Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3054/Rt4Xju6y8_yycdR3z70BxsP0nsQ.roa
File:                     Rt4Xju6y8_yycdR3z70BxsP0nsQ.roa (raw, json)
Hash identifier:          Dbebme3Dyfb1rE/dgNMiLgp2EEmGssmakB9DDZ7zLx8=
Subject key identifier:   46:DE:17:8E:EE:B2:F3:FC:B2:71:D4:77:CF:BD:01:C6:C3:F4:9E:C4
Certificate issuer:       /CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Certificate serial:       07
Authority key identifier: 93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/Rt4Xju6y8_yycdR3z70BxsP0nsQ.roa
Signing time:             Mon 05 Jul 2021 01:44:16 +0000
ROA not before:           Mon 05 Jul 2021 01:44:16 +0000
ROA not after:            Tue 05 Jul 2022 01:29:27 +0000
asID:                     137732
IP address blocks:        2406:f4c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
        Validity
            Not Before: Jul  5 01:44:16 2021 GMT
            Not After : Jul  5 01:29:27 2022 GMT
        Subject: CN=46DE178EEEB2F3FCB271D477CFBD01C6C3F49EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:52:bf:a9:f4:43:1f:87:95:54:c2:ea:03:
                    df:6a:62:d6:a9:51:60:b6:ea:77:b0:7a:2b:36:06:
                    aa:02:d5:aa:ea:98:4c:2a:30:6e:e7:c3:03:26:0a:
                    f7:71:e5:83:cc:1d:bb:76:6c:25:e9:20:5e:cb:64:
                    07:a1:6f:45:76:3e:97:d5:e1:f9:ad:0d:e6:a7:b5:
                    74:d8:c0:b1:be:e1:79:f4:cb:1e:75:b1:9a:e0:b7:
                    3a:0b:c8:e7:72:e9:d3:f3:49:9d:7f:eb:77:39:b3:
                    b2:18:ab:3b:81:f5:eb:fa:19:1e:a4:b6:34:65:2f:
                    88:23:8e:45:1f:2d:56:ce:cc:3d:be:12:d1:d0:f9:
                    99:92:dd:ca:6d:a7:ad:2e:71:a9:b1:2b:44:7a:a2:
                    a3:16:c6:b5:ac:07:0e:19:64:b4:5c:04:c6:91:0f:
                    c7:28:0a:80:27:5c:6f:3f:6e:b8:fb:67:4f:45:ac:
                    e6:9a:14:94:ac:9e:01:52:61:8e:f1:47:49:03:a9:
                    84:56:f7:11:05:82:b5:15:54:db:9d:b6:0e:aa:80:
                    25:dd:ee:17:97:85:e9:91:c3:55:7c:e6:79:28:7f:
                    47:fe:18:b9:db:ab:e6:e4:0b:66:85:71:3e:61:23:
                    f8:14:dc:5b:0d:36:21:07:99:25:a6:2a:b1:85:7e:
                    e3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DE:17:8E:EE:B2:F3:FC:B2:71:D4:77:CF:BD:01:C6:C3:F4:9E:C4
            X509v3 Authority Key Identifier:
                keyid:93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/Rt4Xju6y8_yycdR3z70BxsP0nsQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:9a:b7:d1:48:d7:ac:1d:5f:51:af:4f:d5:d1:e6:9d:79:
         ed:75:f7:96:38:0a:03:23:4b:1a:79:eb:d5:f1:fd:cd:1d:01:
         d5:34:8c:ce:f3:95:32:a7:11:02:95:4b:09:24:42:a7:15:2a:
         75:a8:bc:08:82:24:e7:5d:40:ca:2c:0b:2f:a5:fe:c2:22:5a:
         18:72:27:f7:21:81:00:20:b9:6a:ed:c5:73:29:a3:e0:33:ab:
         9f:75:4e:ab:6d:85:dc:e6:a1:5c:69:99:32:56:ee:ae:4c:2f:
         1d:ed:79:e6:cf:66:b1:2f:8e:c6:03:de:e9:b5:3f:75:55:6e:
         ee:97:b1:26:18:77:35:1e:e8:fb:7e:0a:0a:56:6e:8c:ca:f1:
         a8:5e:4a:9e:63:aa:87:57:77:09:e2:59:79:49:2a:9d:77:a6:
         15:39:a2:fa:5c:99:f4:66:b4:d4:8f:8c:a0:97:8c:c9:54:e1:
         77:a7:85:17:e6:3d:a9:1c:c3:ff:53:1a:fe:4d:20:78:2c:0b:
         5f:54:63:d6:d0:c9:1c:a4:73:02:3b:96:b6:ea:81:b0:76:09:
         be:dd:fe:f3:71:6b:09:d7:1f:26:fa:c4:7a:c2:ca:09:20:30:
         63:93:5c:9e:76:b2:f5:9f:81:d6:02:df:71:11:2f:28:32:3d:
         4d:c4:9b:70
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0U3
NDlFNjU0QjJBOURDQzVCRkIzNEMyQ0E5QUU3NUZEODMwQkREMB4XDTIxMDcwNTAx
NDQxNloXDTIyMDcwNTAxMjkyN1owMzExMC8GA1UEAxMoNDZERTE3OEVFRUIyRjNG
Q0IyNzFENDc3Q0ZCRDAxQzZDM0Y0OUVDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMxFUr+p9EMfh5VUwuoD32pi1qlRYLbqd7B6KzYGqgLVquqYTCow
bufDAyYK93Hlg8wdu3ZsJekgXstkB6FvRXY+l9Xh+a0N5qe1dNjAsb7hefTLHnWx
muC3OgvI53Lp0/NJnX/rdzmzshirO4H16/oZHqS2NGUviCOORR8tVs7MPb4S0dD5
mZLdym2nrS5xqbErRHqioxbGtawHDhlktFwExpEPxygKgCdcbz9uuPtnT0Ws5poU
lKyeAVJhjvFHSQOphFb3EQWCtRVU2522DqqAJd3uF5eF6ZHDVXzmeSh/R/4Yudur
5uQLZoVxPmEj+BTcWw02IQeZJaYqsYV+40ECAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBRG3heO7rLz/LJx1HfPvQHGw/SexDAfBgNVHSMEGDAWgBST50nmVLKp3MW/s0ws
qa51/YML3TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDU0
L2stZEo1bFN5cWR6RnY3Tk1MS211ZGYyREM5MC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvay1kSjVsU3lxZHpGdjdOTUxLbXVkZjJEQzkwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA1NC9SdDRYanU2eThfeXlj
ZFIzejcwQnhzUDBuc1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAb0wDANBgkqhkiG9w0BAQsFAAOCAQEARP6at9FI16wdX1GvT9XR5p157XX3
ljgKAyNLGnnr1fH9zR0B1TSMzvOVMqcRApVLCSRCpxUqdai8CIIk511AyiwLL6X+
wiJaGHIn9yGBACC5au3Fcymj4DOrn3VOq22F3OahXGmZMlburkwvHe155s9msS+O
xgPe6bU/dVVu7pexJhh3NR7o+34KClZujMrxqF5KnmOqh1d3CeJZeUkqnXemFTmi
+lyZ9Ga01I+MoJeMyVThd6eFF+Y9qRzD/1Ma/k0geCwLX1Rj1tDJHKRzAjuWtuqB
sHYJvt3+83FrCdcfJvrEesLKCSAwY5Ncnnay9Z+B1gLfcREvKDI9TcSbcA==
-----END CERTIFICATE-----