Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2930/g6bDzqVrfyPK7Une_g9YZm6N0uQ.roa
File:                     g6bDzqVrfyPK7Une_g9YZm6N0uQ.roa (raw, json)
Hash identifier:          Kx4TyqYpck8EsGLtE+PxHL0HCwmZXNKzOmxhCEUPmQY=
Subject key identifier:   83:A6:C3:CE:A5:6B:7F:23:CA:ED:49:DE:FE:0F:58:66:6E:8D:D2:E4
Certificate issuer:       /CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
Certificate serial:       0CD6
Authority key identifier: B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/g6bDzqVrfyPK7Une_g9YZm6N0uQ.roa
Signing time:             Tue 07 Jun 2022 02:15:44 +0000
ROA not before:           Tue 07 Jun 2022 02:15:44 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     131482
IP address blocks:        103.143.132.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3286 (0xcd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B792FB719BEDEC3F177FF5FC8AB05E3B94AAD312
        Validity
            Not Before: Jun  7 02:15:44 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=83A6C3CEA56B7F23CAED49DEFE0F58666E8DD2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:f2:f0:94:87:45:3b:c9:a9:d1:46:3f:54:
                    a7:1d:e5:f7:31:51:f3:cb:4a:ec:57:3c:dd:4b:37:
                    5f:e0:33:9f:53:e1:38:d5:9c:aa:46:42:5a:cf:23:
                    32:d3:51:0c:8d:ce:5e:30:f7:c2:01:98:db:84:a5:
                    26:63:59:44:13:cd:a9:97:c1:9f:38:07:10:03:4b:
                    28:5d:ed:61:ff:fe:09:17:4d:34:c9:57:76:4f:9a:
                    66:40:54:f5:e5:6a:6c:4b:d1:be:a5:1b:91:a8:6a:
                    5f:a3:f5:c0:a6:ed:4a:11:46:38:84:6b:b6:9c:f4:
                    c1:98:81:16:ca:6b:91:36:0a:d1:41:cd:1b:24:d2:
                    51:2c:47:98:6c:70:a9:3d:79:b4:32:e7:2c:18:38:
                    86:67:6a:bd:55:9c:55:3b:40:f7:f9:98:b3:6e:28:
                    36:b3:2d:35:2c:27:c1:be:42:31:b2:b0:aa:56:d2:
                    24:6a:15:be:1f:44:79:c4:21:52:22:d5:b9:49:06:
                    60:65:d9:13:b2:f0:77:20:a4:61:6d:eb:e4:da:f2:
                    a4:95:fc:a1:e4:f4:6a:c6:5a:10:ed:49:d7:58:57:
                    37:79:58:d2:60:e5:7e:c8:ce:73:ea:20:68:55:9a:
                    11:ce:b3:9f:42:54:92:25:4b:43:d5:8b:15:39:37:
                    5a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A6:C3:CE:A5:6B:7F:23:CA:ED:49:DE:FE:0F:58:66:6E:8D:D2:E4
            X509v3 Authority Key Identifier:
                keyid:B7:92:FB:71:9B:ED:EC:3F:17:7F:F5:FC:8A:B0:5E:3B:94:AA:D3:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/t5L7cZvt7D8Xf_X8irBeO5Sq0xI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/g6bDzqVrfyPK7Une_g9YZm6N0uQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:a5:a1:fc:d7:a2:28:e2:1c:c3:76:bd:d6:33:3d:4a:e1:2c:
         3d:f2:0f:37:ca:17:aa:ba:21:32:4b:51:1e:82:e0:85:77:94:
         28:cd:dc:46:ec:2e:56:81:2a:08:3a:74:64:90:0f:a7:05:e5:
         16:8c:b3:e7:86:44:bd:1d:6b:eb:ef:77:9f:b4:c0:4c:00:40:
         6c:08:c7:eb:f3:a2:47:8f:97:6c:fe:a5:9d:55:ab:8a:cf:b0:
         e5:ff:39:42:95:59:67:c3:7c:12:ac:64:7f:f9:5a:1a:75:a7:
         cf:a9:64:e9:0c:ed:f0:08:3c:29:a8:00:f1:cb:5e:6b:69:00:
         90:7a:8c:ec:59:12:80:c1:aa:bb:e9:58:6e:ce:e6:40:59:f4:
         cd:56:4e:25:db:b7:bf:b4:66:8c:9c:47:72:05:c3:9c:c8:47:
         25:d2:f2:23:90:e1:f8:e8:14:49:f1:5e:56:aa:62:33:ea:4f:
         89:f3:1e:bd:7b:78:c3:4b:e7:bc:39:30:12:cf:4f:76:6c:04:
         b2:6e:60:82:77:60:5a:7e:1c:e9:35:57:06:c6:f1:89:8a:1c:
         f1:d4:d9:3b:cc:63:94:42:f2:38:d6:56:3b:26:e9:22:cd:b6:
         3f:07:a9:a3:a0:84:43:13:e5:89:0b:1d:76:1d:6d:cd:58:09:
         c1:60:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----