:62:0f:62:
                    6b:67:65:83:f5:09:4f:d0:98:6f:b1:8c:3c:89:4a:
                    53:59:fb:cf:77:e9:50:24:eb:4b:e8:7a:bf:78:28:
                    f0:27:ad:a5:07:6f:39:31:95:2f:32:9f:38:af:35:
                    9b:aa:64:35:08:73:12:b0:43:28:2e:58:6c:1d:12:
                    a2:e5:32:57:f1:83:d1:b5:8b:ba:f8:28:51:37:17:
                    33:dd:b9:07:ec:0a:31:12:23:a4:9a:5f:77:c5:e8:
                    0d:1e:d2:02:86:13:4e:c2:58:82:18:9d:02:0e:13:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:F0:A0:70:38:D0:84:55:AA:40:C1:97:45:1A:1F:0F:23:48:0B
            X509v3 Authority Key Identifier:
                keyid:1A:1D:06:CA:C9:26:E9:8C:67:F1:F6:14:F5:12:AF:4F:14:38:C3:DF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Gh0Gyskm6Yxn8fYU9RKvTxQ4w98.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2779/IJLwoHA40IRVqkDBl0UaHw8jSAs.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:43:cc:cd:eb:e3:63:6f:af:94:7e:07:d4:4d:e2:55:22:e5:
         91:d8:4c:53:cf:ca:30:13:95:6b:63:0d:51:47:f0:10:a1:9c:
         a2:c9:62:75:9c:8a:ea:fa:97:6a:03:ff:f8:0c:71:c0:02:9d:
         a9:8e:fb:71:f9:41:7a:a5:6d:d4:44:1f:92:80:d0:77:03:da:
         03:52:65:19:b6:0f:26:33:e5:37:c7:fe:80:30:02:25:06:a1:
         82:8a:81:8d:ae:a3:e3:26:a3:15:ee:60:d5:56:84:dc:1f:1b:
         9b:5f:a9:8d:2d:5b:f8:5f:4d:ad:bb:36:99:65:2d:f6:e0:8f:
         dd:4b:e8:22:4c:a5:05:75:9e:e3:c8:8f:aa:c6:6e:b5:68:ed:
         dd:7a:98:16:97:41:3b:75:79:7c:11:3f:d4:ae:80:61:68:fb:
         46:9c:dd:84:52:32:69:25:21:74:2e:e2:1c:81:3f:94:8e:7b:
         95:07:f5:0b:d1:ba:a7:a2:9d:cf:f6:8d:d6:60:e0:12:d0:88:
         c9:f5:1b:ae:d4:26:d6:ca:51:cd:74:0d:6d:66:3a:a0:3b:00:
         44:d1:9c:f5:d7:55:e0:a6:0b:79:93:93:b2:d5:a4:ff:3e:21:
         b4:03:ca:dd:f2:cc:4e:ba:f6:34:07:87:d7:b3:f9:f1:46:fe:
         b6:a6:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----