Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/G3mFqriv6TC1S2oXUjcV9AzW1sg.roa
File:                     G3mFqriv6TC1S2oXUjcV9AzW1sg.roa (raw, json)
Hash identifier:          TIcE1k4eRH46SFxpon2/ZLmhRmYRs+qUCsGUQlVUZmg=
Subject key identifier:   1B:79:85:AA:B8:AF:E9:30:B5:4B:6A:17:52:37:15:F4:0C:D6:D6:C8
Certificate issuer:       /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial:       06
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/G3mFqriv6TC1S2oXUjcV9AzW1sg.roa
Signing time:             Thu 27 May 2021 05:01:57 +0000
ROA not before:           Thu 27 May 2021 05:01:57 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     59083
IP address blocks:        2403:1b80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
        Validity
            Not Before: May 27 05:01:57 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=1B7985AAB8AFE930B54B6A17523715F40CD6D6C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:c3:e7:6a:4d:24:52:26:20:9f:9a:b5:eb:
                    0a:dc:3b:f2:41:5a:e6:1b:70:0f:2e:fb:d7:63:42:
                    02:95:8a:a8:54:d6:de:8e:4c:2a:3a:12:78:e7:79:
                    f2:ca:b7:dd:38:25:23:0f:04:09:69:24:14:1c:b9:
                    83:e4:cf:6f:55:e8:f0:11:cf:94:e9:0c:9f:96:17:
                    6f:1d:19:66:40:dc:79:e8:71:78:51:27:c5:a4:25:
                    70:fc:58:a3:4b:41:45:ba:b8:88:32:07:e7:a4:d1:
                    09:92:24:84:f8:88:23:af:2e:26:a8:d8:ce:00:63:
                    0a:45:18:78:e2:8e:a6:5e:63:75:57:24:5d:fa:bf:
                    35:c9:d0:4b:f4:7c:7f:37:7c:86:d9:5f:50:8e:27:
                    22:d7:af:1b:75:c4:87:87:48:a2:ba:c5:96:66:8d:
                    ac:a1:3d:a6:a2:cd:f3:43:9f:66:e2:c2:b2:b2:57:
                    fd:99:1a:54:77:cf:05:82:61:dc:d9:b2:e5:7c:7b:
                    1c:0f:a8:43:f9:c5:e3:00:46:b2:d6:88:12:27:0d:
                    33:48:50:18:ab:ab:98:eb:d2:c6:4e:ff:e3:ad:ac:
                    16:32:77:9e:17:03:b5:f1:45:63:0e:e7:e7:0a:3a:
                    91:f0:44:5e:b1:15:b5:ca:ff:eb:27:b6:b9:f7:8c:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:79:85:AA:B8:AF:E9:30:B5:4B:6A:17:52:37:15:F4:0C:D6:D6:C8
            X509v3 Authority Key Identifier:
                keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/G3mFqriv6TC1S2oXUjcV9AzW1sg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:73:8f:0a:99:5f:05:52:ce:6b:41:a2:d1:d8:17:72:36:44:
         7d:76:6e:70:e1:36:a1:7c:89:92:71:f2:72:52:f2:82:dd:55:
         18:8c:41:b1:d4:37:04:1b:c3:3e:3b:30:9a:33:0e:e6:1d:2a:
         5d:6f:f7:61:dc:e7:d3:60:f3:15:0f:df:e8:cf:60:9b:57:10:
         6f:16:5f:ba:31:8b:ff:83:99:f9:e1:c0:b9:7c:43:13:f7:86:
         6b:75:13:0f:61:25:49:9e:1b:7f:05:c7:42:6d:64:6a:eb:a7:
         c3:33:fa:1d:44:86:0b:77:08:c5:20:87:76:9a:a1:df:23:84:
         a4:05:9f:01:ba:75:38:72:6c:d8:5d:9f:09:85:96:24:eb:f7:
         79:f9:83:1d:49:91:45:14:c6:c5:0e:be:a6:99:5e:96:4e:8f:
         f1:8d:b1:38:0f:e1:af:ce:f0:bd:20:2a:88:90:a4:9f:38:a4:
         55:36:07:03:02:ca:d2:cf:de:0b:66:c6:13:c5:e8:82:38:09:
         50:d0:65:8d:2c:54:3f:fc:89:b6:39:e5:fe:52:7c:f8:41:6d:
         de:26:02:b9:a5:01:e0:89:b7:26:d9:23:1e:93:ad:2b:23:76:
         5f:ae:ee:c1:78:57:cd:00:2b:a5:89:b0:20:03:96:7e:a8:ff:
         be:9d:5c:a5
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOTRB
Q0MzMTM5MzVBRjU0MzNDMkI5NDU2RDc0MjY4MkY5NjFFQUJCMB4XDTIxMDUyNzA1
MDE1N1oXDTIyMDUyNzA0NTk1MlowMzExMC8GA1UEAxMoMUI3OTg1QUFCOEFGRTkz
MEI1NEI2QTE3NTIzNzE1RjQwQ0Q2RDZDODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ17w+dqTSRSJiCfmrXrCtw78kFa5htwDy7712NCApWKqFTW3o5M
KjoSeOd58sq33TglIw8ECWkkFBy5g+TPb1Xo8BHPlOkMn5YXbx0ZZkDceehxeFEn
xaQlcPxYo0tBRbq4iDIH56TRCZIkhPiII68uJqjYzgBjCkUYeOKOpl5jdVckXfq/
NcnQS/R8fzd8htlfUI4nItevG3XEh4dIorrFlmaNrKE9pqLN80OfZuLCsrJX/Zka
VHfPBYJh3Nmy5Xx7HA+oQ/nF4wBGstaIEicNM0hQGKurmOvSxk7/462sFjJ3nhcD
tfFFYw7n5wo6kfBEXrEVtcr/6ye2ufeMCYkCAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBQbeYWquK/pMLVLahdSNxX0DNbWyDAfBgNVHSMEGDAWgBQZSswxOTWvVDPCuUVt
dCaC+WHquzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Nzcv
R1VyTU1UazFyMVF6d3JsRmJYUW1ndmxoNnJzLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9HVXJNTVRrMXIxUXp3cmxGYlhRbWd2bGg2cnMuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81NzcvRzNtRnFyaXY2VEMxUzJv
WFVqY1Y5QXpXMXNnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACQDG4AAADANBgkqhkiG9w0BAQsFAAOCAQEASXOPCplfBVLOa0Gi0dgXcjZEfXZu
cOE2oXyJknHyclLygt1VGIxBsdQ3BBvDPjswmjMO5h0qXW/3Ydzn02DzFQ/f6M9g
m1cQbxZfujGL/4OZ+eHAuXxDE/eGa3UTD2ElSZ4bfwXHQm1kauunwzP6HUSGC3cI
xSCHdpqh3yOEpAWfAbp1OHJs2F2fCYWWJOv3efmDHUmRRRTGxQ6+pplelk6P8Y2x
OA/hr87wvSAqiJCknzikVTYHAwLK0s/eC2bGE8XogjgJUNBljSxUP/yJtjnl/lJ8
+EFt3iYCuaUB4Im3JtkjHpOtKyN2X67uwXhXzQArpYmwIAOWfqj/vp1cpQ==
-----END CERTIFICATE-----