Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2967/xpjaJoYrqlnS8V91NsGNgaOMOq0.roa
File:                     xpjaJoYrqlnS8V91NsGNgaOMOq0.roa (raw, json)
Hash identifier:          sYHkbeOdyq0u0xXhkVXQFKKhzhHXJO/uup18M3WtBpU=
Subject key identifier:   C6:98:DA:26:86:2B:AA:59:D2:F1:5F:75:36:C1:8D:81:A3:8C:3A:AD
Certificate issuer:       /CN=FDF3977A74BF3AC715C85651192EC85766BB2797
Certificate serial:       05
Authority key identifier: FD:F3:97:7A:74:BF:3A:C7:15:C8:56:51:19:2E:C8:57:66:BB:27:97
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_fOXenS_OscVyFZRGS7IV2a7J5c.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/xpjaJoYrqlnS8V91NsGNgaOMOq0.roa
Signing time:             Thu 27 May 2021 05:06:31 +0000
ROA not before:           Thu 27 May 2021 05:06:31 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     131530
IP address blocks:        103.150.130.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF3977A74BF3AC715C85651192EC85766BB2797
        Validity
            Not Before: May 27 05:06:31 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=C698DA26862BAA59D2F15F7536C18D81A38C3AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:3e:bf:64:c1:a4:af:70:7e:c9:b8:7b:6c:
                    03:d2:b8:6d:4c:8a:dd:0a:de:82:7f:f0:b6:2e:ca:
                    55:1b:52:1e:c4:6a:3f:0a:e8:c0:f3:cf:68:af:e3:
                    e3:a5:8e:2a:4a:2e:ab:05:46:44:8d:95:39:8b:54:
                    a6:25:e7:16:b4:44:89:53:2e:fa:e6:58:c7:47:1c:
                    5f:a4:60:e0:ca:79:d5:e0:a0:7e:1d:11:c7:e6:a4:
                    fe:63:c8:f5:29:8d:45:bf:c4:f1:f1:b1:8c:5d:b4:
                    b7:dc:a6:c9:7d:84:1f:1b:92:be:24:eb:03:72:27:
                    19:ee:58:12:b7:6e:45:ff:c6:42:4a:bd:15:0c:ae:
                    e8:b4:88:71:f3:4b:14:e2:8b:df:3f:39:42:66:02:
                    f6:55:4f:96:68:f4:66:78:cc:49:e1:0f:48:24:03:
                    44:01:6d:26:c4:81:80:cd:fb:99:34:12:ee:ac:98:
                    aa:d0:fd:bd:81:2e:d2:b7:e9:46:0f:1d:5c:8e:63:
                    5f:68:c8:77:61:aa:db:e0:71:14:20:aa:28:1d:1b:
                    e7:58:20:7c:04:f2:08:ee:32:97:4e:de:61:1c:ac:
                    76:25:14:3b:18:c0:c4:bb:8f:3e:dd:fd:4f:ab:26:
                    ec:4f:62:b0:60:69:2f:77:1a:18:68:4c:5e:cd:52:
                    eb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:98:DA:26:86:2B:AA:59:D2:F1:5F:75:36:C1:8D:81:A3:8C:3A:AD
            X509v3 Authority Key Identifier:
                keyid:FD:F3:97:7A:74:BF:3A:C7:15:C8:56:51:19:2E:C8:57:66:BB:27:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/_fOXenS_OscVyFZRGS7IV2a7J5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_fOXenS_OscVyFZRGS7IV2a7J5c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2967/xpjaJoYrqlnS8V91NsGNgaOMOq0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:9a:fb:f2:0d:5d:62:60:4a:41:2d:0a:84:8e:63:1a:6a:3e:
         b8:66:b3:cd:24:c2:14:0a:c1:29:d1:fe:60:65:2e:53:61:3c:
         68:56:e2:0d:93:b6:b1:41:63:18:06:44:41:d5:17:44:62:3e:
         32:ec:3c:77:1e:a2:50:bb:fb:8b:76:48:d9:b7:31:9b:a8:15:
         85:5f:e7:22:70:15:f2:3d:90:3c:6c:1f:7f:8b:dd:0a:5d:f3:
         9c:67:19:aa:81:ad:61:62:94:6e:2e:c8:8e:32:03:37:7a:2c:
         37:63:8d:ea:e6:2e:03:47:fd:32:d4:27:01:70:82:ea:88:4f:
         79:ae:49:1e:54:47:28:fc:43:97:91:d7:37:e1:cd:86:59:e7:
         22:fc:e4:c7:c0:31:71:10:00:41:fe:fc:87:20:c2:38:f5:da:
         5b:e5:86:0f:42:08:d6:1f:24:b6:2b:6a:94:56:15:51:be:21:
         9e:1d:76:77:34:0e:85:56:45:5a:87:39:a1:b7:b6:48:dd:d6:
         aa:94:99:3f:28:51:e3:58:c5:8c:39:e4:ad:fc:5c:6c:45:41:
         73:dc:e9:55:e4:0f:83:a0:05:19:76:0a:37:74:b8:93:c6:93:
         1b:75:0f:ba:b2:2b:13:6c:18:ad:77:e2:9f:c3:65:36:8c:d6:
         e2:92:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----