Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/312/uV9TObnAyrBm7H7JIKb1xmUYKiE.roa
File:                     uV9TObnAyrBm7H7JIKb1xmUYKiE.roa (raw, json)
Hash identifier:          d/g9b+SlBhQZSbXllO1tdNObYAI5UNub3nJxG079LtA=
Subject key identifier:   B9:5F:53:39:B9:C0:CA:B0:66:EC:7E:C9:20:A6:F5:C6:65:18:2A:21
Certificate issuer:       /CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
Certificate serial:       04
Authority key identifier: 5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/uV9TObnAyrBm7H7JIKb1xmUYKiE.roa
Signing time:             Thu 27 May 2021 05:06:39 +0000
ROA not before:           Thu 27 May 2021 05:06:39 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     134764
IP address blocks:        120.31.164.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F1875C2075A152977C3D3B1E1B8BBC42F3264D4
        Validity
            Not Before: May 27 05:06:39 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=B95F5339B9C0CAB066EC7EC920A6F5C665182A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:3b:76:2c:b3:72:28:cf:c8:c3:c8:0b:f6:
                    20:fb:52:b3:5e:6b:b1:4d:2e:e6:ca:cb:20:10:45:
                    34:38:ea:8b:8a:b8:ae:fa:69:f9:1d:f5:4b:d4:32:
                    08:8e:37:5e:66:93:56:04:fd:61:7d:33:a9:a4:1b:
                    6a:8c:2a:f6:ab:f8:94:c6:d8:44:b2:4a:2e:23:59:
                    f4:82:98:7f:19:7d:e3:74:a1:ed:4e:4b:b3:11:6a:
                    1c:76:9b:54:36:b2:7e:43:9a:59:ed:1c:2f:db:60:
                    f9:57:5a:5d:16:e2:1b:02:6a:e6:81:77:52:18:46:
                    23:29:6a:29:d8:c9:40:cd:80:8f:5d:72:f8:f7:2c:
                    a1:72:89:d9:1b:f6:ac:76:6d:93:a7:1d:c4:3e:72:
                    08:34:6c:7d:56:05:0b:bd:af:48:e7:4e:34:a4:b7:
                    85:a5:1c:84:79:91:30:3a:e7:29:37:42:53:ca:5a:
                    56:e0:0c:cd:86:1a:0c:28:f0:b3:7d:e2:26:30:18:
                    2a:4e:d4:84:71:63:fb:b3:e8:7c:30:a8:bd:ad:af:
                    48:24:33:71:f8:0c:a5:fa:ff:b1:5b:fd:15:eb:08:
                    f9:bc:90:3c:6b:b1:7b:18:ef:86:2b:fd:ce:01:ab:
                    32:24:e1:b2:43:6e:ad:1e:51:7a:3d:ec:76:84:06:
                    4d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5F:53:39:B9:C0:CA:B0:66:EC:7E:C9:20:A6:F5:C6:65:18:2A:21
            X509v3 Authority Key Identifier:
                keyid:5F:18:75:C2:07:5A:15:29:77:C3:D3:B1:E1:B8:BB:C4:2F:32:64:D4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Xxh1wgdaFSl3w9Ox4bi7xC8yZNQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/312/uV9TObnAyrBm7H7JIKb1xmUYKiE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.31.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:b7:48:96:23:b4:9c:f8:f3:fa:b5:5c:4d:88:80:cc:5f:70:
         c7:bb:26:7b:93:3d:b9:e4:a4:fb:6e:64:b8:85:6a:8f:64:4e:
         a2:12:7f:3b:dc:66:de:6e:c2:fa:68:0e:a7:fd:32:5b:0c:f9:
         ba:a9:2d:74:db:f3:ec:7c:78:0c:0b:68:aa:e8:57:29:db:d2:
         47:75:f6:0b:4a:4d:e7:3a:82:54:7d:bb:b0:16:41:ed:e6:6f:
         8a:ba:b9:3e:d5:8e:f1:f0:62:78:a0:69:f0:36:aa:5d:cd:39:
         f7:55:e1:8f:c5:5e:b0:d7:e9:19:78:ff:f5:c2:43:44:6c:8d:
         d6:2d:9e:fa:27:56:71:18:e7:d8:d5:42:cd:26:a5:9b:38:01:
         5a:ac:66:40:28:eb:a0:44:02:d7:86:07:d6:bd:e3:66:bf:27:
         84:d6:15:75:37:da:72:15:72:6d:fa:6f:ea:5a:f7:e3:ec:de:
         ec:c7:e1:97:0b:4d:43:c2:e7:12:d9:a4:3b:2f:69:3e:a2:46:
         80:71:0d:c2:01:42:72:6c:13:4d:b7:b4:e5:35:91:47:97:d9:
         ae:5b:2d:54:57:df:3a:41:8b:53:63:af:40:a9:d5:68:79:89:
         17:7c:2e:a6:4b:69:10:ac:28:bf:48:07:f8:26:d0:86:85:dc:
         d0:89:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----