Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2898/y_AhITx2kwvH430yIGcXeFKzsyw.roa
File:                     y_AhITx2kwvH430yIGcXeFKzsyw.roa (raw, json)
Hash identifier:          7t7waLdOhbqqnUQB8p+7xilUhKmvnhZCyxl7F6gwGp4=
Subject key identifier:   CB:F0:21:21:3C:76:93:0B:C7:E3:7D:32:20:67:17:78:52:B3:B3:2C
Certificate issuer:       /CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
Certificate serial:       093E
Authority key identifier: 2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/y_AhITx2kwvH430yIGcXeFKzsyw.roa
Signing time:             Tue 07 Jun 2022 02:17:12 +0000
ROA not before:           Tue 07 Jun 2022 02:17:12 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     139091
IP address blocks:        103.140.14.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366 (0x93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F39D6C238893451A06EB34C52D77ABC18906BE0
        Validity
            Not Before: Jun  7 02:17:12 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=CBF021213C76930BC7E37D322067177852B3B32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:92:21:8d:be:b5:b9:a4:2e:8e:51:02:13:
                    eb:4d:1e:f8:a5:a7:59:f8:a0:21:82:6c:d4:d1:17:
                    4d:16:f9:57:eb:6c:eb:99:d8:f8:de:6a:5a:63:1b:
                    01:dd:0e:81:e7:a9:43:c9:53:a5:36:dd:30:76:aa:
                    1b:43:9b:46:35:3e:5a:97:c8:8a:67:f8:c7:4e:0a:
                    d8:81:cf:85:85:51:9c:59:d0:37:fe:f8:7e:d4:16:
                    f2:dc:b3:c3:eb:92:19:56:da:0d:3c:6c:1f:20:c6:
                    94:a5:fb:b6:29:42:3c:dc:cb:19:de:0a:98:6f:d3:
                    e7:8d:3c:82:f5:06:59:2f:ac:36:4c:bb:a2:08:85:
                    50:34:95:56:ec:aa:be:ed:e4:78:1b:8e:fa:37:f7:
                    73:1f:28:a6:32:d0:4d:8b:83:a0:77:dd:11:ae:be:
                    6c:56:6d:a9:a1:d5:dc:12:f1:81:bf:7d:a9:9e:35:
                    8d:98:0f:73:3f:95:4f:1c:28:41:6f:d0:b8:34:43:
                    37:2d:af:8a:48:5b:f2:10:6d:3b:3d:f3:a2:02:e8:
                    c3:f7:24:5d:ce:ae:b8:e6:f1:25:33:74:3f:f8:fd:
                    57:c2:e3:98:f8:7b:02:ca:7d:db:b3:4a:19:00:49:
                    b3:7f:63:4a:28:1b:4c:56:81:a9:f6:2e:3b:e9:03:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F0:21:21:3C:76:93:0B:C7:E3:7D:32:20:67:17:78:52:B3:B3:2C
            X509v3 Authority Key Identifier:
                keyid:2F:39:D6:C2:38:89:34:51:A0:6E:B3:4C:52:D7:7A:BC:18:90:6B:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/LznWwjiJNFGgbrNMUtd6vBiQa-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LznWwjiJNFGgbrNMUtd6vBiQa-A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2898/y_AhITx2kwvH430yIGcXeFKzsyw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:2d:c3:fa:bf:8b:cf:42:19:95:0f:17:69:b0:9e:a7:01:
         e9:20:f1:dd:0d:8f:58:8f:6b:7b:eb:b7:81:41:0f:55:5d:83:
         0e:94:45:c7:3c:f7:87:da:b7:4d:75:b2:8a:43:f3:41:09:9f:
         5c:fc:ce:2b:22:97:a0:38:19:81:7b:95:25:4a:b7:67:c1:8a:
         b9:39:ca:04:76:10:14:c1:9f:66:63:21:1b:09:91:de:04:a2:
         ac:ae:da:3c:49:ab:7d:3f:52:4e:4e:97:68:a5:80:b8:df:92:
         c2:06:dc:de:ba:f7:ac:12:af:46:a3:70:8d:b3:1b:af:99:c8:
         20:fd:0f:c0:14:59:83:6f:10:ce:46:bf:80:c4:9f:38:98:93:
         a6:93:bd:9d:38:bb:d0:34:4c:1e:3e:fe:97:65:4f:9f:4d:3f:
         e1:df:bd:f4:27:4a:37:96:1d:ee:3c:9c:8a:38:02:85:10:78:
         ac:ce:6f:37:4d:4c:d6:f7:65:93:5f:d8:84:74:74:cb:81:a6:
         af:3f:a2:28:d6:a3:5f:de:e2:23:1a:e4:24:cf:7b:15:94:9c:
         64:a8:07:d4:ce:6e:8f:81:0e:6f:20:de:a5:53:53:74:53:21:
         58:b7:00:91:a2:ca:44:3e:55:41:55:f5:34:2d:0f:a4:61:fb:
         2b:b6:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----