Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/iSVN_9MSDbyoXPDAHZEnFNVCzq8.roa
File:                     iSVN_9MSDbyoXPDAHZEnFNVCzq8.roa (raw, json)
Hash identifier:          UXirSfDfovIjDoJCjsCXhOJJr8h7Prb+mEJikTA27u4=
Subject key identifier:   89:25:4D:FF:D3:12:0D:BC:A8:5C:F0:C0:1D:91:27:14:D5:42:CE:AF
Certificate issuer:       /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial:       08
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/iSVN_9MSDbyoXPDAHZEnFNVCzq8.roa
Signing time:             Thu 27 May 2021 05:01:58 +0000
ROA not before:           Thu 27 May 2021 05:01:58 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     59083
IP address blocks:        103.10.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
        Validity
            Not Before: May 27 05:01:58 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=89254DFFD3120DBCA85CF0C01D912714D542CEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:8a:a1:4d:66:08:b1:de:72:70:ad:e5:ca:
                    b5:56:83:6d:96:0d:bb:37:00:28:10:93:a9:56:2d:
                    39:7a:30:e5:d0:39:48:7d:22:ed:93:01:96:45:2a:
                    f5:93:e4:15:74:63:31:61:02:8b:ab:c9:03:ce:ed:
                    b0:5e:96:a6:ae:ab:d2:ed:59:fa:f3:d8:ce:8b:47:
                    db:a9:e7:fc:2b:2b:87:76:44:f0:d1:35:c3:95:ed:
                    fa:4d:4f:86:f0:be:28:d4:56:fa:8f:0d:21:5f:94:
                    aa:bc:b9:12:a4:c4:7a:c3:a1:c2:c1:09:b7:77:b3:
                    07:d0:6c:19:ef:3a:e1:f8:aa:3d:b3:92:eb:33:e6:
                    45:4a:21:66:11:c1:0e:44:f5:37:f0:3a:82:2f:3e:
                    31:bc:d3:4b:62:4c:28:7d:62:db:0d:48:cd:97:34:
                    ac:18:5a:30:9e:15:a0:ab:95:3f:1a:07:ff:63:83:
                    a8:f9:cf:bb:43:b8:47:8e:b7:c5:fa:01:78:13:69:
                    69:7a:de:13:a0:59:39:a7:ff:f3:74:8f:58:b6:87:
                    b5:96:8b:9c:6c:41:7e:82:31:a9:b8:a3:d6:74:c2:
                    f0:26:6f:30:f6:ef:47:1c:ea:44:e5:f7:83:91:36:
                    dc:1b:68:f7:9a:90:75:0a:a4:64:c2:fd:cf:65:19:
                    33:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:25:4D:FF:D3:12:0D:BC:A8:5C:F0:C0:1D:91:27:14:D5:42:CE:AF
            X509v3 Authority Key Identifier:
                keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/iSVN_9MSDbyoXPDAHZEnFNVCzq8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:b4:32:c7:0b:20:a8:94:70:df:1a:d5:6b:02:db:d4:7b:dc:
         fd:3b:da:6c:cd:bc:ca:44:30:7b:8c:72:18:62:8d:f9:35:ee:
         7b:5d:72:86:aa:91:68:9a:ab:35:f0:e2:53:dc:07:b2:b2:af:
         c2:c8:22:9e:2e:26:2a:07:a7:8f:a5:6b:7d:3c:f6:02:fd:8d:
         c4:ee:69:df:16:ee:d0:5c:79:8e:52:1c:91:9f:80:6c:f7:cc:
         a6:1e:11:bb:6b:d6:da:30:79:96:d5:94:9d:50:b0:b7:de:11:
         f8:c2:50:1c:9f:d5:0d:91:f6:bc:d4:65:d6:9b:c6:7f:0a:cc:
         d2:05:87:1f:53:7e:50:ac:1e:dc:54:25:c1:01:bd:a5:26:f5:
         6a:32:52:ef:7d:2d:42:b2:73:78:43:1b:1d:b9:0b:be:7c:86:
         0b:75:e9:41:09:19:8b:69:d1:40:04:39:55:33:d7:69:64:ba:
         3b:39:e2:0f:ec:9a:3c:a8:f4:d2:c9:41:78:aa:b5:e0:4a:76:
         db:9d:8e:3d:00:c0:e4:af:ea:56:2a:b1:77:53:a4:7c:c8:51:
         d6:08:80:6f:30:f3:73:a3:43:2d:12:c7:8d:6a:e8:9f:06:90:
         2f:95:cb:a5:dd:ee:54:53:cb:30:78:06:c6:8c:b8:9b:b2:82:
         51:96:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----