Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/5HV3TFw6tffLjuRgHCtjel-ZKtY.roa
File:                     5HV3TFw6tffLjuRgHCtjel-ZKtY.roa (raw, json)
Hash identifier:          Uf5vWik5RxbrHKeRs6sKu3KDkp7Og+pQdFbbhW/0fmU=
Subject key identifier:   E4:75:77:4C:5C:3A:B5:F7:CB:8E:E4:60:1C:2B:63:7A:5F:99:2A:D6
Certificate issuer:       /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial:       0D14
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/5HV3TFw6tffLjuRgHCtjel-ZKtY.roa
Signing time:             Wed 05 Jul 2023 01:25:25 +0000
ROA not before:           Wed 05 Jul 2023 01:25:25 +0000
ROA not after:            Fri 07 Jun 2024 02:16:11 +0000
asID:                     146839
IP address blocks:        2407:d7c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3348 (0xd14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
        Validity
            Not Before: Jul  5 01:25:25 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=E475774C5C3AB5F7CB8EE4601C2B637A5F992AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:a7:3f:ac:15:d0:9e:57:89:b2:a3:2a:aa:
                    00:5e:cf:da:dc:67:6d:94:96:eb:85:f2:8c:73:e8:
                    a1:30:41:02:83:e8:77:03:c6:eb:42:4a:86:2e:a8:
                    c6:28:f4:e8:30:ac:16:43:36:ae:9b:70:fb:82:4a:
                    8a:f2:66:04:58:d0:27:b1:19:89:cf:7c:43:7a:38:
                    b9:df:ac:b7:be:bd:16:ad:0f:70:7f:f9:59:a0:be:
                    eb:fe:c1:af:1a:0f:be:05:ee:d1:58:68:c0:15:1c:
                    95:55:89:bd:94:50:c8:5d:e3:2c:bf:65:2f:f7:68:
                    6d:56:4c:b3:0d:ea:02:b7:a4:81:68:83:fd:d1:a5:
                    e2:7c:58:a5:28:0e:a1:ff:ef:0b:13:f2:f5:5c:16:
                    76:0c:23:27:e2:7b:b4:a8:7f:0c:1c:10:8a:3d:38:
                    02:0a:84:d1:25:c5:80:ed:0a:31:cd:80:15:cc:de:
                    f8:70:34:36:04:39:0c:4e:ec:ec:60:52:43:6b:cf:
                    ed:33:da:e5:5c:ad:c8:5b:c5:3b:71:69:d7:b8:40:
                    4f:a8:f7:74:20:82:da:f9:03:95:56:71:76:20:27:
                    5f:fd:3e:9b:b6:14:b0:21:6d:47:27:a3:f5:14:b6:
                    8c:ab:8c:56:44:57:a9:ec:00:8e:c0:94:e1:3b:f2:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:75:77:4C:5C:3A:B5:F7:CB:8E:E4:60:1C:2B:63:7A:5F:99:2A:D6
            X509v3 Authority Key Identifier:
                keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/5HV3TFw6tffLjuRgHCtjel-ZKtY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:0f:1a:04:7b:11:e0:72:db:7f:8e:e8:e0:90:38:6c:16:8b:
         74:d4:cd:69:5c:da:e2:55:55:b5:10:1d:ec:8b:95:b2:71:28:
         84:06:d2:31:aa:38:31:27:26:1c:a4:06:59:7a:2b:30:ed:b2:
         a5:c3:09:61:5f:2f:90:ae:e3:45:06:32:7c:98:68:4f:93:a2:
         44:3f:8b:fd:d5:cb:e7:96:a0:16:2c:b7:cc:19:50:43:91:01:
         79:84:68:d4:0b:81:34:17:f2:6b:8a:f6:1f:98:02:61:ce:52:
         30:62:d0:5d:61:b6:0e:22:12:ba:36:2c:58:f7:06:01:60:f3:
         9a:5b:f9:c8:06:f6:a3:65:62:b3:e6:94:5a:c0:9b:c9:35:13:
         94:bf:f1:28:41:28:37:2c:3f:1c:50:08:5e:c8:c7:d6:43:08:
         8d:74:7e:78:86:50:d7:9c:0a:d7:fe:9f:89:51:25:2d:72:00:
         02:bd:69:15:fe:2f:22:3f:09:e9:72:15:17:24:59:bd:1e:ce:
         20:b8:ff:69:7f:55:87:7d:52:28:2f:ce:40:07:66:87:bd:bc:
         23:86:5c:0c:2c:54:a0:e2:f6:09:1e:cc:5e:a0:73:cf:4f:2b:
         d9:45:2d:89:df:48:d9:4f:1f:c2:09:0c:ca:98:d0:ba:81:29:
         49:34:10:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----