Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2889/eAhXVL0Il1r4dlYxaqhsLjedREI.roa
File:                     eAhXVL0Il1r4dlYxaqhsLjedREI.roa (raw, json)
Hash identifier:          M9HCsHVtGh9iVN3bYkL+yz1KDrLyP6MvVhcShql9hLs=
Subject key identifier:   78:08:57:54:BD:08:97:5A:F8:76:56:31:6A:A8:6C:2E:37:9D:44:42
Certificate issuer:       /CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
Certificate serial:       0D8C
Authority key identifier: A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/eAhXVL0Il1r4dlYxaqhsLjedREI.roa
Signing time:             Fri 13 Jan 2023 03:52:38 +0000
ROA not before:           Fri 13 Jan 2023 03:52:38 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     139021
IP address blocks:        219.234.16.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3468 (0xd8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A93A86712684A72E5DF41F00AFA04C5F01A97735
        Validity
            Not Before: Jan 13 03:52:38 2023 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=78085754BD08975AF87656316AA86C2E379D4442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:75:d3:c4:07:33:1f:cb:a1:b2:d1:a1:ae:80:
                    b6:52:d9:bd:56:cd:07:b3:c5:f2:b2:12:b8:a9:3d:
                    35:a8:24:95:b7:26:26:ee:0b:b7:0f:34:21:eb:af:
                    69:0c:02:37:7f:ec:04:6a:92:61:68:44:ce:69:f8:
                    7f:03:47:5e:64:89:da:d6:03:2b:fe:57:5d:9b:8c:
                    1f:46:b7:20:0c:8d:fb:35:ce:d3:e3:6b:6b:e4:73:
                    43:3b:77:62:52:f4:38:60:34:10:d4:11:90:c0:a9:
                    a3:46:ae:84:f6:4e:2d:29:81:c0:5e:de:64:45:13:
                    dd:13:a9:8a:49:50:2d:b0:4e:0c:9c:85:51:29:5c:
                    6b:52:1e:37:2f:c2:f5:2e:7f:f1:10:66:67:4c:0f:
                    d7:e3:ec:3b:fb:5c:65:f2:b1:de:ee:f5:aa:77:d9:
                    0e:d4:9d:63:d4:15:dc:56:48:af:07:2b:61:19:fa:
                    6c:b0:b3:32:db:db:d9:05:fa:35:6b:c6:d9:75:19:
                    9e:3d:db:d3:bd:6a:db:21:67:13:25:83:71:ae:9b:
                    84:dc:71:1f:16:52:47:f1:71:41:75:12:71:e3:82:
                    76:11:a0:eb:6b:fe:47:6d:43:82:8b:d8:da:18:d2:
                    70:a4:f8:ef:49:ac:18:76:8a:61:e4:71:38:0d:23:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:08:57:54:BD:08:97:5A:F8:76:56:31:6A:A8:6C:2E:37:9D:44:42
            X509v3 Authority Key Identifier:
                keyid:A9:3A:86:71:26:84:A7:2E:5D:F4:1F:00:AF:A0:4C:5F:01:A9:77:35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/qTqGcSaEpy5d9B8Ar6BMXwGpdzU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2889/eAhXVL0Il1r4dlYxaqhsLjedREI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.234.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:34:84:00:00:b9:0f:4d:2b:f5:0b:13:49:a9:4c:85:ed:5e:
         01:eb:44:68:0e:6c:dd:09:2b:61:59:a4:ab:61:d8:87:ad:4c:
         d0:a1:58:23:81:a3:d4:95:32:a1:8e:6e:25:a5:cd:f2:d4:c8:
         22:87:ca:6c:8f:27:17:d8:87:8e:10:10:ea:7b:1a:2c:22:00:
         c0:ed:a9:c3:b1:6b:39:a9:5f:39:50:ae:f7:f5:86:f8:ea:03:
         3e:49:01:c8:a7:d0:fa:45:22:3a:89:f9:77:b6:27:f5:75:75:
         c7:d3:57:28:0d:01:d2:dd:94:e3:64:9b:39:4f:09:50:31:0b:
         29:24:b3:08:a1:29:9a:e6:89:45:3a:1f:04:67:20:87:a6:ad:
         58:df:a0:56:b3:68:b5:27:e8:c6:12:3a:b7:a9:c8:1e:dd:95:
         2d:4a:1c:0e:f0:e6:35:48:fb:4c:50:96:b6:1f:ab:20:bb:ee:
         f5:e6:31:27:f2:ff:90:7a:5b:f3:88:aa:9c:78:3a:e1:b5:94:
         80:5e:71:2f:47:58:56:8d:1e:96:fa:ae:3c:ff:e3:38:75:17:
         55:89:99:ed:b9:14:f0:16:5d:76:8c:9f:3e:a0:be:eb:df:2c:
         27:39:f6:82:6c:40:2e:94:0c:b9:fc:69:49:3c:25:53:10:9a:
         34:81:df:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----