Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2785/fNyvOwtnunV1XeOyzS64Q9Zuqv8.roa
File:                     fNyvOwtnunV1XeOyzS64Q9Zuqv8.roa (raw, json)
Hash identifier:          zEcRqc5IKvGN5f9ubaIfwanS6xUnq+4WlUgN52XIR2Q=
Subject key identifier:   7C:DC:AF:3B:0B:67:BA:75:75:5D:E3:B2:CD:2E:B8:43:D6:6E:AA:FF
Certificate issuer:       /CN=7F1DB89923D58D2D4E925D7F29B4FA552CB1A344
Certificate serial:       03
Authority key identifier: 7F:1D:B8:99:23:D5:8D:2D:4E:92:5D:7F:29:B4:FA:55:2C:B1:A3:44
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fx24mSPVjS1Okl1_KbT6VSyxo0Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/fNyvOwtnunV1XeOyzS64Q9Zuqv8.roa
Signing time:             Thu 27 May 2021 05:05:58 +0000
ROA not before:           Thu 27 May 2021 05:05:58 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     137720
IP address blocks:        103.120.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F1DB89923D58D2D4E925D7F29B4FA552CB1A344
        Validity
            Not Before: May 27 05:05:58 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=7CDCAF3B0B67BA75755DE3B2CD2EB843D66EAAFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bc:c2:d9:00:3e:b7:0b:99:c1:4c:3c:3f:81:
                    3c:b4:00:50:26:62:f1:b0:a1:95:1e:93:18:6d:e4:
                    00:e2:e9:63:f6:83:95:8d:68:b3:da:87:c6:04:8a:
                    9f:29:88:70:b0:e0:ce:7e:d0:0f:98:65:2f:9d:7b:
                    a4:f5:f8:36:1d:90:02:44:9a:d8:58:bd:86:e6:8c:
                    5e:d3:09:a7:3c:0b:a3:29:9f:84:62:2c:8e:ef:e7:
                    73:8a:a1:19:d8:b4:04:50:20:bb:6a:b1:6e:37:ce:
                    54:fa:36:4d:fa:04:e7:6b:7f:01:a8:ff:a5:15:1a:
                    4d:ac:64:60:ec:7b:da:e7:c1:c1:83:63:fe:fc:d7:
                    78:49:25:1b:92:fc:24:ad:3f:f6:62:44:58:35:4d:
                    21:66:05:69:ae:61:97:95:d1:81:66:e2:78:68:83:
                    55:76:a5:33:34:cd:4f:ea:00:b5:c2:3d:63:a6:13:
                    d0:12:3e:6c:00:df:87:fb:60:88:92:ac:b6:d6:a9:
                    c7:83:6f:39:35:97:5c:77:f1:94:9c:00:1a:c6:bf:
                    1c:21:e9:2d:4f:7f:64:e1:0a:c3:4f:71:a1:2a:aa:
                    d4:69:23:72:2a:e1:44:01:e7:25:00:1d:7a:a4:8e:
                    bd:81:64:29:4e:f9:a7:1f:63:8c:9f:b2:5a:b0:2d:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DC:AF:3B:0B:67:BA:75:75:5D:E3:B2:CD:2E:B8:43:D6:6E:AA:FF
            X509v3 Authority Key Identifier:
                keyid:7F:1D:B8:99:23:D5:8D:2D:4E:92:5D:7F:29:B4:FA:55:2C:B1:A3:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/fx24mSPVjS1Okl1_KbT6VSyxo0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fx24mSPVjS1Okl1_KbT6VSyxo0Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2785/fNyvOwtnunV1XeOyzS64Q9Zuqv8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:cd:f5:4c:8a:69:33:15:23:08:ee:fe:f4:35:6e:ac:91:99:
         fa:47:26:a3:1e:b1:f0:b1:20:d6:ea:e5:a0:9a:8b:7d:c6:39:
         b5:92:8a:eb:e6:8b:ff:18:e5:0f:93:b3:0c:d8:4a:eb:8b:19:
         15:04:49:3f:87:33:b3:8b:32:fb:bd:9c:61:34:97:aa:46:fc:
         37:15:71:0f:51:37:19:1e:7b:84:ac:2e:76:42:82:a8:71:ab:
         4c:b0:f9:83:4d:de:f7:d4:f6:8e:a4:31:0f:cf:df:cd:a7:2c:
         82:4f:98:34:30:de:aa:f5:b5:b7:3e:93:c5:41:cc:3f:39:58:
         b9:7d:97:9a:f3:93:85:a2:e7:92:f8:07:94:b1:66:13:08:ce:
         87:1c:1b:19:60:f1:6c:b4:f9:57:47:c9:52:60:fa:8c:f9:e1:
         0d:07:1f:0d:33:01:2c:52:8c:c2:be:dc:a4:6d:85:82:15:2e:
         37:87:b3:ea:8b:7a:04:2d:35:a6:03:16:39:9d:29:29:e8:a9:
         77:c3:b2:fa:0e:9d:69:f4:ff:50:37:0c:a9:2d:8f:66:f7:2a:
         b1:5e:aa:8e:6e:e2:3c:a6:68:1d:a3:85:3b:7c:41:d3:47:62:
         10:b7:63:cb:ed:10:42:f2:29:18:3a:ff:f1:4b:08:46:0f:15:
         5d:6f:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----