Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2967/tDg9tZ9EzpfmS9QfvYczNrzB_R0.roa
File:                     tDg9tZ9EzpfmS9QfvYczNrzB_R0.roa (raw, json)
Hash identifier:          Xlthmzuu8TDqpMP1Ko/6yZgr4kEGBq6Xy0MHGvQEuvY=
Subject key identifier:   B4:38:3D:B5:9F:44:CE:97:E6:4B:D4:1F:BD:87:33:36:BC:C1:FD:1D
Certificate issuer:       /CN=0AB6F528865292E198F98B68B72D98D130AF532E
Certificate serial:       03
Authority key identifier: 0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/tDg9tZ9EzpfmS9QfvYczNrzB_R0.roa
Signing time:             Wed 01 Jun 2022 07:11:08 +0000
ROA not before:           Wed 01 Jun 2022 07:11:08 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     131482
IP address blocks:        103.150.130.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AB6F528865292E198F98B68B72D98D130AF532E
        Validity
            Not Before: Jun  1 07:11:08 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=B4383DB59F44CE97E64BD41FBD873336BCC1FD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:b4:a2:60:54:ff:dd:9f:b2:9c:7e:02:ec:
                    b1:82:0e:ae:72:41:30:2d:30:4a:34:dd:be:bb:77:
                    f1:2b:7c:6a:e9:18:7a:7d:42:ed:9e:e8:34:d6:65:
                    1c:ff:1c:f4:6d:42:00:fb:95:b4:48:4d:6e:44:52:
                    22:2a:3c:c3:02:ba:17:fa:89:f7:d8:6c:5c:53:98:
                    8d:f0:1a:ce:15:53:8c:5e:b5:d6:dc:ed:64:c3:5d:
                    d5:4f:ea:c9:b2:a7:8a:57:37:90:b1:e2:02:c4:89:
                    1a:bf:f9:1b:4d:4e:81:fc:20:36:a8:fd:07:49:ef:
                    a1:e5:b8:c2:8a:5f:d5:9f:73:0d:84:be:f4:09:bf:
                    1b:f0:6a:9c:f4:34:84:21:8b:4f:0f:08:0f:82:ac:
                    c0:5a:fa:2a:8e:e8:94:33:dd:f1:7c:04:28:14:8b:
                    81:25:89:66:fd:86:e4:10:23:8d:ae:83:8e:a8:d6:
                    2b:15:11:bd:fb:0a:b2:45:0b:18:68:c6:72:fc:bc:
                    d0:da:ca:e9:89:24:23:2c:e7:a8:b9:e9:c5:f9:d3:
                    1f:11:9f:24:3d:fa:12:3a:19:bd:18:16:06:b3:25:
                    1b:95:7d:09:76:9d:16:96:6e:40:cb:ef:88:25:0d:
                    9c:bf:b5:48:20:07:52:61:ae:d0:0d:20:6b:9d:25:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:38:3D:B5:9F:44:CE:97:E6:4B:D4:1F:BD:87:33:36:BC:C1:FD:1D
            X509v3 Authority Key Identifier:
                keyid:0A:B6:F5:28:86:52:92:E1:98:F9:8B:68:B7:2D:98:D1:30:AF:53:2E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Crb1KIZSkuGY-Ytoty2Y0TCvUy4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/tDg9tZ9EzpfmS9QfvYczNrzB_R0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:53:28:38:95:16:e3:a6:7d:38:ff:69:eb:35:f7:97:a8:08:
         d0:4b:28:91:89:8a:e0:87:3e:1a:60:89:10:13:c0:63:04:27:
         17:b0:2c:bf:67:c2:07:b5:00:99:7a:31:21:b0:9a:f0:3a:94:
         97:80:33:c3:e7:9a:a6:69:87:b3:39:42:6b:2d:6d:92:00:c1:
         39:a5:1f:24:d1:46:bd:d3:30:d6:28:13:d5:21:a1:1e:3c:c2:
         27:ee:f6:78:7d:b6:8d:a7:ea:54:6d:25:da:61:00:0e:63:d9:
         71:9b:55:bc:00:1c:07:ff:fe:0c:f7:bb:29:06:c2:15:7f:41:
         cf:27:01:ab:6c:c3:31:95:01:1c:65:d4:06:ba:b3:b6:ca:5c:
         d8:eb:cc:b7:79:e9:49:ae:10:c1:73:04:c5:45:50:c7:cb:6d:
         b4:d4:8f:6b:29:43:98:28:1f:65:a3:4a:b0:28:32:c9:fa:4a:
         72:1a:c6:64:d5:e6:03:0d:27:0b:c7:1e:3d:04:1d:d0:08:53:
         14:b1:a8:ed:27:d5:6f:86:5a:36:10:49:c3:55:20:82:5f:32:
         38:85:2e:4a:dd:d0:0e:56:4d:8d:c1:af:95:e3:fc:d5:a9:7c:
         14:29:cf:8f:3e:36:8d:c0:53:0c:7b:78:19:cb:97:20:2d:ce:
         f0:3d:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----