Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2793/3TGPYK6ynCWmc3kyiA9J9XRnBqw.roa
File:                     3TGPYK6ynCWmc3kyiA9J9XRnBqw.roa (raw, json)
Hash identifier:          bgBXOIWFGz/p9YLlo/gAZMBYrQ4GmqHXFa66gafx4lU=
Subject key identifier:   DD:31:8F:60:AE:B2:9C:25:A6:73:79:32:88:0F:49:F5:74:67:06:AC
Certificate issuer:       /CN=F2F339C0B1DF911D224E2D5E4A42F62AEE0A749F
Certificate serial:       03
Authority key identifier: F2:F3:39:C0:B1:DF:91:1D:22:4E:2D:5E:4A:42:F6:2A:EE:0A:74:9F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/3TGPYK6ynCWmc3kyiA9J9XRnBqw.roa
Signing time:             Thu 27 May 2021 05:06:04 +0000
ROA not before:           Thu 27 May 2021 05:06:04 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     38344
IP address blocks:        103.9.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F339C0B1DF911D224E2D5E4A42F62AEE0A749F
        Validity
            Not Before: May 27 05:06:04 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=DD318F60AEB29C25A6737932880F49F5746706AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:46:48:00:63:29:be:b9:f0:06:40:e1:fa:
                    68:98:fd:99:c3:8c:66:c6:04:c7:e4:99:4c:8a:be:
                    41:be:77:05:81:4d:3b:8a:71:2f:9e:68:1b:2e:a4:
                    d8:0e:7b:6a:4a:78:c9:c2:40:49:2c:4b:48:c1:db:
                    75:95:18:23:6f:0b:30:78:cd:3d:bf:8d:f1:32:d1:
                    7c:dd:77:b7:90:18:f9:7d:09:7c:84:f7:c8:b6:93:
                    a7:c6:3c:42:07:2e:63:12:83:5a:f7:bb:07:34:72:
                    23:a0:a8:10:78:5c:e5:37:e7:4f:aa:63:bc:c3:85:
                    9b:69:d7:f1:5a:84:c0:6f:46:28:df:d6:f6:4b:a6:
                    6c:e1:88:8e:a3:d6:ff:26:e6:a4:9e:fa:20:23:34:
                    79:61:3e:cd:74:08:25:e5:66:d9:e2:78:7c:12:ba:
                    1d:f7:0e:aa:5c:56:5b:4f:75:32:88:84:60:03:12:
                    63:64:bf:3c:e7:88:26:70:84:7c:16:dc:15:f3:c0:
                    eb:f0:f7:b6:46:8a:1b:63:29:19:9c:9d:db:15:dd:
                    ab:16:bd:9f:44:05:0b:29:88:e8:f2:d6:77:18:03:
                    0a:11:1f:5c:1b:f0:49:0d:25:52:92:f7:6d:85:76:
                    49:5e:03:78:cc:a8:6b:14:bd:2a:f2:ea:5b:2c:71:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:31:8F:60:AE:B2:9C:25:A6:73:79:32:88:0F:49:F5:74:67:06:AC
            X509v3 Authority Key Identifier:
                keyid:F2:F3:39:C0:B1:DF:91:1D:22:4E:2D:5E:4A:42:F6:2A:EE:0A:74:9F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/8vM5wLHfkR0iTi1eSkL2Ku4KdJ8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2793/3TGPYK6ynCWmc3kyiA9J9XRnBqw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:79:38:63:86:db:11:15:1c:a7:08:0f:2c:49:21:40:7e:e5:
         e0:6e:05:12:81:2d:66:29:76:1c:ba:0f:15:09:c5:92:fe:28:
         b0:00:73:f0:b6:fc:dd:97:16:78:96:5e:cc:cd:9c:16:d5:cb:
         bd:1a:46:c4:30:6d:f6:a8:c0:d3:3f:75:e9:ed:84:ca:e8:58:
         57:3d:ab:24:05:fc:66:5b:85:f6:86:cc:bb:cb:2d:65:80:be:
         2e:3d:a3:7b:52:98:66:a3:e6:4e:cf:b6:c4:25:a7:01:15:f7:
         5f:06:8b:6b:cd:43:96:9b:da:85:55:d1:8c:da:b6:eb:52:27:
         b1:74:dc:be:9d:6e:36:61:bf:36:70:fd:30:b3:8e:b6:7a:36:
         ef:f6:e6:b5:7e:b9:80:d8:be:67:e8:c0:11:be:38:bc:ba:3d:
         e7:4d:d9:c0:87:76:e5:b8:fa:2f:81:46:84:83:8e:e4:ae:74:
         4f:3d:32:7c:fb:f6:28:55:b0:ca:14:ae:5b:66:86:29:ee:9b:
         e0:da:ab:a6:71:95:b1:ac:e8:f2:dd:5a:d7:c0:ff:b5:cf:79:
         08:42:9d:ba:67:f9:ac:95:7e:4f:01:c3:a7:be:4e:6b:79:10:
         33:6f:d3:92:b8:28:61:7d:a5:46:d8:9f:b3:ba:5b:b4:24:76:
         21:e9:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----