Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/7INMjnn2Y3cBawSNnFPb-TCP2tY.roa
File:                     7INMjnn2Y3cBawSNnFPb-TCP2tY.roa (raw, json)
Hash identifier:          PrQevP6wxGba7XC2KleGS6HHH79XPg4iS4VZeMO0en8=
Subject key identifier:   EC:83:4C:8E:79:F6:63:77:01:6B:04:8D:9C:53:DB:F9:30:8F:DA:D6
Certificate issuer:       /CN=018C7BC07F7EC1813FECA82E6EE64ECEB1974DCC
Certificate serial:       06EE
Authority key identifier: 01:8C:7B:C0:7F:7E:C1:81:3F:EC:A8:2E:6E:E6:4E:CE:B1:97:4D:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AYx7wH9-wYE_7KgubuZOzrGXTcw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/7INMjnn2Y3cBawSNnFPb-TCP2tY.roa
Signing time:             Sat 27 Nov 2021 09:18:16 +0000
ROA not before:           Sat 27 Nov 2021 09:18:16 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     63199
IP address blocks:        2400:5280:2000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018C7BC07F7EC1813FECA82E6EE64ECEB1974DCC
        Validity
            Not Before: Nov 27 09:18:16 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=EC834C8E79F66377016B048D9C53DBF9308FDAD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:ea:10:c7:9b:51:1f:01:82:f9:30:34:6b:
                    28:b7:b0:27:00:56:15:af:d3:d4:ce:e6:09:3c:66:
                    be:ce:f2:59:eb:03:5e:da:2c:e4:5a:1d:d0:14:e3:
                    88:47:92:45:61:02:01:d3:4d:77:71:6e:f9:e5:c3:
                    71:00:d2:62:de:4e:27:3c:fa:22:ea:ed:26:63:67:
                    a4:13:4a:40:89:23:9b:c3:bd:7d:52:9d:9d:47:6c:
                    c0:f6:9f:ae:d9:69:96:90:98:63:b7:13:36:22:c8:
                    e6:c7:9d:9d:f7:8b:12:4b:c1:51:d2:d3:45:0d:cb:
                    0e:83:45:19:c8:b3:53:d1:40:ea:1a:c1:2a:38:e7:
                    d6:57:bd:3f:51:04:0d:76:a7:b2:68:86:5b:5d:1b:
                    0f:03:14:70:c4:64:8e:f4:34:93:f0:1b:35:c8:d8:
                    76:24:4d:ca:81:c7:bf:56:ef:bd:32:99:e4:fa:3c:
                    c6:be:46:e0:0d:4c:7d:5e:59:ea:9d:9c:ae:33:0e:
                    5f:87:6e:e8:d8:64:ed:15:f2:00:20:a0:c7:86:e2:
                    c1:8b:68:4b:71:e6:3b:ec:60:09:29:a4:38:cc:fe:
                    77:28:a9:70:35:b5:0d:c2:90:bd:3e:fb:fa:c7:7b:
                    1b:6f:72:83:32:c4:f4:b1:fe:c7:9d:4d:99:31:46:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:83:4C:8E:79:F6:63:77:01:6B:04:8D:9C:53:DB:F9:30:8F:DA:D6
            X509v3 Authority Key Identifier:
                keyid:01:8C:7B:C0:7F:7E:C1:81:3F:EC:A8:2E:6E:E6:4E:CE:B1:97:4D:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/AYx7wH9-wYE_7KgubuZOzrGXTcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/AYx7wH9-wYE_7KgubuZOzrGXTcw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/7INMjnn2Y3cBawSNnFPb-TCP2tY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5280:2000::/38

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:76:7e:81:93:c6:38:d2:76:11:22:63:98:5c:9b:75:1f:
         0b:4b:d3:23:0a:4b:6c:8f:05:1c:4a:86:7a:58:1d:ce:21:f0:
         11:0c:21:d3:3d:d3:fe:aa:33:c5:af:82:19:10:5a:03:e7:75:
         11:b6:cc:24:8b:ab:cd:ee:a2:40:79:87:99:81:49:19:eb:58:
         53:bd:66:f1:19:aa:11:f9:21:7e:1b:c7:8f:a0:e9:71:2f:dc:
         18:c2:4e:da:28:81:1e:66:2a:df:5d:00:8f:9d:fa:f0:0e:c1:
         88:2e:47:17:46:97:a2:8f:7b:ab:51:14:07:17:73:45:e5:b4:
         25:55:b0:e1:05:99:07:ce:8f:29:0e:f7:22:c0:ad:c8:95:36:
         d0:63:0e:e6:61:17:27:7a:3e:94:54:ba:05:eb:9c:3b:9a:d6:
         3a:53:e8:11:d2:64:a6:bf:22:b5:da:51:9a:d9:1d:c0:e0:f1:
         91:af:17:1d:b0:e8:b7:8f:e9:c2:67:ac:de:fd:3f:53:a5:c5:
         58:36:5a:22:b8:1e:ce:9c:c0:60:55:cf:30:d5:78:d5:5b:89:
         e6:ff:19:5f:7e:43:0f:6f:37:3c:47:b8:02:0b:8b:6a:61:6e:
         ed:24:6b:34:b0:4a:51:04:4b:15:93:0c:b4:33:55:0b:05:06:
         74:f6:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----