Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/Rd3ASVasD5nIePklp5BbhCGRQ6w.roa
File:                     Rd3ASVasD5nIePklp5BbhCGRQ6w.roa (raw, json)
Hash identifier:          aHKEVhk+lNwBKtpsNlJZ27IF2O97LjBGmG9jrVscA3o=
Subject key identifier:   45:DD:C0:49:56:AC:0F:99:C8:78:F9:25:A7:90:5B:84:21:91:43:AC
Certificate issuer:       /CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
Certificate serial:       04F6
Authority key identifier: D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/Rd3ASVasD5nIePklp5BbhCGRQ6w.roa
Signing time:             Tue 03 Aug 2021 17:48:14 +0000
ROA not before:           Tue 03 Aug 2021 17:48:14 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     49544
IP address blocks:        2406:d140::/32 maxlen: 48
                          2406:d140:8000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
        Validity
            Not Before: Aug  3 17:48:14 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=45DDC04956AC0F99C878F925A7905B84219143AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:4e:d0:09:3b:b9:da:77:25:3c:7a:1a:fe:
                    dc:a8:43:2c:39:fb:1b:a6:34:09:4f:95:8b:d5:ff:
                    70:b2:f3:f7:a8:e9:b8:1d:4a:16:4d:9a:c8:4e:b9:
                    c5:b4:a0:f4:89:2d:11:be:8e:00:12:ac:1d:b5:14:
                    42:0d:63:77:52:65:bb:78:25:46:5e:95:0f:86:91:
                    bf:47:d7:8c:f0:ce:07:b3:57:21:db:84:32:19:d9:
                    79:d6:fe:2c:8a:9b:f4:10:4c:5a:ae:4d:87:91:38:
                    3e:5a:b4:1d:8e:e8:d4:04:81:e8:a7:bb:a7:3a:43:
                    a5:e4:c8:ca:12:0f:2e:e9:7a:81:ed:26:75:16:af:
                    bc:02:f1:4b:db:22:85:07:80:ac:8a:82:cf:cc:47:
                    5a:55:0c:4a:a0:cd:5f:3a:8a:bd:9d:f7:c0:95:bf:
                    51:4b:91:33:7c:0e:e5:36:cc:9f:53:be:31:49:88:
                    d2:81:dd:de:fb:b5:69:b3:08:02:0f:07:6e:6c:07:
                    f4:10:49:50:cb:5d:3d:b9:08:5e:e5:fe:38:7e:dc:
                    03:30:97:4b:b6:b2:a3:6a:5b:1e:0e:7a:de:25:b7:
                    20:06:1d:5a:3a:bb:0f:ad:a2:41:4d:42:7d:36:71:
                    36:1d:f3:ca:76:f6:9f:c5:3f:5f:3e:93:bc:ef:f7:
                    ff:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DD:C0:49:56:AC:0F:99:C8:78:F9:25:A7:90:5B:84:21:91:43:AC
            X509v3 Authority Key Identifier:
                keyid:D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/Rd3ASVasD5nIePklp5BbhCGRQ6w.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d140::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:63:0f:fe:98:7f:e1:a5:4d:6b:fe:75:5b:4f:29:2b:7c:1d:
         04:34:2a:ab:05:d0:30:c3:3e:c4:96:d3:2c:29:77:14:7f:b3:
         8f:3a:82:aa:72:ff:c0:a3:5a:96:d3:5d:9a:6b:db:f5:ea:5b:
         c4:12:20:d0:2c:28:dd:40:ba:fa:2a:b6:f6:22:7f:95:9e:74:
         aa:13:72:dd:f3:95:d6:a3:4c:6f:94:b2:32:c9:44:01:55:11:
         02:a4:52:ef:19:91:c3:64:e1:18:cb:9c:43:90:09:9e:19:ae:
         4c:d5:a9:a2:9d:54:c5:0d:ac:09:bb:c1:b2:eb:72:b4:bc:c3:
         13:61:72:6c:db:2e:a3:50:71:5f:30:d6:cb:2e:91:98:c7:af:
         4b:15:f5:bb:b6:c4:04:8f:b2:bf:c1:f2:32:d2:63:2f:88:ab:
         64:5b:e7:70:a4:4b:51:c0:4c:15:ca:99:38:cf:23:8c:52:e2:
         8e:5d:eb:24:b3:51:93:bf:20:2b:70:58:ad:25:00:fa:6d:cf:
         d7:f5:37:32:68:f7:ab:a4:20:e1:bc:2f:c9:85:4a:3c:2b:60:
         cb:2a:a3:e2:93:49:46:89:31:74:f3:f1:4b:db:93:c6:4e:89:
         e8:3f:97:8c:ff:56:f5:de:e5:d1:09:48:ad:ec:e1:c5:ed:24:
         9a:89:62:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----