Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2988/eXHcpMOzREgt6c2sdUnYrak7AiA.roa
File:                     eXHcpMOzREgt6c2sdUnYrak7AiA.roa (raw, json)
Hash identifier:          vAKdc4Ol8gU1HkcMTxSKQOL4tvkn1RxZAqq58DqvE8s=
Subject key identifier:   79:71:DC:A4:C3:B3:44:48:2D:E9:CD:AC:75:49:D8:AD:A9:3B:02:20
Certificate issuer:       /CN=012D4317BCA1660F88066F890F8C04AF557000CB
Certificate serial:       0F51
Authority key identifier: 01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/eXHcpMOzREgt6c2sdUnYrak7AiA.roa
Signing time:             Tue 07 Jun 2022 02:11:06 +0000
ROA not before:           Tue 07 Jun 2022 02:11:06 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     139139
IP address blocks:        2406:3340::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3921 (0xf51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D4317BCA1660F88066F890F8C04AF557000CB
        Validity
            Not Before: Jun  7 02:11:06 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=7971DCA4C3B344482DE9CDAC7549D8ADA93B0220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:39:80:1d:24:16:27:ee:b6:73:4c:61:2c:74:
                    e9:ab:32:13:b3:0b:de:95:4f:6c:74:9f:2c:17:51:
                    b9:41:bb:90:92:ea:f8:37:29:35:30:8f:ff:67:0b:
                    48:7f:3e:6e:3c:c7:3d:92:6d:bc:24:46:20:66:7d:
                    c9:aa:5c:93:d5:6c:41:78:9f:6b:72:c0:4c:b7:4f:
                    6e:a3:ac:e1:38:2d:89:c6:6a:0d:a0:ca:63:f4:0b:
                    ca:6d:3a:62:34:da:4a:ed:0d:92:ea:1b:19:9f:20:
                    6d:a8:90:ad:95:77:7d:8c:bd:12:75:88:e7:ab:c5:
                    22:5f:fd:4b:b6:03:c6:d3:be:eb:9b:a8:3f:bd:bf:
                    43:07:f0:bd:2d:ea:4f:63:e7:ff:11:e1:98:73:21:
                    f8:ec:5e:3f:79:4d:d9:13:89:53:47:fd:00:71:b9:
                    d3:3b:41:fc:e4:b3:e6:b9:b1:1e:1a:19:d2:4a:1c:
                    af:45:cb:85:3a:cf:17:a3:73:7f:69:83:f4:12:f8:
                    0e:95:6c:cb:f8:6f:a8:2c:0a:ab:38:03:03:15:50:
                    e5:8b:fc:a4:65:0b:b0:ad:b5:7e:c9:ed:3a:0a:54:
                    33:97:6c:93:c2:f2:dc:1f:4d:e8:d7:7b:8a:0b:57:
                    c6:0d:28:1a:5d:d8:cd:e0:c1:e2:bd:71:c5:50:0b:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:71:DC:A4:C3:B3:44:48:2D:E9:CD:AC:75:49:D8:AD:A9:3B:02:20
            X509v3 Authority Key Identifier:
                keyid:01:2D:43:17:BC:A1:66:0F:88:06:6F:89:0F:8C:04:AF:55:70:00:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/AS1DF7yhZg-IBm-JD4wEr1VwAMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AS1DF7yhZg-IBm-JD4wEr1VwAMs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2988/eXHcpMOzREgt6c2sdUnYrak7AiA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3340::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:81:71:50:c5:e9:38:77:14:b7:d3:50:42:0f:ff:6c:50:f8:
         1d:ae:3f:ef:a4:3d:f5:54:a7:a2:c5:33:c0:9a:d9:88:1a:3c:
         0a:9a:41:1f:b5:a3:19:ff:60:df:9c:c7:9c:d8:61:26:11:70:
         7a:8e:4a:0a:18:24:a8:d5:fe:a3:c6:68:27:f9:5a:7d:85:7d:
         7c:a0:e5:58:4b:92:b2:85:fc:fd:75:10:a2:4f:9a:48:97:97:
         5e:71:33:88:7d:2e:92:52:d6:ec:a7:14:11:ae:96:9c:9e:9a:
         45:1f:dc:04:48:0c:19:72:db:d6:1b:d6:e0:c3:f5:71:88:5e:
         a6:6a:50:a4:51:a1:aa:31:d9:32:58:b0:e6:50:4d:e6:9c:ad:
         3a:7f:58:e4:51:f9:66:c0:8a:37:90:bb:27:cb:ac:67:81:db:
         27:9d:93:c2:9d:19:10:ea:3d:bc:b5:5c:12:ac:90:ab:3d:df:
         cd:8a:78:71:10:d3:b0:6d:7c:23:66:9c:ff:21:e8:90:cf:15:
         54:da:58:be:88:80:1a:c9:43:6e:92:90:fc:7a:0c:d8:a3:75:
         90:eb:a2:bc:e6:22:b0:3b:02:07:c7:e1:50:0a:74:6c:ce:d9:
         e4:8f:60:b8:2f:16:92:9a:83:cf:97:b5:2a:97:89:b9:b8:d5:
         f9:8a:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----