Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/Tvzfz2hITbpKhEEv1FtpYzO6GPc.roa
File:                     Tvzfz2hITbpKhEEv1FtpYzO6GPc.roa (raw, json)
Hash identifier:          63VvE0LIT+5HM1lG/uJcf0PHpEVPhZfa2U7B4+OlSRg=
Subject key identifier:   4E:FC:DF:CF:68:48:4D:BA:4A:84:41:2F:D4:5B:69:63:33:BA:18:F7
Certificate issuer:       /CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
Certificate serial:       0CF1
Authority key identifier: 03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/Tvzfz2hITbpKhEEv1FtpYzO6GPc.roa
Signing time:             Tue 07 Jun 2022 02:10:05 +0000
ROA not before:           Tue 07 Jun 2022 02:10:05 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     131484
IP address blocks:        103.159.122.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3313 (0xcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03F075D9C6F18DC09BDA62B7087EA80DC5B711C5
        Validity
            Not Before: Jun  7 02:10:05 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=4EFCDFCF68484DBA4A84412FD45B696333BA18F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:5d:18:70:3a:e5:4f:90:7a:db:a5:f6:e4:
                    64:91:b1:3a:8c:82:7c:c5:62:bd:bb:e0:fd:c3:a2:
                    ea:cc:dd:1a:06:a7:74:09:c2:c5:7e:da:0c:91:6e:
                    8b:ca:b7:9f:ef:23:48:02:fe:ed:bb:4d:cb:68:7b:
                    56:ab:e5:1e:99:e4:c8:10:b6:f4:45:13:d8:40:bb:
                    bf:85:7f:08:4a:20:0a:5f:12:61:35:d5:cb:53:9b:
                    a3:6a:38:c8:ac:19:10:84:24:81:38:52:db:9d:0b:
                    c8:2e:04:d5:b9:ac:70:9d:58:8e:d5:77:d5:20:e7:
                    90:ff:f0:e3:f8:6c:cb:43:10:61:35:60:1a:1f:2a:
                    50:75:e6:12:b7:2d:8b:cd:04:71:01:55:aa:3a:19:
                    0b:38:a3:96:d3:43:55:1a:41:69:ef:7d:35:5e:31:
                    49:5e:15:23:3a:d4:a8:3a:bc:d5:34:bb:e2:c5:a1:
                    4e:16:b2:7b:d6:72:40:52:98:eb:c5:a0:f2:3c:fd:
                    2e:8a:91:a4:29:6d:ce:24:06:8b:2b:36:32:9f:02:
                    6b:44:a1:62:32:f5:0f:73:f4:90:c1:2a:27:26:f4:
                    bf:b6:fa:f2:e8:3f:fe:2a:9c:fe:5a:7c:99:3d:b8:
                    ee:96:19:f9:56:50:ce:ad:97:4a:52:f1:7a:51:d6:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FC:DF:CF:68:48:4D:BA:4A:84:41:2F:D4:5B:69:63:33:BA:18:F7
            X509v3 Authority Key Identifier:
                keyid:03:F0:75:D9:C6:F1:8D:C0:9B:DA:62:B7:08:7E:A8:0D:C5:B7:11:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/A_B12cbxjcCb2mK3CH6oDcW3EcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/A_B12cbxjcCb2mK3CH6oDcW3EcU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/Tvzfz2hITbpKhEEv1FtpYzO6GPc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:5f:f6:8c:d6:8d:cd:0b:e1:18:f6:79:09:b4:89:a8:81:2b:
         f0:a3:41:75:1d:0c:a5:b1:09:13:8f:cf:3c:7c:f3:59:9b:bc:
         93:b7:0d:68:01:02:ca:82:43:70:ce:c0:18:d0:2c:27:bc:7f:
         43:b3:83:63:dc:c5:0e:c6:41:de:60:e1:0a:ba:ea:7d:bd:a2:
         5b:b8:63:81:be:0f:d8:be:f3:ad:de:73:57:b9:93:54:8f:5b:
         a1:77:0e:0d:cf:e1:82:1c:21:1d:f8:b8:16:3d:80:8d:54:64:
         72:09:fd:e8:8c:8c:ef:f2:cb:3b:eb:eb:4e:e2:96:86:5c:4e:
         ec:ae:32:d3:9e:cd:73:cd:b1:80:a2:b6:ce:54:05:37:47:24:
         25:1e:02:24:30:3e:4a:5b:3b:89:0e:33:e5:3b:11:c2:a1:3b:
         9f:35:b1:26:3b:12:7a:9e:58:33:77:e0:18:65:ac:59:59:ba:
         cf:24:f5:95:f9:47:89:b2:33:ae:5c:9e:cf:81:6e:af:35:36:
         7f:96:b0:c0:1b:ab:3c:a3:f5:b6:b3:77:3f:27:b7:b2:db:4e:
         5a:b8:4b:88:32:6e:31:97:37:c0:e1:07:e6:ae:25:37:31:ca:
         2b:29:9e:3a:72:9c:a3:96:8f:9a:e8:24:d1:bb:2f:4f:17:18:
         40:5c:e1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----