Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/FLD91bme5k9bzMx0G0U3SmFp-Dc.roa
File:                     FLD91bme5k9bzMx0G0U3SmFp-Dc.roa (raw, json)
Hash identifier:          eo7FqjsYskh/Mvib6agGzFbElE5v3TPbEIJlq5hGdMM=
Subject key identifier:   14:B0:FD:D5:B9:9E:E6:4F:5B:CC:CC:74:1B:45:37:4A:61:69:F8:37
Certificate issuer:       /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial:       0E
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/FLD91bme5k9bzMx0G0U3SmFp-Dc.roa
Signing time:             Wed 01 Jun 2022 07:07:36 +0000
ROA not before:           Wed 01 Jun 2022 07:07:36 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     24373
IP address blocks:        2406:1e80::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
        Validity
            Not Before: Jun  1 07:07:36 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=14B0FDD5B99EE64F5BCCCC741B45374A6169F837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:2e:34:14:d9:af:8f:b6:cd:bd:61:90:01:
                    fb:e4:cc:8b:47:98:ed:53:b6:53:4a:76:a5:0f:45:
                    b6:e4:e0:00:be:d5:25:24:1f:fc:0f:7a:71:60:11:
                    71:4c:31:08:ba:39:67:5d:93:df:44:fc:2b:80:31:
                    9c:bf:38:cc:5d:a4:27:72:12:d4:33:34:ab:88:08:
                    d8:d5:c4:88:1f:bc:11:09:b6:38:66:73:54:86:6f:
                    d2:52:c9:c0:6e:3f:3f:b1:d4:f4:3d:9a:5d:b3:02:
                    f8:28:7f:08:2f:ce:70:0c:7c:58:d5:e7:35:c0:63:
                    b5:49:ff:e2:61:cf:0c:7d:7c:4a:32:1a:a3:37:bf:
                    fa:a4:b3:0a:95:03:51:1b:97:7b:55:3c:fd:34:a7:
                    ca:c0:3b:27:f3:53:03:77:35:6f:89:f6:6b:e0:62:
                    41:44:a7:7a:4c:18:1e:71:81:89:be:b9:48:d5:ed:
                    76:a7:da:6c:00:d2:90:02:e3:59:c1:f2:21:6b:7c:
                    e0:07:63:9d:72:c1:69:8b:56:93:77:70:bc:c1:44:
                    08:25:00:83:a2:64:60:d8:7c:ed:86:03:f3:8c:9b:
                    dc:7d:f8:77:f3:e9:aa:0d:22:d9:6f:16:7e:81:eb:
                    83:ee:a4:f3:cf:f3:2a:91:e0:9d:4d:89:e7:37:44:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B0:FD:D5:B9:9E:E6:4F:5B:CC:CC:74:1B:45:37:4A:61:69:F8:37
            X509v3 Authority Key Identifier:
                keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/FLD91bme5k9bzMx0G0U3SmFp-Dc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:1e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:b4:44:b4:88:f6:35:6e:ec:3d:0c:63:c6:e1:e7:a4:fa:
         2f:3e:20:24:6a:93:2b:3e:0c:b4:e7:f6:3d:aa:8d:2c:68:c5:
         ac:47:6e:07:bb:4f:a9:3a:7b:a7:33:e1:b4:9a:52:c4:e9:ee:
         7c:9c:3c:44:ec:0a:ac:75:07:11:b9:c3:38:01:e9:0f:0e:1e:
         a6:de:a2:e2:70:df:81:c6:d6:9a:08:30:64:4a:13:2b:fd:0c:
         a6:34:d2:a1:20:14:27:bb:ef:04:50:5c:e7:72:42:05:83:f9:
         f9:da:7d:47:6e:e3:d7:bc:1a:5e:7c:41:ed:83:a7:6f:25:50:
         fe:e8:68:27:3c:89:fa:72:69:46:41:4b:36:11:6b:15:0d:6e:
         8d:b5:a9:ee:1b:c7:9e:35:b0:a8:0c:94:7c:87:52:a4:48:81:
         cb:0e:b2:ec:a2:73:1c:8a:89:fc:0f:c9:53:86:1c:2c:e0:91:
         b4:c4:b2:d4:58:58:b5:d4:85:90:9f:34:13:9b:e6:c3:4c:62:
         aa:ae:c4:31:0c:41:74:79:01:b1:9a:11:d6:0d:21:19:f7:1a:
         50:0b:79:bf:31:52:6a:52:59:e1:a6:4d:3b:4d:cb:6c:0f:fb:
         79:20:5c:46:c7:4c:aa:03:ae:ce:61:bb:71:b8:43:63:1d:2f:
         ba:91:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----