Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/lHllESHQ3tob0goC7apgTQ4LwwI.roa
File:                     lHllESHQ3tob0goC7apgTQ4LwwI.roa (raw, json)
Hash identifier:          xhuftfw5dy+9PA2sUDR5igcmrykha3nwpLyT/zh/gZQ=
Subject key identifier:   94:79:65:11:21:D0:DE:DA:1B:D2:0A:02:ED:AA:60:4D:0E:0B:C3:02
Certificate issuer:       /CN=194ACC313935AF5433C2B9456D742682F961EABB
Certificate serial:       0D
Authority key identifier: 19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lHllESHQ3tob0goC7apgTQ4LwwI.roa
Signing time:             Thu 27 May 2021 05:02:00 +0000
ROA not before:           Thu 27 May 2021 05:02:00 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     24373
IP address blocks:        2406:1e80::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ACC313935AF5433C2B9456D742682F961EABB
        Validity
            Not Before: May 27 05:02:00 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=9479651121D0DEDA1BD20A02EDAA604D0E0BC302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:27:d1:d9:56:1c:88:76:36:f8:29:20:d2:
                    d2:d2:f3:34:20:e7:f6:2d:5e:50:7a:37:cd:4d:87:
                    d7:28:28:b4:40:80:16:0c:98:a6:b0:84:7a:4d:d3:
                    59:44:61:cd:ab:e7:9f:c1:5a:09:3f:f3:9b:ef:14:
                    2a:73:ea:71:b0:9d:ef:9e:24:a0:0c:42:79:8b:90:
                    7a:8a:3d:34:4b:e9:3c:a4:4e:18:03:62:df:5e:64:
                    7a:37:29:b6:b7:7b:2a:ee:e4:db:b8:27:71:39:53:
                    f9:61:1e:56:ca:dc:2f:d1:6e:4e:c5:68:fd:8f:f6:
                    73:01:c3:12:42:b3:4c:08:64:38:9d:5f:78:19:fb:
                    f3:0b:63:c3:af:e2:cb:52:fa:73:70:6c:bd:6d:6b:
                    98:db:70:ff:e8:e2:58:8e:25:1e:5e:f2:9e:ee:79:
                    47:e1:f9:c9:ee:f8:4c:fa:64:a1:e0:34:ef:23:5e:
                    8d:67:cb:b6:12:96:b7:69:95:00:48:74:d5:55:03:
                    78:c9:b8:25:8c:a6:42:13:54:cf:77:ea:df:7c:ae:
                    c9:26:53:6e:b7:f3:cb:05:e6:1b:ac:d5:0a:46:8e:
                    0a:4b:02:18:ab:52:1b:a6:42:7c:7a:4d:e1:f9:d1:
                    e0:de:10:14:8b:22:db:8a:34:08:1b:0d:25:d8:b7:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:79:65:11:21:D0:DE:DA:1B:D2:0A:02:ED:AA:60:4D:0E:0B:C3:02
            X509v3 Authority Key Identifier:
                keyid:19:4A:CC:31:39:35:AF:54:33:C2:B9:45:6D:74:26:82:F9:61:EA:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/GUrMMTk1r1QzwrlFbXQmgvlh6rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/GUrMMTk1r1QzwrlFbXQmgvlh6rs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/lHllESHQ3tob0goC7apgTQ4LwwI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:1e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:6b:3e:c8:2a:a8:12:00:81:57:7b:cd:40:f0:02:e2:5c:bc:
         48:f6:5c:c2:e0:59:a8:8b:5f:e1:13:ab:76:a0:dd:4c:c1:10:
         78:76:6f:17:06:d6:14:d3:94:c1:c5:d2:21:2f:f5:7e:5d:96:
         d5:2a:29:6a:40:48:c8:09:a9:2e:69:f0:68:02:0b:ea:e9:48:
         d3:54:e8:4e:1c:05:74:df:46:34:53:b7:47:c6:24:7b:ce:d8:
         39:ea:8f:cc:94:bc:9f:0b:6e:11:70:69:8b:98:26:06:8c:05:
         12:de:62:df:ed:73:57:20:f5:a3:dc:62:f5:6f:41:6e:69:52:
         29:ca:6e:de:33:87:6c:05:fa:31:ff:5a:b9:5f:43:9d:17:0a:
         de:92:71:5f:dd:e2:d7:11:45:a9:be:c6:4d:a3:a2:94:20:ac:
         2c:28:b8:fb:c2:e1:74:a3:40:d4:ea:b0:13:8e:20:78:2d:17:
         ad:66:3f:45:84:f2:a5:bb:e3:08:8a:02:60:cd:5d:42:13:11:
         94:75:41:b8:eb:2b:01:43:ca:ea:26:d9:25:97:d7:47:31:d3:
         3f:ec:49:ab:fa:37:d3:f3:08:02:bd:ba:4c:66:48:44:13:0f:
         70:8d:2d:44:29:9f:13:30:d4:72:b9:2f:4f:66:bf:04:33:37:
         0c:4a:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----