Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3073/ayrntuOnz_n_rdo5OVXpBKKNSoY.roa
File:                     ayrntuOnz_n_rdo5OVXpBKKNSoY.roa (raw, json)
Hash identifier:          hDgW925cZhmg21syWQLHfC2eJmAHL+9Ep4+UnY9JNHc=
Subject key identifier:   6B:2A:E7:B6:E3:A7:CF:F9:FF:AD:DA:39:39:55:E9:04:A2:8D:4A:86
Certificate issuer:       /CN=26991C778DA656110D420F3281C1A17A5302C39A
Certificate serial:       03
Authority key identifier: 26:99:1C:77:8D:A6:56:11:0D:42:0F:32:81:C1:A1:7A:53:02:C3:9A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jpkcd42mVhENQg8ygcGhelMCw5o.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/ayrntuOnz_n_rdo5OVXpBKKNSoY.roa
Signing time:             Thu 11 Mar 2021 04:16:40 +0000
ROA not before:           Thu 11 Mar 2021 04:16:40 +0000
ROA not after:            Fri 11 Mar 2022 03:01:11 +0000
asID:                     131535
IP address blocks:        2407:31c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26991C778DA656110D420F3281C1A17A5302C39A
        Validity
            Not Before: Mar 11 04:16:40 2021 GMT
            Not After : Mar 11 03:01:11 2022 GMT
        Subject: CN=6B2AE7B6E3A7CFF9FFADDA393955E904A28D4A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ca:75:38:dd:e8:71:1a:15:81:98:71:70:cf:
                    2b:9d:a1:8f:21:0a:c6:76:d2:8b:cc:b6:c8:79:4a:
                    b3:1e:a7:c5:7f:9c:12:2b:46:51:97:fc:13:db:72:
                    5c:cf:58:f4:26:6d:95:10:43:c9:05:ef:6f:03:e2:
                    f5:d3:30:dd:df:33:da:9a:c1:62:5d:c7:e0:32:f3:
                    c4:2d:15:d3:d7:f3:c8:df:38:1a:9c:66:d9:b0:79:
                    09:b3:02:e9:71:57:36:fe:89:9d:39:86:cd:f9:bd:
                    65:63:65:59:19:22:39:1a:b0:90:85:84:bc:05:39:
                    0b:58:f2:02:19:9e:8d:9f:4e:e5:7f:d3:ae:9e:39:
                    07:91:f4:78:bc:d7:9d:dc:97:e5:c3:12:63:d3:13:
                    ce:6b:ac:35:6b:e8:a1:68:95:6a:c0:31:a5:d0:33:
                    37:1b:a8:ff:5b:fb:66:9d:75:5f:28:15:00:7b:5a:
                    fb:27:34:67:ed:22:4a:ae:0b:3a:dc:7c:f4:ad:31:
                    b8:26:1c:ab:81:e3:4d:b2:45:60:ed:d4:5f:71:37:
                    72:01:53:5a:a2:d7:69:2e:9c:f0:05:57:37:f5:8c:
                    c0:f5:5c:f5:26:fa:a5:7a:07:24:47:3e:eb:f4:07:
                    3e:53:07:fd:2e:82:d9:e5:fc:da:5b:1c:30:6e:a2:
                    65:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2A:E7:B6:E3:A7:CF:F9:FF:AD:DA:39:39:55:E9:04:A2:8D:4A:86
            X509v3 Authority Key Identifier:
