Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/DbsQPCj3AeTiKYbRQId5Nf8mEm0.roa
File:                     DbsQPCj3AeTiKYbRQId5Nf8mEm0.roa (raw, json)
Hash identifier:          KgpxPpCDocutSNgtTGMPVcclwhB/R/kssLB5k2nygpk=
Subject key identifier:   0D:BB:10:3C:28:F7:01:E4:E2:29:86:D1:40:87:79:35:FF:26:12:6D
Certificate issuer:       /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial:       07A2
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DbsQPCj3AeTiKYbRQId5Nf8mEm0.roa
Signing time:             Sun 15 May 2022 10:52:07 +0000
ROA not before:           Sun 15 May 2022 10:52:07 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     139076
IP address blocks:        103.221.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
        Validity
            Not Before: May 15 10:52:07 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0DBB103C28F701E4E22986D140877935FF26126D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:22:09:4a:3f:48:d7:bd:42:88:3f:34:3c:
                    a4:97:61:56:91:35:94:5c:ed:95:f6:99:a7:57:91:
                    87:3b:4e:12:31:f3:22:45:2e:d5:43:77:0c:b5:61:
                    42:b1:96:a2:58:b2:11:82:8c:5b:39:15:e0:f3:99:
                    6a:26:be:af:e3:8a:88:98:27:1e:25:2f:d5:e5:95:
                    54:0d:9a:e9:0a:3b:25:0d:c1:d4:32:3a:fe:d3:fb:
                    b7:3e:31:8f:4d:99:ae:03:2d:d4:e9:fc:e8:37:ce:
                    02:ef:bf:67:23:03:30:db:6f:2c:03:f2:26:5a:5e:
                    15:bd:ec:4e:a9:29:3b:92:2c:93:62:18:77:24:00:
                    fa:d1:f0:6c:86:fb:d1:b4:ea:de:8b:00:4b:c3:29:
                    71:45:28:7f:06:96:44:ae:c4:26:39:c0:70:c4:86:
                    5b:65:03:1f:d0:a7:60:a5:b2:08:70:77:ef:dd:9e:
                    57:3b:d4:52:28:43:cd:69:6e:48:05:53:1f:79:c3:
                    21:cf:2f:c8:df:eb:ab:e7:e6:24:98:e1:34:b6:fb:
                    b5:84:14:0d:c7:cc:37:bd:c2:6e:ea:3f:16:8a:2e:
                    31:1d:36:10:0d:e6:83:06:ae:50:53:4c:7d:dd:5c:
                    0e:3b:e8:ac:30:9f:b3:d1:49:7b:ac:d3:e8:b8:d5:
                    89:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BB:10:3C:28:F7:01:E4:E2:29:86:D1:40:87:79:35:FF:26:12:6D
            X509v3 Authority Key Identifier:
                keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DbsQPCj3AeTiKYbRQId5Nf8mEm0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:97:06:5d:13:ee:4a:f7:3d:49:09:27:8d:2d:8e:40:e0:a8:
         2b:20:36:de:7c:6a:24:13:1e:e2:e5:92:5b:fa:e3:37:d4:85:
         26:6e:e6:d9:86:9c:2a:1c:21:3e:74:ee:46:b5:94:cf:e3:2b:
         87:ec:89:30:85:32:74:31:7c:ac:6c:e1:91:16:47:a8:5b:fc:
         7e:0e:8a:f1:cf:1c:81:b2:a0:c3:82:c7:94:d8:65:a7:ef:f4:
         c7:d5:87:46:d0:b1:21:c4:e3:b7:01:46:c9:20:c0:cd:4c:83:
         cc:e2:6d:b6:e2:28:d5:8e:15:ad:aa:81:93:51:68:52:cf:78:
         12:fb:78:1b:33:01:b4:e9:d5:90:3a:72:01:0a:93:82:cc:20:
         1e:95:e7:56:d0:42:88:0a:82:3a:0d:f6:f9:24:3f:3c:31:ad:
         f8:42:c7:e8:52:50:a7:2a:48:66:0c:04:43:25:6c:af:8d:6b:
         19:69:f8:8d:3d:a8:30:51:48:ab:49:52:cc:f4:18:00:8f:3d:
         47:0d:dd:df:18:95:a3:34:18:6e:42:28:91:ea:41:b0:41:4b:
         03:cb:06:60:2a:a5:dd:7b:9f:fd:2e:74:95:87:98:a8:f5:91:
         44:af:7a:a7:e9:58:f0:a9:06:38:94:9e:2f:d4:43:e3:d8:94:
         90:89:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----