Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/DuEsqINeYbeYZHM7Ia-CH--NswU.roa
File:                     DuEsqINeYbeYZHM7Ia-CH--NswU.roa (raw, json)
Hash identifier:          cSp+1VGPfefEkgB6lxtcbaknA0OJeAw1R9L0JBt5Eec=
Subject key identifier:   0E:E1:2C:A8:83:5E:61:B7:98:64:73:3B:21:AF:82:1F:EF:8D:B3:05
Certificate issuer:       /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial:       0B
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DuEsqINeYbeYZHM7Ia-CH--NswU.roa
Signing time:             Thu 27 May 2021 05:01:59 +0000
ROA not before:           Thu 27 May 2021 05:01:59 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     59803
IP address blocks:        2403:1b80::/32 maxlen: 64
                          2403:1b80::/48 maxlen: 64
                          2406:1e80::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
        Validity
            Not Before: May 27 05:01:59 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0EE12CA8835E61B79864733B21AF821FEF8DB305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:0f:83:c3:aa:3f:11:5e:a1:87:2e:9e:c8:
                    5d:9b:93:6e:21:6a:34:20:13:2f:ab:ee:c9:c5:20:
                    e8:ef:0c:f8:48:a7:e0:74:d9:20:00:10:2d:d9:9b:
                    29:ba:7f:7d:45:b5:a9:74:a3:4d:9a:78:4a:54:7a:
                    d8:00:5d:6a:5b:72:c6:b7:5c:62:18:4c:b8:d6:e1:
                    bc:fe:c7:52:2a:88:67:ed:15:8d:76:a6:27:87:96:
                    91:fb:8d:65:36:90:7d:7b:68:0c:ba:e7:8b:4a:b3:
                    04:97:bf:07:e7:7d:23:a7:2b:07:e4:07:79:59:1b:
                    4e:c6:e8:bb:31:5f:57:13:d4:09:b4:92:cf:1f:89:
                    10:50:43:8d:0e:10:7e:6a:de:24:5d:53:2a:c0:d3:
                    e6:c7:f8:c1:c1:96:c1:e6:67:2e:14:16:7a:35:c5:
                    29:a0:b3:10:67:2d:53:9c:4b:2f:b6:66:cf:37:20:
                    ee:c9:00:2f:bf:0e:b4:b1:bc:c9:26:df:b6:03:e5:
                    86:8f:2c:36:21:5c:b9:aa:56:fd:6f:ad:b5:3d:0d:
                    7c:d6:53:bc:2d:47:1a:35:ea:21:3d:cf:26:89:45:
                    25:09:28:16:df:e1:f5:fa:da:03:24:23:15:6f:03:
                    a8:20:e0:d8:3c:3f:0d:86:d4:6c:01:3b:6e:fd:ca:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E1:2C:A8:83:5E:61:B7:98:64:73:3B:21:AF:82:1F:EF:8D:B3:05
            X509v3 Authority Key Identifier:
                keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/DuEsqINeYbeYZHM7Ia-CH--NswU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1b80::/32
                  2406:1e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:9b:c0:ce:3b:08:38:01:5d:19:e4:0d:cd:85:7f:25:09:ac:
         1f:e0:83:3e:b6:9f:57:a5:27:98:d3:3d:df:77:77:20:44:0d:
         1a:5f:41:48:10:34:95:eb:91:09:e3:21:1f:86:07:73:3f:6d:
         8c:11:59:d6:15:e6:83:79:75:ef:6f:52:2c:07:7a:b4:00:ea:
         be:9c:c1:b3:5e:fc:99:3d:fc:7d:ce:5a:27:67:e0:e4:4d:c9:
         fe:bf:d5:66:6c:0b:6f:50:a1:77:d5:67:79:72:8e:d2:5c:1e:
         7f:14:17:0c:db:37:00:97:2e:56:23:21:be:dd:a3:e1:4e:1a:
         f9:68:16:86:c5:2f:85:a1:76:21:53:a9:ae:0d:1a:d1:88:b3:
         5b:ee:4b:9b:7c:69:92:e7:d0:02:ee:2f:b1:53:f1:44:d9:cf:
         b5:3a:04:3f:1b:47:b3:69:1e:a5:55:ef:be:a4:5a:10:b4:ae:
         94:f1:04:c1:d3:46:f7:4b:1c:72:42:42:c9:d8:41:bb:77:fa:
         56:8f:94:1a:47:68:42:cb:38:88:35:60:12:c9:3f:e2:c4:df:
         8e:83:19:6d:71:eb:26:6c:a8:a7:20:05:72:5e:a4:5c:ea:77:
         d2:25:07:32:6b:62:e2:18:8c:fe:68:41:5d:da:9e:09:11:e5:
         1f:c9:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----