Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3073/9gBxcTj94iluzkBVk-r5iKI51Zc.roa
File:                     9gBxcTj94iluzkBVk-r5iKI51Zc.roa (raw, json)
Hash identifier:          7V1io1ncTWdut0ymm1in0E2J7Zp0QTPV4RAX0xAvZ20=
Subject key identifier:   F6:00:71:71:38:FD:E2:29:6E:CE:40:55:93:EA:F9:88:A2:39:D5:97
Certificate issuer:       /CN=26991C778DA656110D420F3281C1A17A5302C39A
Certificate serial:       0700
Authority key identifier: 26:99:1C:77:8D:A6:56:11:0D:42:0F:32:81:C1:A1:7A:53:02:C3:9A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jpkcd42mVhENQg8ygcGhelMCw5o.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/9gBxcTj94iluzkBVk-r5iKI51Zc.roa
Signing time:             Fri 25 Feb 2022 03:01:04 +0000
ROA not before:           Fri 25 Feb 2022 03:01:03 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     131535
IP address blocks:        2407:31c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26991C778DA656110D420F3281C1A17A5302C39A
        Validity
            Not Before: Feb 25 03:01:03 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F600717138FDE2296ECE405593EAF988A239D597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:f5:56:65:ea:4e:f8:82:84:70:30:53:ad:
                    24:f3:62:2c:cc:97:96:d5:36:43:23:24:97:23:cb:
                    cd:1a:41:90:75:43:fd:ad:4b:d3:89:47:3b:5a:b6:
                    06:f0:04:27:b1:65:0b:8e:ae:7f:6b:ab:c3:a9:a6:
                    63:8c:31:13:77:b1:80:ad:f8:83:79:05:fd:28:0d:
                    f4:97:69:2b:db:2f:2d:6e:3e:03:bc:7b:72:49:ce:
                    bb:88:34:e8:b5:1e:6c:b5:8f:c0:61:a2:e6:d8:65:
                    41:bd:88:b1:9d:32:22:1a:ad:f7:47:d6:02:a8:ab:
                    b9:66:ea:7e:9b:92:6e:9d:2e:20:60:b0:6b:01:1e:
                    9c:77:0f:2f:74:e1:2d:e2:a4:8a:cf:f8:cd:af:1b:
                    95:a4:7b:48:15:89:d1:f0:26:a3:af:fc:db:00:01:
                    f9:9d:ba:85:06:9f:be:65:39:80:c4:4f:df:2a:42:
                    15:e6:04:2b:65:13:5a:6a:4a:bc:0c:38:08:a5:f0:
                    7d:c8:18:9f:e2:6d:e2:80:5c:67:20:f3:6e:e1:06:
                    a7:f4:be:54:41:83:63:e9:82:ba:b8:97:6e:ef:c2:
                    de:60:09:9e:60:a4:c3:09:0a:0d:c8:4a:85:15:73:
                    73:44:0d:cc:aa:f8:6a:5d:64:1e:ee:14:c5:c7:f4:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:00:71:71:38:FD:E2:29:6E:CE:40:55:93:EA:F9:88:A2:39:D5:97
            X509v3 Authority Key Identifier:
                keyid:26:99:1C:77:8D:A6:56:11:0D:42:0F:32:81:C1:A1:7A:53:02:C3:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/Jpkcd42mVhENQg8ygcGhelMCw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jpkcd42mVhENQg8ygcGhelMCw5o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/9gBxcTj94iluzkBVk-r5iKI51Zc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:31c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:2b:5e:14:12:f8:5c:42:a2:cd:ab:c0:94:d6:93:98:d7:
         c1:14:f1:1f:5a:dc:39:9f:56:8c:ba:f5:e6:bd:32:39:ee:f8:
         3d:59:b1:96:68:d2:05:5e:0f:da:ab:8e:2e:3b:0d:17:70:2a:
         12:34:05:d3:71:ec:f0:98:9e:3f:b0:ad:b9:99:52:eb:26:02:
         2d:15:c1:43:71:3b:e7:4d:08:ad:ab:d1:56:3a:6c:c2:97:cd:
         c6:6c:bf:1b:be:3c:6e:72:e1:66:14:33:fa:c5:83:7a:a1:63:
         bc:06:5f:09:35:ed:5a:e8:f6:1d:c5:8a:9c:0c:6d:95:15:02:
         d6:84:ca:57:35:5c:56:57:5b:a6:72:48:cf:48:7b:80:53:aa:
         59:fc:21:f1:35:4c:a3:14:63:23:87:64:c4:ae:e1:06:b5:86:
         3b:31:58:48:e2:4d:94:3c:0b:b1:9d:38:21:87:3e:f8:53:ec:
         3f:2a:82:bc:66:60:23:20:c5:39:44:df:47:46:a1:77:66:04:
         d6:fb:ad:73:08:b0:9f:b8:7b:f5:cf:f4:f6:e4:27:56:0d:8b:
         e2:5f:78:c7:e5:78:db:f7:63:61:9f:5a:b0:73:c7:7f:78:91:
         c5:88:db:6f:67:18:68:f6:81:da:f5:cd:4e:b3:20:f3:87:30:
         59:6d:83:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----