Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/OqQWNKmyOHJXOixIzfi_uHnl0UI.roa
File:                     OqQWNKmyOHJXOixIzfi_uHnl0UI.roa (raw, json)
Hash identifier:          7BaIYOXIsubEQwETlg4C+sfXUTqHrQWFB+zHFm/D/Bs=
Subject key identifier:   3A:A4:16:34:A9:B2:38:72:57:3A:2C:48:CD:F8:BF:B8:79:E5:D1:42
Certificate issuer:       /CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
Certificate serial:       05
Authority key identifier: 5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/OqQWNKmyOHJXOixIzfi_uHnl0UI.roa
Signing time:             Thu 27 May 2021 05:06:40 +0000
ROA not before:           Thu 27 May 2021 05:06:40 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     135373
IP address blocks:        112.73.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
        Validity
            Not Before: May 27 05:06:40 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=3AA41634A9B23872573A2C48CDF8BFB879E5D142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:05:0c:d6:8e:72:38:dd:7f:5a:c8:5e:59:
                    8c:a0:4a:44:c4:e8:26:0c:c1:c4:64:ac:08:c2:7f:
                    8b:a9:69:6a:45:2c:fc:2e:f1:ff:d5:f8:63:91:0d:
                    2a:b4:7a:90:25:91:a7:c0:5b:4f:cb:71:ae:b7:f7:
                    d8:3d:b5:11:0f:44:11:df:ea:2e:ac:52:f8:a3:fb:
                    d1:2c:56:e7:51:9b:fa:d7:dc:5b:37:66:40:4e:c5:
                    2b:9a:de:63:79:0e:c0:0b:d6:84:a7:f4:28:00:fc:
                    a7:e3:13:93:20:d8:b2:ac:fa:83:2e:6c:bf:87:bb:
                    5f:f3:40:9d:ba:23:a3:00:29:48:8a:63:1f:64:76:
                    47:43:ec:ad:f0:a8:6b:5a:48:46:0b:0e:67:a4:07:
                    fb:5a:ed:a0:c5:41:5e:37:ba:b8:c1:94:32:c5:7c:
                    e2:cb:1f:cb:92:08:ad:d7:45:55:bf:41:2f:06:c7:
                    d7:5b:dc:6c:bc:d9:8a:00:18:44:08:26:95:cc:8a:
                    a7:83:b4:fd:8b:e1:8a:16:27:f9:6f:89:60:e5:c9:
                    44:05:e4:08:0a:5d:59:98:d7:33:f1:fd:0c:1a:3d:
                    c8:42:4b:d7:23:a6:fa:f8:84:49:99:3c:4d:19:c8:
                    0d:ae:72:a8:76:d9:eb:b7:14:9f:20:95:d7:3a:94:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A4:16:34:A9:B2:38:72:57:3A:2C:48:CD:F8:BF:B8:79:E5:D1:42
            X509v3 Authority Key Identifier:
                keyid:5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/OqQWNKmyOHJXOixIzfi_uHnl0UI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.73.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:30:49:ac:8d:b5:3a:e5:18:25:58:8a:71:fa:9f:64:1e:99:
         b1:25:cb:d9:78:5c:38:6e:b9:c9:e8:9c:22:a0:f5:6d:0c:6d:
         60:67:fe:ac:29:86:a8:0e:e2:d8:97:56:bc:5e:22:87:14:7b:
         cf:c7:c9:36:cc:69:b4:33:f9:93:06:93:78:fb:22:26:7e:d1:
         0b:ed:dc:15:a5:b9:df:08:2f:f5:17:f5:7d:56:57:ad:22:39:
         88:2a:91:d8:37:ec:1b:0f:f9:6a:2f:c8:1e:de:43:09:b0:71:
         22:e6:69:cc:45:57:b5:32:b0:67:69:d9:2a:3d:10:b6:42:00:
         b1:6b:44:b5:4c:a0:6c:05:a3:18:d0:bc:ca:f3:7f:62:83:b5:
         31:8c:87:a6:e1:77:a4:31:bd:ad:88:e5:f0:e2:d7:7b:32:91:
         27:39:e5:be:37:fd:47:f7:18:5e:07:6c:8d:f3:af:1e:2a:a8:
         3e:39:e3:01:78:49:5b:ad:a4:79:11:aa:6f:5c:f1:d1:18:b2:
         3a:1b:9a:30:ec:a3:bf:4d:90:8f:76:c0:41:8c:24:ac:78:81:
         d6:52:c6:30:5a:97:0a:83:29:d7:f6:9a:40:fa:3d:87:05:f5:
         6d:0d:d2:f5:4c:5a:7b:aa:a8:72:d3:01:f4:5d:f1:de:09:29:
         c2:e4:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----