Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/tT9PQgYbkavKgJdKDgBDpNF4OQQ.roa
File:                     tT9PQgYbkavKgJdKDgBDpNF4OQQ.roa (raw, json)
Hash identifier:          leLC1a/0MA3doZMyACmMLEgAnmvAkHBPxrCGUuyOBuQ=
Subject key identifier:   B5:3F:4F:42:06:1B:91:AB:CA:80:97:4A:0E:00:43:A4:D1:78:39:04
Certificate issuer:       /CN=1194FBF18D7337954228B6B59B909E6308556BD0
Certificate serial:       03
Authority key identifier: 11:94:FB:F1:8D:73:37:95:42:28:B6:B5:9B:90:9E:63:08:55:6B:D0
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EZT78Y1zN5VCKLa1m5CeYwhVa9A.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/tT9PQgYbkavKgJdKDgBDpNF4OQQ.roa
Signing time:             Wed 17 Mar 2021 02:16:47 +0000
ROA not before:           Wed 17 Mar 2021 02:16:47 +0000
ROA not after:            Thu 17 Mar 2022 02:12:17 +0000
asID:                     24409
IP address blocks:        111.223.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1194FBF18D7337954228B6B59B909E6308556BD0
        Validity
            Not Before: Mar 17 02:16:47 2021 GMT
            Not After : Mar 17 02:12:17 2022 GMT
        Subject: CN=B53F4F42061B91ABCA80974A0E0043A4D1783904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:48:55:a8:ba:4e:08:1c:74:1f:93:a1:9d:
                    7f:ab:e5:7a:04:70:ed:c3:f1:64:38:ef:d4:76:b2:
                    36:5d:c3:ce:12:58:5f:d9:71:72:ed:d9:5c:3b:3e:
                    4b:de:f0:06:c8:cc:06:76:02:1e:cb:ee:7d:d4:3a:
                    9a:ef:22:71:91:2d:f3:de:8f:6c:f7:a8:ba:d6:13:
                    25:00:d5:ed:5e:77:e7:b2:40:b1:cd:2d:dc:63:ff:
                    34:7f:14:05:24:95:6d:5b:fa:2b:5c:d7:07:f9:43:
                    15:3e:d5:33:8d:d6:4d:d7:27:90:00:1d:db:c1:6e:
                    fa:32:f8:41:4e:ad:b1:4b:38:c2:2c:d0:2b:2e:44:
                    86:4b:a9:ad:74:45:8b:0f:f0:0e:1b:c1:38:fd:06:
                    fe:bf:c5:d1:88:93:21:fa:9a:91:66:0f:ef:9e:35:
                    44:ad:1b:ad:1b:60:b1:12:05:3e:b1:26:da:e3:24:
                    b7:0d:f5:0f:c7:9b:dd:a1:27:c2:4a:ab:33:dc:c0:
                    a8:26:5a:0f:65:c3:a1:b2:f1:0b:43:05:9a:e4:c4:
                    09:49:53:da:bb:d0:69:2b:b6:33:a1:c1:9d:5d:c1:
                    1c:03:6a:94:88:27:d2:ec:b2:80:4e:9d:41:e0:94:
                    4c:08:9b:6f:66:f6:3e:f9:a1:30:22:98:53:a4:68:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3F:4F:42:06:1B:91:AB:CA:80:97:4A:0E:00:43:A4:D1:78:39:04
            X509v3 Authority Key Identifier:
                keyid:11:94:FB:F1:8D:73:37:95:42:28:B6:B5:9B:90:9E:63:08:55:6B:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/EZT78Y1zN5VCKLa1m5CeYwhVa9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/EZT78Y1zN5VCKLa1m5CeYwhVa9A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/tT9PQgYbkavKgJdKDgBDpNF4OQQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.223.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:70:31:cb:36:71:bf:1f:0c:73:2f:15:d7:10:5e:7e:98:50:
         22:ff:d6:1e:0f:75:d8:9a:0f:ef:fd:bc:50:b8:d2:39:a3:bd:
         cd:68:6b:54:b6:bf:34:f0:0b:d3:ec:21:fe:ef:40:9a:70:0a:
         6c:19:7e:ac:82:04:07:28:3d:7c:40:b0:df:d9:e6:ae:3c:d6:
         68:34:79:c0:f4:87:dc:3a:1a:21:b5:ad:46:94:a4:59:42:a7:
         18:4a:b8:39:e4:ec:d0:15:24:85:7c:28:d9:59:dc:96:fd:55:
         db:c5:8e:eb:4b:42:02:cb:f8:12:a6:b0:8c:64:99:fb:72:32:
         cd:c8:83:60:cd:63:ed:cf:24:f2:c2:e3:53:8f:7b:a5:71:8b:
         20:72:e5:5c:eb:5a:30:d9:6d:dd:c7:f1:bd:e0:cb:6a:86:46:
         b8:5c:64:e2:6c:64:09:ae:e7:c8:5d:fe:52:0e:11:0a:e7:35:
         6b:52:f4:cb:45:5b:2b:2b:ba:09:ac:27:77:9e:28:55:2c:61:
         fc:4c:1b:ed:93:d5:01:06:e8:14:73:c0:1e:65:9e:a7:83:e3:
         23:fe:7f:93:1f:fe:af:b5:40:fd:74:24:30:ca:0d:ec:bb:ec:
         3a:09:9a:35:06:07:d4:1c:ba:98:d2:fc:13:19:d4:da:d4:be:
         ff:1b:b7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----