Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/INnpWUuDfSH7muCAamalm4R4bxE.roa
File:                     INnpWUuDfSH7muCAamalm4R4bxE.roa (raw, json)
Hash identifier:          58nGGV37iqFrCjXbWdkni1rwp+YmwDfK9yRwbzq03I0=
Subject key identifier:   20:D9:E9:59:4B:83:7D:21:FB:9A:E0:80:6A:66:A5:9B:84:78:6F:11
Certificate issuer:       /CN=18BC3268C26DCC45A94B17F515018722A06416DF
Certificate serial:       0704
Authority key identifier: 18:BC:32:68:C2:6D:CC:45:A9:4B:17:F5:15:01:87:22:A0:64:16:DF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLwyaMJtzEWpSxf1FQGHIqBkFt8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/INnpWUuDfSH7muCAamalm4R4bxE.roa
Signing time:             Sat 02 Apr 2022 03:10:27 +0000
ROA not before:           Sat 02 Apr 2022 03:10:27 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     137718
IP address blocks:        2406:d440::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18BC3268C26DCC45A94B17F515018722A06416DF
        Validity
            Not Before: Apr  2 03:10:27 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=20D9E9594B837D21FB9AE0806A66A59B84786F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:83:66:26:7c:fc:12:34:36:b7:0b:a0:47:
                    d8:80:2c:38:e2:99:39:43:55:bd:61:67:68:bb:93:
                    97:e2:ca:8e:48:09:74:7a:07:40:bf:fe:e0:9c:e5:
                    3c:2f:4d:81:58:c7:e6:a0:f4:5b:b0:02:f3:3e:e8:
                    92:0f:76:71:45:dd:95:b9:ce:3b:9c:0c:2a:60:a7:
                    8e:c6:61:f0:ea:93:c1:6b:64:e8:66:ff:67:07:e9:
                    c8:21:79:39:23:27:93:02:04:5a:22:8d:10:9f:87:
                    f4:30:46:18:dc:84:59:00:42:c0:6f:9c:b4:7d:5c:
                    57:88:b0:47:39:2d:55:64:d2:1a:fc:65:9a:ee:0d:
                    c4:5b:e7:fd:f4:37:08:86:5f:ab:3f:8e:c6:fb:f3:
                    3a:6f:aa:3b:ab:b0:41:3b:3d:09:f5:93:bc:a7:ec:
                    8b:98:04:09:71:77:05:ee:d4:4d:27:1c:17:1d:f2:
                    3d:fa:08:a4:32:86:ab:bb:11:c0:9a:e9:2d:08:db:
                    15:a1:b9:96:13:1a:fe:80:27:4b:66:89:19:58:39:
                    b0:e6:df:8a:d7:11:07:ff:9e:58:71:42:0b:0e:47:
                    c9:f9:e7:61:da:c1:1c:e9:ad:9a:6b:25:9c:5f:d8:
                    3d:3a:01:85:59:a8:49:c0:72:f0:9d:99:3b:e8:24:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D9:E9:59:4B:83:7D:21:FB:9A:E0:80:6A:66:A5:9B:84:78:6F:11
            X509v3 Authority Key Identifier:
                keyid:18:BC:32:68:C2:6D:CC:45:A9:4B:17:F5:15:01:87:22:A0:64:16:DF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/GLwyaMJtzEWpSxf1FQGHIqBkFt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GLwyaMJtzEWpSxf1FQGHIqBkFt8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/INnpWUuDfSH7muCAamalm4R4bxE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:cf:4d:54:a8:7d:b8:4f:e1:3f:03:17:ad:a5:2e:0a:bc:0a:
         25:21:ef:6d:d6:eb:9a:34:90:dc:ad:e8:44:a9:19:a2:c1:d4:
         80:50:fe:fe:fb:13:9f:86:18:16:8b:8c:e5:2e:26:c0:98:54:
         85:a6:28:ea:58:0c:39:bd:bf:95:d8:a4:3e:65:01:82:be:09:
         26:81:84:e4:04:9c:21:17:93:d3:59:69:0f:69:1c:cf:b3:b1:
         22:d5:ba:c6:88:95:ce:07:72:0e:e1:a0:fa:4d:6b:c0:77:7a:
         14:e5:55:7b:d7:57:68:a9:5f:2c:2d:cd:d7:79:5d:ab:91:19:
         de:8d:4e:83:74:a6:10:fb:4b:39:3c:ed:7f:85:e5:60:9b:fe:
         d5:97:91:d5:f1:b7:b7:6d:4a:75:f6:72:a4:6d:be:69:c8:a5:
         fb:79:6d:a4:2c:8e:c3:e7:73:75:23:4d:73:8d:9b:86:d3:c6:
         64:86:cb:9b:e2:33:85:d8:6c:c8:55:11:24:15:a3:86:96:16:
         39:ab:cb:78:79:0a:7d:75:2b:a7:0d:32:00:a0:58:25:02:45:
         88:43:ef:9b:70:0a:54:8b:e7:62:57:ac:a2:ec:03:ea:29:37:
         35:cd:48:72:2f:61:c4:d8:58:c8:2c:2d:6c:69:80:8e:1c:77:
         0b:7d:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----