Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2894/qo5u63Zh63NhVVESS9aG4-XivKU.roa
File:                     qo5u63Zh63NhVVESS9aG4-XivKU.roa (raw, json)
Hash identifier:          6eWVQ1sW5p9YreTuqVfXOiE744hJrsl/I19+afaYa4E=
Subject key identifier:   AA:8E:6E:EB:76:61:EB:73:61:55:51:12:4B:D6:86:E3:E5:E2:BC:A5
Certificate issuer:       /CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
Certificate serial:       03
Authority key identifier: 83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/qo5u63Zh63NhVVESS9aG4-XivKU.roa
Signing time:             Tue 01 Mar 2022 09:11:30 +0000
ROA not before:           Tue 01 Mar 2022 09:11:30 +0000
ROA not after:            Wed 01 Mar 2023 09:08:56 +0000
asID:                     146834
IP address blocks:        103.139.136.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839F557B9F9F2F6CDD75AFB4ABA8A2A796C610E8
        Validity
            Not Before: Mar  1 09:11:30 2022 GMT
            Not After : Mar  1 09:08:56 2023 GMT
        Subject: CN=AA8E6EEB7661EB73615551124BD686E3E5E2BCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:ec:8c:97:22:28:c1:28:f9:2c:81:a9:c7:
                    4b:82:6e:69:a9:18:3c:15:4f:27:db:d6:ae:01:57:
                    25:cd:4f:f4:3a:08:f9:f1:a0:29:dd:a7:81:7e:be:
                    27:69:eb:00:0d:b1:6d:da:ad:bc:2c:39:b9:04:48:
                    b5:a4:5b:3a:3c:8f:22:98:7a:08:9f:02:d3:13:d3:
                    53:4e:1c:6a:3a:c5:d0:44:26:de:2b:8e:63:94:6f:
                    8b:18:ae:12:f1:d7:1a:08:ad:2b:45:fc:9e:51:b8:
                    f2:5c:ce:04:49:9e:c2:6d:fb:01:5a:c1:32:32:a3:
                    ae:59:70:5f:63:c1:1e:d2:34:18:4b:0d:8e:43:4e:
                    7d:1c:42:af:1d:83:69:27:a7:3e:ab:03:6c:0f:27:
                    48:d0:7d:2b:df:5c:44:39:90:cf:71:35:e6:6b:7d:
                    0b:35:ed:88:d6:04:3b:ec:67:00:ae:52:1c:59:ef:
                    47:2b:c3:15:12:c9:88:0c:04:55:a4:e4:f6:a5:6c:
                    30:62:4c:25:df:da:7b:da:c7:3c:97:1a:78:b3:b9:
                    a0:59:5b:41:88:28:2d:1e:f1:d9:ee:2b:32:03:e9:
                    e5:4d:8f:f9:58:af:27:e8:b9:57:41:9d:dd:53:e1:
                    f6:69:56:ac:fd:58:0a:3c:8e:4d:86:7f:ed:90:54:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8E:6E:EB:76:61:EB:73:61:55:51:12:4B:D6:86:E3:E5:E2:BC:A5
            X509v3 Authority Key Identifier:
                keyid:83:9F:55:7B:9F:9F:2F:6C:DD:75:AF:B4:AB:A8:A2:A7:96:C6:10:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/g59Ve5-fL2zdda-0q6iip5bGEOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/g59Ve5-fL2zdda-0q6iip5bGEOg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2894/qo5u63Zh63NhVVESS9aG4-XivKU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:af:e6:bd:7c:e8:de:cf:ed:6f:98:e8:26:4e:62:f9:b4:03:
         fa:fb:9b:f7:da:c8:60:72:7f:ae:6b:ae:9f:ed:fa:b0:6f:00:
         4d:9a:ef:03:54:1c:c8:67:68:39:6d:cd:a5:9b:d4:4a:d6:f3:
         ea:89:3f:87:49:26:68:27:9f:f0:16:91:26:c7:1c:e6:68:9e:
         08:52:7e:df:1c:49:47:5c:36:17:6e:5c:23:0e:23:d8:d8:1e:
         f8:76:f1:51:35:6f:3a:5e:6a:4b:c2:4b:4b:ea:c7:48:ac:ba:
         c2:b9:20:47:54:a5:ce:ed:37:37:43:4e:df:93:cf:09:63:8f:
         1c:61:33:87:b4:01:a1:a0:77:53:c6:dc:26:e4:3c:6b:df:b2:
         45:23:8b:58:c2:32:75:5a:b3:e2:62:24:9e:9b:d0:de:bc:25:
         47:b6:ef:aa:e0:f8:99:df:20:2c:7b:c2:a5:60:cf:40:3c:03:
         39:01:fa:66:b5:5e:a8:e6:db:96:c3:2b:7f:f5:d5:be:a9:29:
         cf:62:1f:98:95:29:24:8b:31:ba:05:90:13:5f:e0:91:f4:d8:
         cd:f0:c4:e1:fc:f7:64:be:d7:18:13:58:1f:0c:6f:f8:30:49:
         eb:3f:de:53:68:54:9b:de:fc:35:9c:b5:8c:f8:4b:55:8b:56:
         31:9d:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----