Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3040/lyJblXFSmrUu9Ve8ahHKRrISQy8.roa
File:                     lyJblXFSmrUu9Ve8ahHKRrISQy8.roa (raw, json)
Hash identifier:          75hEXw/DPp3H4zOvsG1AYLd7E2cyiEcNJlrBDhSVH6I=
Subject key identifier:   97:22:5B:95:71:52:9A:B5:2E:F5:57:BC:6A:11:CA:46:B2:12:43:2F
Certificate issuer:       /CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
Certificate serial:       04F8
Authority key identifier: D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/lyJblXFSmrUu9Ve8ahHKRrISQy8.roa
Signing time:             Tue 03 Aug 2021 17:48:53 +0000
ROA not before:           Tue 03 Aug 2021 17:48:53 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     131484
IP address blocks:        103.159.122.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45E16C9CF628FF63C42FE49D30AB5DF29450F03
        Validity
            Not Before: Aug  3 17:48:53 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=97225B9571529AB52EF557BC6A11CA46B212432F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:6e:54:60:e8:8a:cb:4f:f3:cd:84:7d:75:
                    36:1a:50:98:04:4b:f2:e7:ab:83:b8:31:70:62:61:
                    bb:bd:35:67:08:a3:b4:5b:96:cb:9e:43:9c:b6:81:
                    29:11:80:d0:7f:5e:9a:f2:33:0b:6e:8f:94:9e:e7:
                    ab:5b:d5:d7:dc:f8:3c:a7:f1:b6:2f:e7:d7:48:d8:
                    65:e7:f7:56:d4:8c:2a:e2:49:7c:69:14:a2:61:31:
                    a8:0e:bb:25:df:43:f1:20:a6:14:71:46:e6:1e:aa:
                    4f:a6:06:0d:ea:0e:02:13:2a:26:7d:55:ee:d5:b4:
                    78:11:ef:96:74:86:14:ff:6f:af:80:f2:34:48:29:
                    9c:95:f8:d8:ad:00:6e:e0:a9:a3:a4:a7:6d:73:7d:
                    8f:e3:39:69:de:01:72:5a:d0:a3:ee:c2:f0:fd:35:
                    e7:60:ba:c0:8e:42:0a:a0:3a:7d:14:39:fb:3b:18:
                    0f:cb:60:d5:17:38:ff:ee:fe:96:55:40:2c:26:a4:
                    c9:d5:52:75:18:b5:d6:a3:97:5f:6d:d9:3a:e6:d9:
                    ce:bd:15:c5:7d:5f:12:d5:50:20:a9:82:fd:c9:36:
                    7c:bf:8a:0e:4b:fa:ac:10:00:4b:ca:7e:88:15:9b:
                    bb:7d:19:cc:d7:45:70:92:13:ba:d1:df:d0:d7:b5:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:22:5B:95:71:52:9A:B5:2E:F5:57:BC:6A:11:CA:46:B2:12:43:2F
            X509v3 Authority Key Identifier:
                keyid:D4:5E:16:C9:CF:62:8F:F6:3C:42:FE:49:D3:0A:B5:DF:29:45:0F:03

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1F4Wyc9ij_Y8Qv5J0wq13ylFDwM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3040/lyJblXFSmrUu9Ve8ahHKRrISQy8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:b6:a9:e3:04:85:e0:80:c2:b4:50:10:c3:bc:2b:83:5d:af:
         09:71:44:44:68:d3:cd:42:6f:62:c4:3b:95:83:38:9a:4b:99:
         8e:18:1a:eb:c8:ab:43:6a:29:ec:c7:75:0f:da:2a:65:96:39:
         11:7f:7b:22:50:94:4f:d7:2d:be:76:bb:ac:cb:79:1f:85:25:
         a2:b9:68:63:6c:bd:55:5d:69:fb:2e:13:44:79:28:a3:3c:0c:
         3e:7a:32:0a:ef:02:f5:fc:58:83:79:6e:2e:01:64:f7:6e:e7:
         73:ae:58:61:7c:70:92:0b:f1:29:48:f9:17:db:14:96:e2:32:
         7b:0b:19:51:d4:2b:91:97:89:9a:f9:cf:4b:8c:f0:62:49:65:
         c3:0e:06:c8:f8:d5:a2:1d:37:72:e0:f5:ab:2f:ae:b6:8c:0b:
         8a:3a:d8:e8:bb:e0:75:dc:1a:bc:30:ed:5f:95:1b:51:ef:7b:
         fc:9e:23:1b:51:9d:30:3e:42:0c:9c:43:2b:f9:44:95:11:36:
         e6:fa:32:f3:14:95:b6:10:a4:2c:ce:27:14:f7:32:41:52:26:
         94:2d:07:1f:12:84:94:b4:2b:b7:33:37:25:e4:44:83:26:47:
         3a:73:82:43:e5:d6:34:3e:2a:44:e8:c8:1d:aa:a1:05:4a:3f:
         7a:05:c2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----