Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/EnT6QC5YMYpmqNaqHl7e07vrmnM.roa
File:                     EnT6QC5YMYpmqNaqHl7e07vrmnM.roa (raw, json)
Hash identifier:          APUSe+wUv7qm/pdX99eQQGjTuZTujymWnzHJ2xyn0Tw=
Subject key identifier:   12:74:FA:40:2E:58:31:8A:66:A8:D6:AA:1E:5E:DE:D3:BB:EB:9A:73
Certificate issuer:       /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial:       070D
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/EnT6QC5YMYpmqNaqHl7e07vrmnM.roa
Signing time:             Sat 27 Aug 2022 13:34:44 +0000
ROA not before:           Sat 27 Aug 2022 13:34:44 +0000
ROA not after:            Wed 19 Jul 2023 01:20:03 +0000
asID:                     146839
IP address blocks:        2407:d7c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
        Validity
            Not Before: Aug 27 13:34:44 2022 GMT
            Not After : Jul 19 01:20:03 2023 GMT
        Subject: CN=1274FA402E58318A66A8D6AA1E5EDED3BBEB9A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:4e:71:80:e6:e4:5d:30:bc:43:d2:a5:a6:
                    77:40:1b:62:65:40:0d:eb:9a:33:30:16:ba:db:87:
                    2f:6b:14:81:e0:7d:9e:2c:90:f7:17:37:99:cb:37:
                    bb:9b:2f:84:ed:3b:00:51:ff:4e:70:c0:bd:21:0f:
                    ed:13:da:10:b1:a8:f5:d2:68:f7:c8:42:00:6d:69:
                    84:15:5b:a6:8b:c9:0c:f8:98:72:02:b6:53:10:3d:
                    3c:7b:3b:1f:d0:1e:d5:9b:3d:fa:d9:11:52:32:84:
                    89:cf:ba:d8:51:13:f1:be:cf:d6:03:81:1e:c2:44:
                    cf:3e:d9:f9:fd:77:aa:e8:64:ae:a5:14:26:d1:54:
                    1b:63:c6:79:98:ad:e0:15:c8:0f:9c:ff:ae:9c:fa:
                    d4:7a:79:9d:8b:aa:ba:d7:08:92:02:8a:0f:7d:00:
                    f7:c3:d9:d4:3a:ea:d1:a5:01:7c:19:51:11:e2:8e:
                    4a:93:29:c1:d7:79:85:dd:68:20:cc:58:79:5c:88:
                    6e:19:74:aa:69:d6:65:3d:cd:42:2c:98:11:40:b4:
                    40:5a:f6:5e:72:ec:8c:78:1f:37:09:26:c5:82:e2:
                    c9:01:58:d7:73:e3:e0:20:b1:29:b9:1d:40:0e:b8:
                    58:d7:02:65:a4:b4:30:47:5c:d2:a5:89:65:d3:95:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:74:FA:40:2E:58:31:8A:66:A8:D6:AA:1E:5E:DE:D3:BB:EB:9A:73
            X509v3 Authority Key Identifier:
                keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/EnT6QC5YMYpmqNaqHl7e07vrmnM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:6a:41:28:e8:26:c9:24:c8:a2:90:b5:25:b5:24:3a:40:a7:
         13:83:d9:39:8a:18:b9:e3:df:29:2f:d3:bd:b9:56:22:a0:cb:
         06:5f:78:93:45:7b:3e:35:30:dd:10:a2:be:45:4b:89:66:6d:
         5a:84:7c:34:50:31:e9:25:aa:ec:bd:b7:3f:5d:93:7e:66:dc:
         8b:d9:75:83:d1:ea:ef:23:ae:8d:20:96:9f:00:02:25:01:3b:
         62:a1:ff:7d:28:79:0f:b4:93:f3:6b:66:9e:99:65:cf:e8:c8:
         43:f0:26:51:59:30:36:7c:3d:78:2e:22:f8:21:a6:bf:ab:e9:
         7a:96:41:63:5d:7e:71:68:72:54:67:7f:4d:ae:0b:7c:2a:59:
         24:14:11:e3:22:e7:bc:5e:96:9f:d1:1a:b1:4d:d4:8c:55:f3:
         a9:25:3c:7b:16:80:de:f5:f7:68:c7:f6:cd:1f:9d:5a:1d:49:
         51:89:1b:75:f0:ff:86:e8:1f:06:39:2e:8b:ef:7b:7c:4c:de:
         12:34:23:4a:02:29:9e:29:61:0b:ed:80:19:87:9a:1e:07:ad:
         b2:e9:f4:94:f6:b6:bf:18:3b:08:10:9b:8f:37:47:68:95:ad:
         29:de:34:e2:e5:29:e2:e3:01:b5:72:94:20:6e:20:f4:d8:e4:
         a8:86:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----