Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/g2HSadr8mq1tX2o1jRdX1Skvd7w.roa
File:                     g2HSadr8mq1tX2o1jRdX1Skvd7w.roa (raw, json)
Hash identifier:          pG5xwurhG5BdCckcUsyRWWL0AkgC7LHVZ/e2fJ9GyHg=
Subject key identifier:   83:61:D2:69:DA:FC:9A:AD:6D:5F:6A:35:8D:17:57:D5:29:2F:77:BC
Certificate issuer:       /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial:       06
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/g2HSadr8mq1tX2o1jRdX1Skvd7w.roa
Signing time:             Fri 10 Sep 2021 13:46:19 +0000
ROA not before:           Fri 10 Sep 2021 13:46:19 +0000
ROA not after:            Sat 10 Sep 2022 13:34:57 +0000
asID:                     146839
IP address blocks:        103.172.160.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
        Validity
            Not Before: Sep 10 13:46:19 2021 GMT
            Not After : Sep 10 13:34:57 2022 GMT
        Subject: CN=8361D269DAFC9AAD6D5F6A358D1757D5292F77BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:b8:11:53:be:d7:4d:65:c5:a6:43:03:be:
                    df:9e:85:56:ac:39:58:56:1e:e8:67:b4:ff:0a:db:
                    6c:e5:aa:ad:93:1d:15:46:07:a2:ad:4f:42:44:2e:
                    a9:84:5f:df:1c:c9:54:51:df:40:32:a9:72:b1:db:
                    5c:b4:ce:91:d4:87:42:8b:70:5a:e1:99:06:43:de:
                    42:49:f7:2e:8a:9d:2b:b0:38:6c:29:1b:df:11:92:
                    96:43:18:35:9d:8a:eb:3e:1f:fd:cc:9f:2b:7f:75:
                    e9:96:93:8d:58:99:e1:77:ce:48:92:f8:96:d8:7f:
                    a1:c7:09:a3:be:ea:bf:54:99:5d:7b:93:75:8b:31:
                    b8:2c:6f:e0:f2:7d:c5:49:f2:4f:5b:89:76:95:c2:
                    32:48:75:ab:ee:f7:74:ae:c5:bc:10:df:55:f1:7b:
                    b6:8c:19:95:a6:87:0b:5a:d4:1b:5c:d8:c3:ea:c6:
                    7a:a9:68:2b:04:db:20:fe:4c:ee:2a:b3:a3:3e:7b:
                    4f:a2:f4:05:65:6e:ad:60:40:d7:67:10:53:9a:05:
                    41:3c:71:dd:3d:26:cd:76:3a:5d:c3:f8:b9:13:d4:
                    ca:f7:a6:56:9a:47:6e:85:5c:23:6a:09:5f:8b:be:
                    44:f0:61:95:e8:3c:3c:6b:63:63:c0:96:7a:eb:b5:
                    9c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:61:D2:69:DA:FC:9A:AD:6D:5F:6A:35:8D:17:57:D5:29:2F:77:BC
            X509v3 Authority Key Identifier:
                keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/g2HSadr8mq1tX2o1jRdX1Skvd7w.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:d8:62:68:3a:51:2a:42:54:b6:e2:b0:65:57:e8:72:7a:92:
         08:eb:63:de:06:79:39:ed:18:cf:2c:96:1c:e0:22:ae:58:0f:
         3d:9f:c5:8c:31:45:28:c4:09:af:d4:65:16:4c:4a:dd:7d:f2:
         12:58:4c:e3:06:d2:44:c4:45:a2:d0:63:ab:43:bc:dd:bd:f9:
         5c:af:00:9d:61:09:32:73:24:d5:15:87:74:91:89:56:11:7c:
         10:0a:29:11:28:34:c7:6d:3a:68:f3:c3:6e:29:ea:6a:63:f1:
         53:d8:53:54:04:6e:38:68:0a:0d:b6:bf:d0:ff:42:dc:cd:49:
         e3:1d:be:0b:79:c1:0e:64:3a:37:39:af:6e:46:1d:fc:5c:fe:
         a9:d5:f1:29:0c:bf:7b:c8:18:38:e9:ad:8e:3f:84:43:a4:1a:
         f9:d4:27:7e:d5:5b:9a:0d:82:ea:63:ec:57:9f:1c:08:86:48:
         02:10:52:0a:05:8e:3c:37:6b:3c:d0:82:77:8e:ea:d8:24:99:
         96:71:e6:df:9d:5a:6e:28:a1:b3:84:1a:d2:50:4c:3f:c8:9e:
         f9:79:b6:b2:c1:bc:1c:64:3f:03:c0:3f:f9:3f:24:16:0d:e3:
         3e:45:ea:5e:50:14:15:22:e6:10:27:73:84:59:16:ca:99:3e:
         98:3f:41:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----