Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/JDFHa6GB6Z4LOqmuDiFqU1fK4Zw.roa
File:                     JDFHa6GB6Z4LOqmuDiFqU1fK4Zw.roa (raw, json)
Hash identifier:          2/dxM9pOlqvHsXNTYt8cUB9Vvd5u1Xky+XRmDIGUjkU=
Subject key identifier:   24:31:47:6B:A1:81:E9:9E:0B:3A:A9:AE:0E:21:6A:53:57:CA:E1:9C
Certificate issuer:       /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial:       06
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/JDFHa6GB6Z4LOqmuDiFqU1fK4Zw.roa
Signing time:             Wed 01 Jun 2022 07:07:33 +0000
ROA not before:           Wed 01 Jun 2022 07:07:33 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     59083
IP address blocks:        2403:1b80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
        Validity
            Not Before: Jun  1 07:07:33 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=2431476BA181E99E0B3AA9AE0E216A5357CAE19C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:2d:35:0a:90:cf:17:bd:c2:8b:2f:35:60:
                    74:16:fb:1f:8e:c6:37:d1:3f:62:19:a8:af:39:d2:
                    3a:d9:5f:a2:d2:df:d8:79:b3:1b:5e:36:ad:6d:e2:
                    73:b2:5d:d6:af:ec:f0:77:d9:21:e9:c4:a9:2a:9b:
                    c0:8d:b5:be:40:39:34:56:1c:90:c1:fb:d6:77:d6:
                    c9:6d:de:f5:77:c3:ea:82:3f:bf:d8:b7:4c:16:bf:
                    9c:a2:99:a7:0f:05:9b:65:b5:27:f5:b7:2d:5d:f7:
                    99:4b:09:45:ef:5b:9b:54:14:38:b9:5f:f8:ac:83:
                    b9:dd:12:39:2d:34:00:e3:a1:b9:bb:35:56:1a:a8:
                    d8:9c:b3:9e:4b:6a:4d:83:a3:d1:e6:e7:db:63:c9:
                    e3:af:34:bb:63:98:ce:8d:38:0b:fe:d5:3e:ec:cb:
                    55:7e:7c:ba:74:85:d2:70:51:f6:19:4d:c7:6d:a9:
                    ea:13:9d:89:02:12:14:5d:8d:b3:55:22:4e:5d:79:
                    98:84:55:56:79:d2:2c:b3:13:0e:4e:b9:36:1a:88:
                    a1:85:73:b4:f4:03:2c:9b:71:be:49:0b:74:39:38:
                    52:e2:d2:e9:68:1b:6b:04:8a:6c:97:81:a2:5d:7e:
                    fc:f4:24:5c:71:3c:7c:87:e4:43:fe:89:71:9c:b9:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:31:47:6B:A1:81:E9:9E:0B:3A:A9:AE:0E:21:6A:53:57:CA:E1:9C
            X509v3 Authority Key Identifier:
                keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/JDFHa6GB6Z4LOqmuDiFqU1fK4Zw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:ea:f3:d7:2c:15:8a:26:a9:d1:97:99:47:8f:13:fd:a2:6b:
         cf:58:08:c9:54:87:69:44:ea:0c:f2:d1:84:c9:c9:09:b8:1e:
         25:76:e6:28:9d:1c:22:6a:c7:4b:84:24:14:f5:00:a2:44:17:
         1c:a2:bf:3e:d0:b1:9f:94:4c:b4:93:3f:11:31:06:27:9e:6b:
         3d:fa:32:14:20:a9:a7:28:9d:87:05:f2:9a:04:18:72:f5:71:
         9c:50:0f:fc:b3:d7:70:ba:49:d5:5a:40:58:00:d5:8a:6f:bd:
         f7:94:9c:c7:c6:e0:a4:84:63:06:40:7b:f9:46:9b:e8:cb:4e:
         6a:0c:6a:a6:5a:a5:5d:c7:60:f5:0d:f3:65:76:89:c2:bd:0b:
         8d:52:fa:28:6d:2b:9e:d8:06:de:d4:b1:80:c6:6a:49:3d:db:
         27:0b:d9:3c:8a:59:7d:2d:9a:01:bb:bc:18:34:05:59:ab:ce:
         7b:38:93:21:dd:36:a0:0a:fa:81:4e:16:13:ea:ef:ca:19:68:
         00:66:36:d0:20:88:ef:77:75:f5:c7:2a:35:88:4d:3b:cf:ed:
         99:f5:ec:a1:5c:86:ec:93:3d:00:84:8c:f5:76:b7:a3:07:ed:
         c3:61:b8:88:36:1b:c2:6d:e9:75:68:aa:d5:f3:14:7f:2a:e1:
         11:6d:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----