                keyid:26:99:1C:77:8D:A6:56:11:0D:42:0F:32:81:C1:A1:7A:53:02:C3:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/Jpkcd42mVhENQg8ygcGhelMCw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Jpkcd42mVhENQg8ygcGhelMCw5o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3073/ayrntuOnz_n_rdo5OVXpBKKNSoY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:31c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:d6:d4:d5:9b:1e:a1:2d:56:37:b1:db:77:d2:b7:73:50:50:
         ae:02:dd:65:31:e2:bb:0d:05:67:76:91:49:0f:46:bd:f0:b9:
         cc:a0:bb:ff:52:71:7f:55:59:00:1a:a0:71:0d:a2:4c:84:e3:
         7c:62:dd:5e:f3:f5:81:be:68:f6:2e:b2:33:cd:be:ea:ed:84:
         b8:32:d9:d3:bc:ea:d3:05:b9:dd:b5:63:c8:e6:5c:4b:7f:95:
         32:25:9b:44:da:7b:19:d3:c9:b7:48:97:a9:36:0a:57:c6:26:
         f8:bb:52:16:8d:d2:34:db:8d:c1:59:6b:1b:93:3d:7b:d2:26:
         9c:a0:dd:e9:53:52:39:85:60:ec:06:c7:6f:61:7c:34:5c:b7:
         73:2e:33:ee:3c:24:d0:33:3b:6a:66:c3:a6:ab:bf:28:60:e2:
         5c:bd:f0:41:e3:65:55:1e:99:6b:36:d9:8e:5d:9d:d0:36:18:
         82:a1:82:88:e4:94:fa:d9:17:75:74:39:6f:23:4c:4d:8c:0f:
         10:fe:20:0c:b0:dd:a3:ee:2f:a6:55:96:9f:cd:90:7a:74:f0:
         b9:99:92:ca:bf:56:18:fa:6b:64:75:1f:70:83:86:36:ce:b4:
         94:ad:07:c6:8b:9f:12:69:59:0a:48:22:d5:48:79:e3:92:ce:
         5b:dc:02:98
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNjk5
MUM3NzhEQTY1NjExMEQ0MjBGMzI4MUMxQTE3QTUzMDJDMzlBMB4XDTIxMDMxMTA0
MTY0MFoXDTIyMDMxMTAzMDExMVowMzExMC8GA1UEAxMoNkIyQUU3QjZFM0E3Q0ZG
OUZGQUREQTM5Mzk1NUU5MDRBMjhENEE4NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKzKdTjd6HEaFYGYcXDPK52hjyEKxnbSi8y2yHlKsx6nxX+cEitG
UZf8E9tyXM9Y9CZtlRBDyQXvbwPi9dMw3d8z2prBYl3H4DLzxC0V09fzyN84Gpxm
2bB5CbMC6XFXNv6JnTmGzfm9ZWNlWRkiORqwkIWEvAU5C1jyAhmejZ9O5X/Trp45
B5H0eLzXndyX5cMSY9MTzmusNWvooWiVasAxpdAzNxuo/1v7Zp11XygVAHta+yc0
Z+0iSq4LOtx89K0xuCYcq4HjTbJFYO3UX3E3cgFTWqLXaS6c8AVXN/WMwPVc9Sb6
pXoHJEc+6/QHPlMH/S6C2eX82lscMG6iZW0CAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBRrKue246fP+f+t2jk5VekEoo1KhjAfBgNVHSMEGDAWgBQmmRx3jaZWEQ1CDzKB
waF6UwLDmjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDcz
L0pwa2NkNDJtVmhFTlFnOHlnY0doZWxNQ3c1by5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvSnBrY2Q0Mm1WaEVOUWc4eWdjR2hlbE1DdzVvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA3My9heXJudHVPbnpfbl9y
ZG81T1ZYcEJLS05Tb1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAcxwDANBgkqhkiG9w0BAQsFAAOCAQEAuNbU1ZseoS1WN7Hbd9K3c1BQrgLd
ZTHiuw0FZ3aRSQ9GvfC5zKC7/1Jxf1VZABqgcQ2iTITjfGLdXvP1gb5o9i6yM82+
6u2EuDLZ07zq0wW53bVjyOZcS3+VMiWbRNp7GdPJt0iXqTYKV8Ym+LtSFo3SNNuN
wVlrG5M9e9ImnKDd6VNSOYVg7AbHb2F8NFy3cy4z7jwk0DM7ambDpqu/KGDiXL3w
QeNlVR6ZazbZjl2d0DYYgqGCiOSU+tkXdXQ5byNMTYwPEP4gDLDdo+4vplWWn82Q
enTwuZmSyr9WGPprZHUfcIOGNs60lK0HxoufEmlZCkgi1Uh545LOW9wCmA==
-----END CERTIFICATE-----