Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3027/hwl8LzEa8fXhGJmZVeetVmXqWA4.roa
File:                     hwl8LzEa8fXhGJmZVeetVmXqWA4.roa (raw, json)
Hash identifier:          SN1AQTEumBW7sT+TWGxyWvPE/3fzhDaPQwE3rLLf9Dk=
Subject key identifier:   87:09:7C:2F:31:1A:F1:F5:E1:18:99:99:55:E7:AD:56:65:EA:58:0E
Certificate issuer:       /CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
Certificate serial:       04
Authority key identifier: EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/hwl8LzEa8fXhGJmZVeetVmXqWA4.roa
Signing time:             Wed 01 Jun 2022 07:09:11 +0000
ROA not before:           Wed 01 Jun 2022 07:09:11 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     139119
IP address blocks:        2406:a7c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED0E76665272FAF95C3104EAE182BD2D5A0800B
        Validity
            Not Before: Jun  1 07:09:11 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=87097C2F311AF1F5E118999955E7AD5665EA580E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:a9:d5:92:dd:3f:aa:3f:f5:9b:7a:c0:1f:
                    28:b2:29:1d:36:4a:35:06:11:e9:d9:87:19:fd:0f:
                    ff:07:d9:4c:dc:4c:f4:c7:d8:ef:15:ce:a4:63:56:
                    9e:a0:3e:46:79:6d:b4:44:00:b1:39:12:92:24:4c:
                    47:64:4a:c9:8d:66:63:8a:8d:89:1d:2d:a4:d9:1b:
                    91:4e:d8:27:f4:32:cd:a1:ef:9e:5e:3a:8f:00:92:
                    d9:f5:52:40:4e:9e:1b:73:cf:a7:70:17:c6:9f:73:
                    82:af:ca:90:e9:07:89:21:89:16:b4:e3:5b:f3:1e:
                    53:e1:f3:d2:8e:00:77:ea:2d:0e:77:57:ae:60:34:
                    f5:19:4e:d5:69:47:85:48:f3:cd:e5:9c:d3:25:06:
                    e4:bf:a9:2e:b2:7f:6f:31:a8:ec:e9:06:02:64:3d:
                    1b:f8:fb:eb:6e:b1:39:9b:0e:cf:6f:fc:31:60:05:
                    b4:67:03:2e:79:71:b6:24:8e:ff:41:88:1d:bf:01:
                    3d:6b:db:fe:53:d1:72:77:f8:39:6b:fa:f0:6b:0b:
                    7d:8a:36:9b:ae:b8:5f:25:10:50:20:95:4a:66:b5:
                    95:ae:ae:f9:e0:c2:aa:8c:35:94:4c:34:25:51:1f:
                    2d:1d:48:25:50:f7:9d:77:55:66:1f:f6:b5:19:59:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:09:7C:2F:31:1A:F1:F5:E1:18:99:99:55:E7:AD:56:65:EA:58:0E
            X509v3 Authority Key Identifier:
                keyid:EE:D0:E7:66:65:27:2F:AF:95:C3:10:4E:AE:18:2B:D2:D5:A0:80:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/7tDnZmUnL6-VwxBOrhgr0tWggAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7tDnZmUnL6-VwxBOrhgr0tWggAs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3027/hwl8LzEa8fXhGJmZVeetVmXqWA4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:70:82:56:2a:9d:0a:99:53:7f:c6:8f:4e:e6:39:25:c4:7f:
         d8:4b:2f:5f:e4:8a:45:30:d5:2c:5e:73:1d:f1:7c:1b:8e:be:
         28:f0:aa:77:67:ab:6b:d6:5d:13:85:d0:f6:23:62:6b:81:c5:
         ab:71:73:db:42:90:91:be:c8:6c:2f:12:ce:1a:90:16:7b:03:
         d3:0b:ee:21:95:66:e6:22:10:db:3d:a4:e2:9a:d8:56:1a:fe:
         b7:c8:12:2b:64:dc:b2:0c:ad:95:ab:a4:e8:d5:52:28:b5:1c:
         a2:e8:ac:01:b9:a5:b2:73:32:45:e7:56:e6:b2:bd:02:b9:42:
         ca:87:fd:9e:b4:21:18:b9:0e:90:7b:0c:1c:dd:9c:5f:bc:e0:
         20:e2:d1:f2:07:b1:0c:41:65:3c:b8:f8:47:13:12:13:11:23:
         83:c6:a6:ca:78:59:1f:9f:2e:83:19:8e:2d:2b:4c:3f:6b:14:
         b8:48:c9:1c:2f:3b:31:4d:7b:a1:50:83:c8:ba:ba:b4:12:96:
         92:a4:fd:f0:b6:4e:e2:ce:66:11:a6:5e:7f:7e:04:a2:dc:3f:
         61:2d:30:cb:f3:b7:b8:a4:21:7c:44:5a:43:f4:58:67:2b:58:
         58:07:9a:d2:56:c9:36:2d:e4:f2:f6:fc:f3:c8:a9:7f:6c:f9:
         ef:ca:0b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----