Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/oxt2CoVVk8t1bZzfpMSYBNX_6t4.roa
File:                     oxt2CoVVk8t1bZzfpMSYBNX_6t4.roa (raw, json)
Hash identifier:          XyVlVHtwHukVa1OkCW9eVe3IvdVbTjHaSZBOJXJv0rs=
Subject key identifier:   A3:1B:76:0A:85:55:93:CB:75:6D:9C:DF:A4:C4:98:04:D5:FF:EA:DE
Certificate issuer:       /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial:       0D16
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/oxt2CoVVk8t1bZzfpMSYBNX_6t4.roa
Signing time:             Wed 05 Jul 2023 01:25:25 +0000
ROA not before:           Wed 05 Jul 2023 01:25:25 +0000
ROA not after:            Fri 07 Jun 2024 02:16:11 +0000
asID:                     48024
IP address blocks:        2407:d7c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3350 (0xd16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
        Validity
            Not Before: Jul  5 01:25:25 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=A31B760A855593CB756D9CDFA4C49804D5FFEADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3a:3e:77:b7:83:c1:99:25:58:ce:21:2d:f7:
                    77:ec:c1:3a:b1:c4:e8:ea:ff:5a:a2:80:03:73:a9:
                    cb:0f:19:d9:a6:08:09:30:74:96:da:0c:ec:d2:b5:
                    27:cf:e1:46:03:64:fa:0a:4e:f3:e3:ae:14:95:54:
                    b8:cd:35:96:eb:4b:8a:5d:e9:ca:82:b4:49:cf:e6:
                    3c:b7:8c:64:3e:cc:52:30:d6:ce:9a:2a:c5:61:df:
                    09:ee:d2:b9:55:02:f9:85:a1:05:39:5a:2e:6f:5f:
                    da:96:2f:97:53:dc:03:5c:79:a4:8a:a4:26:77:2d:
                    a9:15:ce:f8:b6:c1:76:a1:52:2b:88:ae:e6:bf:db:
                    52:4f:95:a7:c1:a3:be:d0:4c:60:db:46:2b:6a:38:
                    6f:9c:9e:33:27:14:c1:48:30:9b:75:5c:85:60:74:
                    6f:ce:dd:78:40:e9:4e:ea:28:97:bb:c8:d8:42:c1:
                    39:37:0c:76:e1:24:d2:cc:96:85:68:32:0e:33:10:
                    cc:9e:ec:0c:c1:ee:f6:b5:06:32:2c:62:8b:f8:aa:
                    e1:c5:27:ef:14:de:17:3b:9f:b0:33:89:bc:a7:9a:
                    d0:3f:6a:e2:96:7d:ac:5b:3f:72:1c:9c:c7:f3:6e:
                    b1:cf:0b:de:85:53:d7:67:45:0a:ac:95:02:ed:02:
                    6e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1B:76:0A:85:55:93:CB:75:6D:9C:DF:A4:C4:98:04:D5:FF:EA:DE
            X509v3 Authority Key Identifier:
                keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/oxt2CoVVk8t1bZzfpMSYBNX_6t4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:bc:85:08:53:63:6e:37:37:d0:ff:f2:fc:48:46:99:46:04:
         24:38:2f:90:17:db:be:fc:25:49:52:ff:46:a6:fa:7f:4a:9d:
         2c:03:f6:43:c8:22:2d:fe:96:e3:72:60:09:b1:21:77:89:db:
         03:6c:71:70:b7:d8:42:85:12:63:ec:d6:b6:0d:73:32:92:f8:
         e2:49:a9:da:b8:41:25:ac:18:03:08:ac:4f:67:30:bb:ba:4c:
         16:7a:fb:be:68:43:24:d7:07:b8:90:fe:6f:b8:b9:23:8a:36:
         a7:88:e8:d3:0b:6d:09:76:39:0c:9b:83:03:69:45:86:87:f0:
         3b:43:86:f9:0f:bd:ad:43:ba:ad:d5:6b:4b:f7:67:78:5f:8c:
         62:5e:10:4c:e2:2b:82:28:37:3a:6b:a2:c5:56:14:90:64:b6:
         a2:17:37:df:3f:6e:dd:69:ca:ef:bf:1c:4d:bb:05:65:fa:06:
         4c:2a:3a:ab:39:90:53:29:11:e6:72:6e:dc:07:3e:b5:c4:5a:
         c4:c9:61:91:d0:25:09:4a:94:e6:2e:84:7a:83:7c:b9:5f:98:
         ed:e8:27:8b:e4:70:d4:b3:e0:71:95:07:1a:09:13:37:9a:13:
         c8:59:4c:8f:63:08:ec:61:5c:d1:7c:7a:b0:b2:fc:b2:f2:27:
         e9:d1:7d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----