Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/332/duxjTORrmTPKBF1l0BfjK-wTXjQ.roa
File:                     duxjTORrmTPKBF1l0BfjK-wTXjQ.roa (raw, json)
Hash identifier:          LZPcMBatCmr6iHDUAShsxxiWqqRsA4HycrWaRSyKPlU=
Subject key identifier:   76:EC:63:4C:E4:6B:99:33:CA:04:5D:65:D0:17:E3:2B:EC:13:5E:34
Certificate issuer:       /CN=CD7094EA7FAF453903681B724C2000117A127121
Certificate serial:       06EC
Authority key identifier: CD:70:94:EA:7F:AF:45:39:03:68:1B:72:4C:20:00:11:7A:12:71:21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zXCU6n-vRTkDaBtyTCAAEXoScSE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/duxjTORrmTPKBF1l0BfjK-wTXjQ.roa
Signing time:             Sat 23 Oct 2021 02:40:18 +0000
ROA not before:           Sat 23 Oct 2021 02:40:18 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     24424
IP address blocks:        203.208.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772 (0x6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7094EA7FAF453903681B724C2000117A127121
        Validity
            Not Before: Oct 23 02:40:18 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=76EC634CE46B9933CA045D65D017E32BEC135E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:91:cd:fd:42:98:ba:67:44:2c:83:0e:a6:9a:
                    00:57:5a:77:7b:22:64:87:54:7c:ba:32:9f:76:7c:
                    16:70:7e:83:5c:1d:a6:a9:e9:3e:fc:83:3a:e4:d8:
                    06:33:61:07:ab:c8:60:42:e3:46:9d:13:b8:fd:02:
                    69:29:a0:f8:d4:45:16:fe:66:9a:a8:87:0a:04:4d:
                    69:05:c0:ec:7a:6c:61:2b:6e:56:89:6a:85:8e:1a:
                    d0:02:8f:cb:89:3c:32:21:ed:67:21:44:0f:1d:71:
                    77:47:93:eb:5c:e0:9f:fa:d1:08:71:65:a1:73:d8:
                    70:39:6d:be:15:0c:0e:59:f8:68:c9:16:96:9b:cc:
                    c0:35:b5:35:cf:d0:b3:91:89:85:0b:ea:93:b1:d9:
                    ec:56:79:55:68:01:ea:78:ad:b5:91:df:41:74:71:
                    3a:6b:82:d8:4c:83:21:d8:db:13:3a:71:20:10:15:
                    24:42:69:88:84:aa:c7:58:f4:c2:1c:93:e5:bd:94:
                    f0:30:83:d0:bc:3a:09:6e:c7:e7:73:48:14:d8:50:
                    e0:06:14:64:54:6e:20:dc:84:79:ac:f5:74:f5:2a:
                    ba:3c:9d:e3:fb:61:9a:a3:ef:20:ab:b1:91:3e:92:
                    79:5d:41:f1:75:d4:27:b9:a6:b7:84:34:72:e5:a8:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EC:63:4C:E4:6B:99:33:CA:04:5D:65:D0:17:E3:2B:EC:13:5E:34
            X509v3 Authority Key Identifier:
                keyid:CD:70:94:EA:7F:AF:45:39:03:68:1B:72:4C:20:00:11:7A:12:71:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/zXCU6n-vRTkDaBtyTCAAEXoScSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zXCU6n-vRTkDaBtyTCAAEXoScSE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/332/duxjTORrmTPKBF1l0BfjK-wTXjQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.208.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:a1:8e:4e:22:c3:2a:15:2f:0b:2a:fa:ad:4b:87:b8:84:63:
         53:30:b3:f1:a9:d5:c4:08:a3:46:62:e3:a5:da:fc:e1:ef:08:
         65:20:1d:01:25:b2:32:c5:a7:ef:3f:c3:f2:14:f8:26:e0:f0:
         01:a2:73:a4:3e:fe:73:62:b8:fc:84:ab:1d:e4:6a:5f:29:ce:
         df:8c:e5:58:bb:3b:b1:86:82:ff:03:a3:60:5f:d2:b9:84:f7:
         cf:bd:2c:f3:fd:ce:97:90:a2:89:2e:79:02:1f:a6:80:7e:10:
         48:0c:b0:b5:28:25:eb:9f:3d:68:64:af:0b:25:6b:c5:4e:e5:
         c0:6a:9b:dc:18:c8:93:6f:53:45:c8:a4:41:b6:cb:6b:aa:d8:
         8e:28:96:00:1d:92:9d:ef:7b:69:9e:f2:3c:10:70:8d:b8:81:
         2a:b5:a6:08:11:4b:b3:d9:75:94:a3:5d:c2:7b:0a:b4:a1:4d:
         25:7d:ce:87:00:1d:8b:02:ca:be:65:12:a4:23:d8:2f:55:98:
         e1:cb:1f:31:ce:8b:b5:d5:f5:be:83:4f:8d:ef:ca:1a:d1:c2:
         bc:ea:7e:9c:62:26:1d:29:c9:cd:f1:4e:58:af:6e:c9:ca:07:
         c4:47:42:cc:92:e1:26:63:77:b3:5e:59:8a:49:33:6c:18:5e:
         6b:f5:ad:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----