Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/m25VVwlHINKtzrnOBrEznVucnlc.roa
File:                     m25VVwlHINKtzrnOBrEznVucnlc.roa (raw, json)
Hash identifier:          zkiH9fNiiLl7+94wr4qI3S2W5MopVErZ5GBPIMRl7hI=
Subject key identifier:   9B:6E:55:57:09:47:20:D2:AD:CE:B9:CE:06:B1:33:9D:5B:9C:9E:57
Certificate issuer:       /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial:       070F
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/m25VVwlHINKtzrnOBrEznVucnlc.roa
Signing time:             Sat 27 Aug 2022 13:34:45 +0000
ROA not before:           Sat 27 Aug 2022 13:34:45 +0000
ROA not after:            Wed 19 Jul 2023 01:20:03 +0000
asID:                     48024
IP address blocks:        2407:d7c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
        Validity
            Not Before: Aug 27 13:34:45 2022 GMT
            Not After : Jul 19 01:20:03 2023 GMT
        Subject: CN=9B6E5557094720D2ADCEB9CE06B1339D5B9C9E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:e6:8e:0d:c8:f6:36:61:71:a5:b6:2e:32:
                    64:5e:db:5c:b5:d5:d4:4a:03:38:38:20:e9:75:04:
                    58:87:b9:ad:a8:cb:3c:2a:fb:32:59:20:c1:62:4e:
                    81:cb:3f:a9:97:5c:b1:8b:e3:43:3d:c7:8a:f7:11:
                    c2:8e:3b:1a:c0:88:a4:11:92:d3:65:df:28:00:39:
                    b1:22:c6:a4:44:19:07:9a:92:6c:31:40:16:49:ed:
                    54:7f:17:c6:c4:f0:bd:9c:34:57:81:e6:bb:9d:28:
                    c8:23:ce:10:ce:2e:51:d2:38:10:ac:48:f6:e6:fc:
                    9f:9d:89:15:d1:f7:e9:e2:5c:62:0e:46:d8:75:59:
                    63:cb:79:7e:7e:f0:3e:d3:4b:94:f8:79:0f:88:89:
                    26:1a:32:ba:88:c2:83:41:6d:2c:a9:08:54:db:4b:
                    79:a0:e3:42:4a:b7:d9:35:e9:40:b8:62:4f:90:10:
                    c1:0b:89:08:65:42:c5:09:11:c1:5c:89:e7:3c:14:
                    ed:09:36:18:bb:cd:22:e1:a7:b6:8d:a7:fb:35:37:
                    72:67:e0:76:7a:95:6f:fb:af:6c:e3:1a:1a:85:c2:
                    40:57:d9:61:d4:54:20:e2:01:71:c2:8a:4b:86:18:
                    2c:42:de:91:9b:1b:e6:86:00:47:09:d2:be:8c:6f:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6E:55:57:09:47:20:D2:AD:CE:B9:CE:06:B1:33:9D:5B:9C:9E:57
            X509v3 Authority Key Identifier:
                keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/m25VVwlHINKtzrnOBrEznVucnlc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:36:1c:aa:52:14:d0:4e:3a:cb:b7:9a:a3:ec:3e:0d:8b:2b:
         ed:cb:cb:e8:89:93:1b:ff:2c:00:e1:59:bf:06:f9:53:92:dd:
         46:e8:1f:c7:b5:25:c1:ee:00:c7:d9:e8:e1:00:7c:ba:42:bd:
         f5:e8:40:c0:e6:ec:89:87:03:d7:3c:fc:08:aa:26:de:98:57:
         65:c4:69:55:18:54:34:57:77:35:9a:d2:bd:6a:64:ec:c5:c7:
         b7:e7:c4:bd:2e:bf:2f:1d:50:1f:d9:64:0c:3b:ff:6c:93:ca:
         12:46:13:4f:41:57:00:9a:52:21:17:ff:2b:6e:01:6c:a6:11:
         c6:ad:0e:aa:b6:90:c2:46:c8:b0:6b:99:a9:cf:68:ca:7c:3a:
         f0:91:8d:f3:a8:be:ec:bd:f6:ff:4c:03:cb:92:ae:ec:21:af:
         61:27:b3:52:31:0c:65:5c:5a:49:03:d3:43:5e:84:ee:6c:9e:
         7e:a3:8f:ea:de:7f:9a:e0:54:36:77:58:72:15:a4:3c:ae:df:
         ba:fb:71:5f:0d:12:d7:24:95:2e:85:d1:a4:e1:75:58:1e:1c:
         14:cc:0d:06:f5:1e:ef:6b:ce:ba:15:34:fb:0d:28:bc:05:73:
         56:46:f2:c4:2e:df:d8:03:00:d7:df:4b:cd:d5:aa:cb:62:e2:
         73:1e:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----