Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/RF5cIWx21DcAjsvFePzbwCfs0TY.roa
File:                     RF5cIWx21DcAjsvFePzbwCfs0TY.roa (raw, json)
Hash identifier:          HkyGUEPfL0uRG0pf/9ak70FaNJRCGRAdkdlkUjUrU4Y=
Subject key identifier:   44:5E:5C:21:6C:76:D4:37:00:8E:CB:C5:78:FC:DB:C0:27:EC:D1:36
Certificate issuer:       /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Certificate serial:       0CEF
Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/RF5cIWx21DcAjsvFePzbwCfs0TY.roa
Signing time:             Tue 07 Jun 2022 02:10:04 +0000
ROA not before:           Tue 07 Jun 2022 02:10:04 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     49544
IP address blocks:        2406:d140::/32 maxlen: 48
                          2406:d140:8000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3311 (0xcef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
        Validity
            Not Before: Jun  7 02:10:04 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=445E5C216C76D437008ECBC578FCDBC027ECD136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:97:07:bd:f9:ec:c8:14:fb:c0:ae:59:e1:
                    2d:a0:4b:e6:29:b1:4c:83:05:4c:fb:ad:52:85:4e:
                    b9:7f:7c:14:d9:1e:cc:98:fd:75:10:df:ed:12:b9:
                    c4:95:0c:90:d8:78:63:50:6a:9c:a8:06:b5:31:b3:
                    35:0a:71:28:28:99:96:13:39:a3:5b:8c:8b:44:7c:
                    c6:b3:6d:13:85:37:30:f4:5b:7e:69:16:32:3a:20:
                    53:53:a4:c4:b4:c9:6b:43:87:dd:d7:08:1b:6e:4d:
                    f1:91:1b:a9:4d:1a:9a:be:68:e9:2e:e9:3e:39:cf:
                    35:a4:8a:d6:37:cd:92:cd:21:fd:69:24:dc:c3:36:
                    42:f9:64:e0:a7:75:12:bf:85:be:7a:87:c0:46:e0:
                    7f:0f:42:88:38:fb:21:2a:66:4f:3d:b1:1f:fb:b6:
                    c7:33:ef:f9:dc:38:e2:49:18:bf:fa:4c:92:61:3e:
                    e4:1a:34:51:42:85:7f:5b:47:d5:6f:4c:37:d2:e6:
                    0c:7a:32:18:dc:1d:52:24:a5:a1:ee:27:c7:94:30:
                    06:c0:3c:24:0f:15:04:1a:54:e4:04:85:d9:83:fd:
                    55:34:ed:7e:b5:09:92:65:dd:f4:f3:fb:7b:ba:a6:
                    0c:c6:d5:39:f2:26:81:65:61:2e:75:28:41:2c:d5:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5E:5C:21:6C:76:D4:37:00:8E:CB:C5:78:FC:DB:C0:27:EC:D1:36
            X509v3 Authority Key Identifier:
                keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/RF5cIWx21DcAjsvFePzbwCfs0TY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d140::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:79:bd:2a:7a:84:bf:d5:34:c1:33:5f:5e:aa:bc:50:62:c7:
         c8:53:60:4d:5e:2f:86:05:40:01:c8:56:31:d9:7c:3c:bd:b8:
         0f:ba:a0:88:45:c1:e8:8a:ca:80:d0:88:51:8c:fe:9d:56:4a:
         8b:a4:81:a6:6c:35:17:31:45:a2:1b:7a:74:40:35:00:96:35:
         44:4b:b7:5b:c6:f9:90:a4:bd:1d:93:ed:ae:ed:be:eb:03:c6:
         2f:94:0a:56:f3:41:a5:91:c4:e9:4f:3c:00:62:69:6b:42:af:
         6f:f8:ce:2d:aa:d1:c9:88:6d:2d:8d:57:81:28:2a:ce:57:e6:
         f2:35:e3:13:6f:06:41:74:39:6e:3c:ea:8c:51:ef:87:2e:a3:
         b4:29:91:b0:49:f7:da:f1:0c:a4:f6:49:a5:12:34:2a:2b:bb:
         f5:31:83:41:ae:77:62:35:ea:aa:2c:d3:d5:40:5b:ef:2a:18:
         c1:27:66:c1:4e:00:8f:5c:ef:f5:09:a6:6e:52:c9:1d:6b:bc:
         06:95:de:c4:70:94:d2:25:fe:ef:fd:c0:6b:c9:af:3f:1f:4c:
         c8:44:0c:7f:8c:c6:c7:cf:b4:a6:f2:be:ca:8f:12:b7:57:32:
         9a:4e:0f:f7:20:24:5f:82:d3:d2:1c:ce:49:35:25:54:63:88:
         ed:9a:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----