Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/gwNUpsOjHKMPKg6lVeyHzX2CH3g.roa
File:                     gwNUpsOjHKMPKg6lVeyHzX2CH3g.roa (raw, json)
Hash identifier:          YV596S+5O1IaRYzLgWZr06GKT57pIaE9sgxJQ37MIjo=
Subject key identifier:   83:03:54:A6:C3:A3:1C:A3:0F:2A:0E:A5:55:EC:87:CD:7D:82:1F:78
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       064C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/gwNUpsOjHKMPKg6lVeyHzX2CH3g.roa
Signing time:             Thu 13 Apr 2023 05:12:51 +0000
ROA not before:           Thu 13 Apr 2023 05:12:51 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     18811
IP address blocks:        112.75.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1612 (0x64c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr 13 05:12:51 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=830354A6C3A31CA30F2A0EA555EC87CD7D821F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:21:bb:10:da:f8:f6:fd:5c:9c:ec:56:50:
                    4b:2c:16:bd:13:d1:ae:42:a8:86:94:dc:95:93:5d:
                    8f:98:7f:5c:47:f1:82:92:46:7a:b3:fd:01:39:64:
                    7d:8b:49:38:b1:d7:ad:8f:2f:ca:19:1e:dc:9f:68:
                    25:e1:85:ae:c4:0e:0d:a8:74:95:2e:b9:50:11:b3:
                    de:2f:3a:1b:f7:42:5f:9b:85:98:60:3a:3e:ab:a0:
                    2f:e0:42:c7:e8:46:f3:93:44:63:5e:84:36:21:e7:
                    b1:fb:12:05:6c:8c:f8:8b:95:2c:5a:12:55:4c:c7:
                    2f:11:33:1e:8e:29:fd:3c:d8:ca:16:21:fe:92:2c:
                    fa:7c:ec:b0:b2:72:86:a1:00:d6:f6:a5:fc:e3:e3:
                    a4:0e:a9:59:0c:9b:d4:78:a0:5a:7a:82:50:38:4b:
                    61:55:82:69:db:05:e6:bc:c9:d6:d4:34:06:7c:23:
                    d0:d0:ed:8d:a6:56:d2:92:21:38:6d:4a:e4:7b:7f:
                    4d:d1:3b:9a:26:92:f3:13:7c:cc:25:2f:fd:ad:1f:
                    a1:60:3f:8a:c3:a2:1d:91:83:7e:c4:d5:8c:87:58:
                    32:07:1c:63:37:a2:d7:32:f7:6c:3d:9f:8c:5c:d0:
                    e1:a3:b9:99:55:6f:4e:22:08:76:fc:c9:89:6a:ea:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:03:54:A6:C3:A3:1C:A3:0F:2A:0E:A5:55:EC:87:CD:7D:82:1F:78
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/gwNUpsOjHKMPKg6lVeyHzX2CH3g.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:08:66:d9:b5:4c:eb:48:dc:e6:7b:cd:ca:af:d3:35:cd:08:
         05:7c:53:a9:63:d1:f5:03:45:67:de:6c:08:15:f3:ce:4c:7a:
         20:eb:5e:6d:4f:52:b7:d5:89:5a:9b:88:2f:bb:42:af:f7:8a:
         eb:7b:bf:d0:39:c2:c0:0f:80:3b:75:23:db:fd:c8:23:1d:65:
         6d:7c:8b:30:16:7c:02:85:c9:5b:f1:af:b8:5e:82:4f:e5:6c:
         44:b0:60:d1:d9:95:ae:29:53:06:41:62:2c:52:e1:52:9b:de:
         4a:2d:5c:88:26:a1:ae:69:c5:6f:5d:7d:02:6a:aa:cf:d3:c9:
         bd:c8:24:7f:52:a3:f4:27:9d:3d:e9:97:a4:56:7c:c4:34:92:
         93:4a:c8:c5:25:e7:6a:58:66:cb:50:23:ba:59:3d:27:a5:7b:
         35:0d:cf:65:f4:de:3e:b5:73:2e:ff:24:99:eb:1b:5c:18:8c:
         7f:72:36:4e:d3:28:68:e6:c9:65:62:66:f3:f1:cb:a6:47:c4:
         19:20:e7:69:ee:29:05:51:4a:bc:9d:a9:7d:f7:18:a5:6e:1d:
         1d:65:57:58:de:2b:93:2a:95:00:de:63:19:0e:56:44:bd:96:
         4b:00:3b:2d:fd:47:3b:23:3d:1e:6c:69:e5:bf:ca:db:4f:1c:
         fc:8c:1c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----