Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/561/DqErj2HN-PklCwpM-wr8vVXT2f0.roa
File:                     DqErj2HN-PklCwpM-wr8vVXT2f0.roa (raw, json)
Hash identifier:          kpW70LcMCSEImYymGoASPiGGmJ4wLWeFmSjNeAIo26I=
Subject key identifier:   0E:A1:2B:8F:61:CD:F8:F9:25:0B:0A:4C:FB:0A:FC:BD:55:D3:D9:FD
Certificate issuer:       /CN=BEE006E22E296489D5460AB8B3FE998B97475A5D
Certificate serial:       03
Authority key identifier: BE:E0:06:E2:2E:29:64:89:D5:46:0A:B8:B3:FE:99:8B:97:47:5A:5D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vuAG4i4pZInVRgq4s_6Zi5dHWl0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/DqErj2HN-PklCwpM-wr8vVXT2f0.roa
Signing time:             Thu 27 May 2021 05:07:21 +0000
ROA not before:           Thu 27 May 2021 05:07:21 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     23724
IP address blocks:        211.155.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE006E22E296489D5460AB8B3FE998B97475A5D
        Validity
            Not Before: May 27 05:07:21 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0EA12B8F61CDF8F9250B0A4CFB0AFCBD55D3D9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:87:04:54:d4:57:7a:d5:6c:4c:79:56:61:
                    7c:35:89:00:29:32:f4:ff:21:83:4e:60:99:e3:b4:
                    64:e2:3b:9e:fb:69:dd:fb:00:7c:da:a2:b1:95:fd:
                    b3:1c:e9:ad:38:81:b7:40:38:4d:6d:b0:fa:2f:ee:
                    2c:b2:50:8d:fc:aa:aa:c9:d5:24:ae:47:a9:22:da:
                    db:23:1c:da:cf:b7:9e:aa:97:05:08:d5:bf:b5:a2:
                    91:6b:67:1d:e8:a6:f4:7c:34:52:19:d2:47:49:39:
                    a9:42:e1:4b:30:5d:6e:29:67:28:4f:6a:cc:00:1a:
                    69:98:29:18:a2:2f:aa:ec:1f:ab:90:42:dd:97:24:
                    40:fc:6e:78:5c:f6:70:39:5c:32:51:9a:e3:db:e3:
                    f7:d1:a7:56:16:f5:69:0a:bd:32:1f:13:be:bc:3d:
                    6d:55:00:3a:63:e5:f0:c0:4c:a5:87:85:4b:da:18:
                    c7:32:ae:01:b2:c0:01:7d:13:c5:cb:ab:d9:2f:6d:
                    e9:a8:83:ea:7a:d4:ef:da:f5:ec:d9:1b:f5:bb:46:
                    83:12:1d:6c:44:41:86:b8:34:6c:8d:7c:51:cf:37:
                    e9:ec:4f:5b:a8:ba:7c:cf:f7:97:be:5e:3b:3d:14:
                    a4:f0:d0:38:fd:90:e6:7a:c2:2a:d5:00:8f:7f:b2:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A1:2B:8F:61:CD:F8:F9:25:0B:0A:4C:FB:0A:FC:BD:55:D3:D9:FD
            X509v3 Authority Key Identifier:
                keyid:BE:E0:06:E2:2E:29:64:89:D5:46:0A:B8:B3:FE:99:8B:97:47:5A:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/vuAG4i4pZInVRgq4s_6Zi5dHWl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vuAG4i4pZInVRgq4s_6Zi5dHWl0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/561/DqErj2HN-PklCwpM-wr8vVXT2f0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:48:c6:98:4f:16:12:97:63:08:20:63:8d:73:a8:f5:e8:
         81:5b:99:53:3d:0f:d7:e2:de:79:90:04:45:89:26:ad:55:ad:
         1a:d1:7f:86:1f:68:e6:ca:a3:e0:c5:02:36:a6:50:0e:e6:d5:
         30:f7:b7:34:ac:f4:ca:77:b6:1f:34:c6:61:0e:67:64:d5:25:
         79:3d:ad:48:f2:4a:ee:de:56:12:24:b8:6f:f9:b5:72:df:73:
         53:59:a8:44:c2:7b:f7:a3:a6:16:53:dc:ee:7a:d8:b9:f0:69:
         f9:21:ff:ac:2f:09:9c:1b:e2:6a:29:bf:76:44:18:00:b4:c9:
         47:9e:b5:1f:de:a2:a4:28:27:4f:c0:b1:97:af:10:48:a9:00:
         e0:5f:9d:5c:a3:05:2c:b0:fd:27:a1:99:18:8e:1b:1d:4c:66:
         6b:74:17:60:be:77:72:dc:74:dc:94:52:da:b9:b7:2a:0a:ca:
         6f:de:b8:2b:00:df:9b:40:ab:2f:30:08:b8:e6:b1:fa:de:d5:
         d7:f6:bd:ef:5d:59:ce:40:62:83:6a:0a:68:97:ad:d9:fc:44:
         27:a2:ac:63:a0:4d:ca:0b:5a:a0:76:78:b5:2a:75:23:96:70:
         d5:91:61:c4:16:ca:8d:73:28:e2:1b:de:42:e8:73:0f:e9:f1:
         bb:09:3e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----