Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/332/8OVjT2xkaxXlZXhT3GNcTurGIIw.roa
File:                     8OVjT2xkaxXlZXhT3GNcTurGIIw.roa (raw, json)
Hash identifier:          rCLoVxguIsNI1DESISrFJB8CTP0BGVGNNCl8evygyNk=
Subject key identifier:   F0:E5:63:4F:6C:64:6B:15:E5:65:78:53:DC:63:5C:4E:EA:C6:20:8C
Certificate issuer:       /CN=CD7094EA7FAF453903681B724C2000117A127121
Certificate serial:       06EC
Authority key identifier: CD:70:94:EA:7F:AF:45:39:03:68:1B:72:4C:20:00:11:7A:12:71:21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zXCU6n-vRTkDaBtyTCAAEXoScSE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/8OVjT2xkaxXlZXhT3GNcTurGIIw.roa
Signing time:             Sat 23 Oct 2021 02:40:18 +0000
ROA not before:           Sat 23 Oct 2021 02:40:18 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     24424
IP address blocks:        2401:3800::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772 (0x6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7094EA7FAF453903681B724C2000117A127121
        Validity
            Not Before: Oct 23 02:40:18 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=F0E5634F6C646B15E5657853DC635C4EEAC6208C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:9a:e6:17:25:61:41:ea:4a:4a:b8:a6:9c:
                    b9:5e:0b:58:33:60:7f:c9:40:37:e4:b2:83:1e:ab:
                    d7:94:6f:75:a3:fb:a6:a3:c1:65:ff:02:f1:75:1a:
                    17:ea:d1:e0:1b:bc:a7:8b:5f:cc:45:64:23:6b:fc:
                    78:1f:fd:44:ac:57:24:6b:3c:1c:17:19:44:ef:7f:
                    34:ef:97:7c:0a:ee:27:be:dc:11:ba:65:e6:89:59:
                    49:30:ed:58:a6:b7:bd:82:9c:8b:2a:62:e0:a1:07:
                    b1:9e:9f:18:a6:a4:73:a5:81:eb:c9:83:fc:bc:bd:
                    67:71:fd:3d:98:80:04:db:38:a8:af:23:6e:58:d4:
                    ad:85:fb:27:9d:4a:c5:bc:d9:6d:21:fc:c8:0f:74:
                    41:16:eb:58:c3:18:8c:ce:b7:7a:5f:ca:32:92:e1:
                    81:35:6b:58:4d:f5:da:c3:eb:68:28:ea:3d:e2:24:
                    8e:8c:c9:a3:8f:f3:6f:e3:5b:66:b6:d5:8e:a3:ff:
                    e1:f7:13:d8:c3:79:01:83:95:bf:13:65:86:88:c4:
                    85:15:d7:21:95:0a:e1:0d:18:69:0e:18:82:24:5d:
                    04:be:5b:c7:03:e9:98:a7:11:b2:26:78:80:6b:f8:
                    9c:ef:17:dc:e4:26:21:7f:18:07:1c:75:35:e2:3b:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E5:63:4F:6C:64:6B:15:E5:65:78:53:DC:63:5C:4E:EA:C6:20:8C
            X509v3 Authority Key Identifier:
                keyid:CD:70:94:EA:7F:AF:45:39:03:68:1B:72:4C:20:00:11:7A:12:71:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zXCU6n-vRTkDaBtyTCAAEXoScSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zXCU6n-vRTkDaBtyTCAAEXoScSE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/8OVjT2xkaxXlZXhT3GNcTurGIIw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:57:ea:cd:6e:1c:b0:2c:ad:c9:97:9c:68:0e:a2:5c:98:
         e4:36:48:00:52:ab:34:d7:18:d7:2c:6f:8d:ff:89:46:bd:29:
         0f:f3:c1:c2:4b:18:61:1c:f4:21:c5:40:f1:2f:0f:62:4d:be:
         e0:cc:4b:d4:d4:b7:ea:20:ec:2a:69:80:19:ce:f6:72:db:82:
         24:17:d2:36:1a:18:18:40:5f:4c:3e:c9:33:3e:3e:8c:c0:72:
         ba:c9:93:f5:c3:19:0a:7f:9e:2b:12:4d:16:64:35:27:45:57:
         ff:2d:bc:5b:40:6f:df:ce:73:79:fc:d8:b4:f7:b2:c5:b7:3a:
         1f:65:6c:ab:54:3e:4d:ee:b7:26:08:08:b3:38:db:15:60:d5:
         39:b5:32:86:32:58:a9:5c:fd:f3:eb:63:5b:f1:89:2d:9f:d5:
         58:ae:fe:a1:aa:d9:ac:96:ac:9f:0a:89:ec:e1:2c:ba:af:b6:
         75:aa:b8:af:43:14:87:c6:ca:97:ca:2a:9b:23:6e:ed:9c:1d:
         c1:e1:f2:c5:1a:8a:36:1b:91:23:96:92:6d:37:82:3a:58:47:
         8d:7e:48:81:a7:ca:f7:9c:0b:c5:2d:5d:df:9c:23:49:f8:9e:
         ea:c8:8e:36:3a:f3:c1:dd:b9:18:88:46:f6:d1:5e:2f:bf:58:
         ce:6a:10:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----