Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3054/t7fW_SSt9XyAuni8aEKN6AQ5VKc.roa
File:                     t7fW_SSt9XyAuni8aEKN6AQ5VKc.roa (raw, json)
Hash identifier:          exCwwwQGKtKnxh9xJSu2a4Uj+wp+nLKda1e2ue8ao6Q=
Subject key identifier:   B7:B7:D6:FD:24:AD:F5:7C:80:BA:78:BC:68:42:8D:E8:04:39:54:A7
Certificate issuer:       /CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Certificate serial:       0716
Authority key identifier: 93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/t7fW_SSt9XyAuni8aEKN6AQ5VKc.roa
Signing time:             Tue 21 Jun 2022 01:54:29 +0000
ROA not before:           Tue 21 Jun 2022 01:54:29 +0000
ROA not after:            Fri 09 Jun 2023 06:51:49 +0000
asID:                     146845
IP address blocks:        2406:f4c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
        Validity
            Not Before: Jun 21 01:54:29 2022 GMT
            Not After : Jun  9 06:51:49 2023 GMT
        Subject: CN=B7B7D6FD24ADF57C80BA78BC68428DE8043954A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:92:f3:d0:15:ec:7f:97:35:9a:5d:66:e4:
                    83:b8:f6:e8:02:a6:b0:39:09:df:5b:99:03:46:62:
                    26:9c:9c:cb:5d:13:6e:e7:0a:58:9d:87:b1:4b:8c:
                    6e:70:1c:0f:3a:66:88:9f:42:c2:bf:aa:4f:35:bf:
                    dd:f7:99:d4:1a:df:df:af:83:bc:94:3a:7b:5e:42:
                    2d:d8:6a:79:e5:8b:98:83:d8:80:c0:5b:f3:17:66:
                    61:d4:54:c1:40:74:c6:49:29:84:fc:e8:77:ce:40:
                    ce:f6:2d:c4:6b:bf:6e:30:c4:d8:53:2d:e1:de:e3:
                    c7:17:31:8e:54:61:89:61:ed:25:7e:fb:e5:f5:4d:
                    2c:18:ef:33:36:ce:39:3f:ef:4e:eb:53:f1:3f:26:
                    53:97:bb:d3:e0:e0:bc:42:5d:1c:2b:3a:aa:b0:8f:
                    7a:1a:e1:5e:71:b5:c7:e0:4b:26:fe:4a:d4:f8:44:
                    bc:0f:f4:40:8a:30:b6:e7:1d:50:3c:1a:4b:d5:d5:
                    50:fa:66:26:56:d9:46:54:f3:8e:e8:ca:63:57:3e:
                    32:0f:93:6e:ff:84:49:4f:1a:5c:56:bb:9d:03:18:
                    cb:34:12:fa:ae:2e:a6:63:bf:c6:a7:12:26:7f:fc:
                    f7:77:be:0c:7f:9b:c5:12:e5:21:66:fc:12:f6:31:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B7:D6:FD:24:AD:F5:7C:80:BA:78:BC:68:42:8D:E8:04:39:54:A7
            X509v3 Authority Key Identifier:
                keyid:93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/t7fW_SSt9XyAuni8aEKN6AQ5VKc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         df:9a:f0:2e:66:20:92:1a:76:27:80:40:d9:67:9f:69:f1:5b:
         8c:71:aa:62:79:24:cc:15:36:52:5d:31:81:93:2f:3a:12:1e:
         12:d8:16:08:c6:e5:b6:d9:49:69:b8:c9:62:22:d3:c5:96:4c:
         79:a4:77:63:00:92:65:a4:e8:91:d0:b7:96:bb:53:cb:85:e1:
         63:5b:c4:2b:e8:21:01:58:71:90:2f:37:5e:7a:90:f0:69:b7:
         e3:72:09:63:df:4e:6c:ce:33:e4:13:15:10:88:f4:b1:07:58:
         48:ac:d9:7e:89:7f:c6:65:d5:9c:ab:b1:a9:f8:e1:c9:a4:de:
         9a:17:b9:7d:60:6d:e3:cc:22:16:6e:3f:58:ca:57:e0:08:c4:
         30:23:ec:93:10:d4:e0:81:c6:e9:67:5c:28:2e:80:85:17:51:
         7f:e2:bc:97:de:5e:6d:2c:c6:77:80:8a:0b:6e:ea:be:05:ef:
         47:d9:21:a9:78:a3:17:b3:c2:f0:ce:65:d4:7d:58:d2:f4:3e:
         4c:88:48:30:46:4d:21:cd:91:0a:b1:cd:0d:29:44:d2:e8:09:
         2b:3c:05:73:12:ec:d8:43:9b:17:29:27:05:99:1b:6e:5e:50:
         70:1d:96:fd:21:6c:58:4d:b0:28:ff:58:1b:d8:06:f8:db:5e:
         15:51:30:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----