Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3054/shMP2KLT3PUXQTHO67owhdc6qBI.roa
File:                     shMP2KLT3PUXQTHO67owhdc6qBI.roa (raw, json)
Hash identifier:          mVU9gMdMTOkpC377tQzq/0mcit6Hpn6l9jAdC/jSIU8=
Subject key identifier:   B2:13:0F:D8:A2:D3:DC:F5:17:41:31:CE:EB:BA:30:85:D7:3A:A8:12
Certificate issuer:       /CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Certificate serial:       05
Authority key identifier: 93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/shMP2KLT3PUXQTHO67owhdc6qBI.roa
Signing time:             Mon 05 Jul 2021 01:31:54 +0000
ROA not before:           Mon 05 Jul 2021 01:31:54 +0000
ROA not after:            Tue 05 Jul 2022 01:29:27 +0000
asID:                     137732
IP address blocks:        103.160.244.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
        Validity
            Not Before: Jul  5 01:31:54 2021 GMT
            Not After : Jul  5 01:29:27 2022 GMT
        Subject: CN=B2130FD8A2D3DCF5174131CEEBBA3085D73AA812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:47:4b:05:04:1a:fe:57:c6:8f:4a:16:7c:
                    07:0d:c4:d4:b8:47:f0:31:9d:09:38:44:85:39:7e:
                    7b:6b:2a:b3:e3:ca:72:d7:07:f7:1a:6f:9f:08:5a:
                    a3:aa:01:4f:61:96:a5:ea:20:d7:3e:aa:4b:0a:99:
                    0b:91:25:70:ba:63:c4:a2:8c:49:ee:fb:83:a4:6f:
                    97:28:3d:65:8d:f6:f5:d8:45:46:87:1c:50:36:71:
                    b5:d1:5d:09:ca:90:ec:eb:05:3d:f4:95:0b:0f:3b:
                    ee:da:c4:c0:10:92:c6:73:57:da:22:16:90:ad:9f:
                    b8:d0:49:38:c7:a9:3c:1d:4e:d4:d9:26:52:01:be:
                    25:e0:04:f1:c0:d7:68:69:b7:50:65:91:cd:c6:74:
                    fc:e8:84:31:cb:89:50:76:f1:3c:3a:0f:a9:0b:77:
                    4e:c0:b3:76:d3:9d:92:3b:61:35:c0:3b:6d:b3:c4:
                    f9:5b:a8:71:1d:fc:1b:6f:99:96:3b:f9:c5:9c:4a:
                    47:33:a1:48:90:b1:c6:ab:11:0a:31:03:94:a4:2f:
                    61:ff:5a:c4:d7:33:88:a3:c6:2e:4f:55:3a:18:35:
                    3b:89:42:8b:36:aa:11:52:b1:fc:e2:9b:1b:bf:2f:
                    ef:37:fb:e5:3e:95:87:d3:7f:fe:94:0b:52:7f:fa:
                    c7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:13:0F:D8:A2:D3:DC:F5:17:41:31:CE:EB:BA:30:85:D7:3A:A8:12
            X509v3 Authority Key Identifier:
                keyid:93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/shMP2KLT3PUXQTHO67owhdc6qBI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:41:ba:7f:2e:a5:13:b4:e7:ec:bd:54:45:6c:78:a6:fe:52:
         07:e3:47:58:de:b5:08:69:55:f9:6f:17:6d:20:5c:ce:ed:52:
         5f:72:8f:f8:b3:59:18:6f:c6:53:2b:5b:0f:ac:4a:08:ab:6d:
         0b:44:af:eb:8f:e4:32:3d:0b:66:fb:08:f3:9b:77:16:0b:c8:
         a4:0c:bf:d6:19:9c:cb:a0:bc:92:27:2d:4d:87:93:c8:93:0d:
         8c:7d:c7:e8:6d:ef:f0:0b:3b:cf:e4:50:e6:e4:da:4d:ef:fc:
         10:b0:be:0b:f7:7a:24:cc:b2:f8:8f:2e:8a:37:51:f3:af:97:
         20:0e:e6:5d:04:46:c7:08:b5:8f:43:35:8f:55:1f:6b:da:88:
         35:58:53:5d:ae:a8:2f:21:6b:51:c7:f2:9d:e8:2e:ff:ac:16:
         96:33:2d:17:52:5f:cf:36:39:38:73:54:92:9b:1c:4a:f4:ba:
         65:6a:f2:49:8c:b7:19:8b:b8:ed:25:8c:ec:ba:70:b6:da:84:
         63:c5:8e:6e:a5:71:70:f3:5d:2c:ca:56:1c:4e:ce:71:29:37:
         54:ab:94:56:52:83:5d:21:7e:56:0a:dd:16:93:4e:9a:bc:5b:
         0b:4d:7d:e6:a9:d9:63:88:2b:15:b3:59:d0:ff:56:1b:53:9c:
         91:3a:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----