Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2841/G9yhli7KJdw1Hd7tONe_lVx-Ogg.roa
File:                     G9yhli7KJdw1Hd7tONe_lVx-Ogg.roa (raw, json)
Hash identifier:          Hre6wahVYxOKEZTwtH+S9J1i77cTt58OYF83ZEEiufk=
Subject key identifier:   1B:DC:A1:96:2E:CA:25:DC:35:1D:DE:ED:38:D7:BF:95:5C:7E:3A:08
Certificate issuer:       /CN=C2B0E0673B1FCC33E22CE9D3FFBC669A971CF19E
Certificate serial:       03
Authority key identifier: C2:B0:E0:67:3B:1F:CC:33:E2:2C:E9:D3:FF:BC:66:9A:97:1C:F1:9E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/G9yhli7KJdw1Hd7tONe_lVx-Ogg.roa
Signing time:             Thu 27 May 2021 05:06:20 +0000
ROA not before:           Thu 27 May 2021 05:06:20 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     54600
IP address blocks:        103.126.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2B0E0673B1FCC33E22CE9D3FFBC669A971CF19E
        Validity
            Not Before: May 27 05:06:20 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=1BDCA1962ECA25DC351DDEED38D7BF955C7E3A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:0e:dc:f2:09:ba:68:28:8d:e6:b1:a4:ea:
                    1e:9c:ab:aa:d5:9b:bd:dd:5b:92:d0:f6:34:ea:e2:
                    8e:f7:a1:e7:c3:97:90:64:69:62:9b:52:4b:29:fe:
                    47:8c:08:cc:05:1f:b0:56:4b:4e:87:f4:7d:ae:06:
                    d1:f6:43:56:2d:10:7c:c3:b0:e5:ea:5c:a0:8f:08:
                    2a:ca:5a:36:c7:16:fc:9e:23:58:ba:a6:c6:63:be:
                    54:29:55:c5:ce:55:c2:9b:a0:e3:f0:12:47:a9:24:
                    d6:3e:6a:cb:07:51:f7:50:2a:32:f3:0f:00:f1:c2:
                    5a:84:9d:24:b4:55:7a:9b:1f:12:dd:50:be:ef:8c:
                    c7:f0:b9:a9:e6:51:05:cb:be:31:7e:94:5d:a8:fc:
                    25:f3:ac:2c:06:e0:29:9a:69:91:2b:95:1d:aa:6e:
                    ab:cb:10:b5:8f:74:f1:1f:f1:11:14:8c:85:1a:31:
                    26:b0:b4:84:26:e5:d6:83:11:fe:78:64:46:9f:ec:
                    00:82:dc:4d:08:67:84:50:91:40:c2:4a:d5:3f:07:
                    b3:d0:b4:ce:cf:3f:90:83:02:6b:a3:e0:2a:7b:18:
                    d8:f5:8f:fa:5e:f6:fe:f0:0c:da:68:a1:42:a0:f1:
                    86:96:27:6b:a4:81:09:48:7a:f5:c0:24:0d:3c:d0:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DC:A1:96:2E:CA:25:DC:35:1D:DE:ED:38:D7:BF:95:5C:7E:3A:08
            X509v3 Authority Key Identifier:
                keyid:C2:B0:E0:67:3B:1F:CC:33:E2:2C:E9:D3:FF:BC:66:9A:97:1C:F1:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/wrDgZzsfzDPiLOnT_7xmmpcc8Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2841/G9yhli7KJdw1Hd7tONe_lVx-Ogg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:c6:1a:97:04:bd:24:9a:33:7c:76:df:6a:7a:bf:1f:0b:88:
         5b:05:5e:92:87:bc:34:af:70:b3:c9:8d:38:37:c0:94:48:41:
         02:6b:63:38:e2:0f:40:97:a2:bf:75:e4:1b:ee:15:5c:ea:9b:
         b4:f8:6b:c7:24:31:6e:c4:75:2a:b4:68:ee:99:45:46:cc:65:
         aa:c8:c9:f7:59:6e:44:03:ee:45:11:23:5d:cd:40:c0:26:69:
         46:6e:f3:76:cd:da:bb:dd:1e:8a:99:7c:71:e2:1b:b6:23:5e:
         08:5e:a8:0a:4c:b1:56:51:45:02:84:fa:f5:85:f2:32:d6:cc:
         33:3b:e4:da:2d:93:f5:d6:43:b9:28:28:f5:d0:b7:1e:5d:1b:
         40:85:77:51:94:6d:cc:9f:7d:07:2b:c8:20:57:84:b4:54:a2:
         fa:06:2d:50:db:f6:1b:23:2c:03:e9:52:f1:51:20:2d:24:81:
         da:08:a4:bc:6a:a3:64:09:43:f2:58:c2:33:b3:0d:10:f0:14:
         f8:3e:6f:e9:be:f9:6e:a2:44:28:22:b8:2e:ab:00:aa:2f:e9:
         0f:43:81:3c:87:c0:0d:6c:8b:1f:14:11:b4:a9:35:fb:67:07:
         5b:5c:3d:e7:bc:2c:cd:df:bc:20:8c:25:f5:fc:a9:d2:58:eb:
         07:91:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----