Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/j9IXs3VR9D2UBlNF03LO6Hnm5yA.roa
File:                     j9IXs3VR9D2UBlNF03LO6Hnm5yA.roa (raw, json)
Hash identifier:          ZHt0ogFM3K/uhJrDg02jFqn8ljW4IKs/d1ovf9a6XZU=
Subject key identifier:   8F:D2:17:B3:75:51:F4:3D:94:06:53:45:D3:72:CE:E8:79:E6:E7:20
Certificate issuer:       /CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Certificate serial:       0697
Authority key identifier: 7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/j9IXs3VR9D2UBlNF03LO6Hnm5yA.roa
Signing time:             Mon 25 Apr 2022 04:08:41 +0000
ROA not before:           Mon 25 Apr 2022 04:08:41 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     10753
IP address blocks:        101.49.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
        Validity
            Not Before: Apr 25 04:08:41 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=8FD217B37551F43D94065345D372CEE879E6E720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:b9:8f:eb:d2:39:02:3a:a1:61:7c:f6:bd:
                    7c:b9:dd:93:01:6a:7c:49:86:9f:31:51:df:06:0a:
                    95:9d:52:a4:f9:ff:95:cc:4d:3f:54:98:ac:0d:75:
                    db:56:12:51:53:8a:cd:24:14:5d:22:25:62:21:8d:
                    13:13:3e:9d:9c:7e:6e:cd:cf:5c:29:f5:1a:7f:82:
                    21:18:b5:ca:ec:cd:4e:94:ca:fd:93:a7:9f:44:7e:
                    59:eb:21:fb:46:e1:10:cb:8a:05:dc:f9:e4:1e:cd:
                    b7:59:15:ef:9f:90:44:b8:6a:db:b1:8f:1f:62:74:
                    cd:e3:ed:8d:17:39:b0:f1:e6:80:1d:44:e7:8e:8e:
                    8b:ea:41:c7:34:c6:6e:39:d7:1e:5f:02:da:8c:e4:
                    b1:82:0d:d8:0b:3a:84:51:26:97:6c:cf:37:28:e3:
                    6d:e6:29:d0:2d:aa:03:78:d4:c7:01:01:88:d4:c7:
                    8e:99:62:e0:02:0a:62:53:ab:1b:1f:a9:b9:91:d4:
                    ef:e0:40:f2:da:95:b6:d0:31:69:13:8a:9d:df:9d:
                    93:dd:83:db:6d:88:c1:9b:87:7f:d6:c1:39:bd:22:
                    a9:51:fb:01:cf:c7:c6:ab:b2:a4:03:06:62:8b:9a:
                    a5:31:ba:3b:d4:da:d7:c2:d8:ef:ff:09:46:69:b4:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D2:17:B3:75:51:F4:3D:94:06:53:45:D3:72:CE:E8:79:E6:E7:20
            X509v3 Authority Key Identifier:
                keyid:7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/fxbsYdIUp0ANAGShh6E9zMHnhUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/j9IXs3VR9D2UBlNF03LO6Hnm5yA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:05:40:f0:6b:ca:77:c2:c9:4a:96:53:90:2e:41:62:57:a1:
         f4:76:a1:d7:8c:d3:77:ef:9e:fe:ec:9c:ea:d2:9c:c7:7e:a0:
         57:cb:a8:fd:02:40:6f:f4:83:2e:10:df:98:65:13:91:a5:a5:
         eb:1f:b7:a5:a1:8b:7c:cb:2f:d1:a2:14:39:13:1a:0b:5c:9a:
         2e:0a:ae:b2:d2:d6:5b:2c:1e:02:36:ba:33:cb:6c:d3:83:d4:
         e1:61:d1:2f:10:e9:c4:20:6e:6b:a7:ad:5d:9e:aa:dc:e7:66:
         99:a9:0a:57:ae:42:81:04:62:54:71:fe:cb:4a:33:32:79:40:
         a9:41:e8:17:21:d5:bb:49:99:b2:7e:38:fd:8d:0d:38:ef:33:
         73:2f:c9:e9:fa:60:8a:54:c6:19:14:d7:a6:b7:91:88:49:6a:
         93:d9:d3:6c:3c:75:e0:73:b5:d3:40:d0:67:60:f0:7f:d9:59:
         ed:62:36:2f:28:e3:41:98:fb:03:bb:cc:ae:b4:da:93:b6:4d:
         a3:5e:5b:5c:00:1b:47:1a:be:8c:c2:aa:ca:25:c5:7c:ad:50:
         7c:dd:41:fa:59:a4:b3:58:95:86:e1:ff:2e:35:7c:89:2d:0e:
         88:1f:f4:d9:1e:ba:15:44:a2:74:04:3b:a9:90:1b:24:03:df:
         ff:91:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----