Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/654/q5_Ljdgqcw-ZNKTxuFv5X8r0IYc.roa
File:                     q5_Ljdgqcw-ZNKTxuFv5X8r0IYc.roa (raw, json)
Hash identifier:          UXD7dyt2khSThgvKpbzO5WF6aFHodlxSdYi95SNv5FQ=
Subject key identifier:   AB:9F:CB:8D:D8:2A:73:0F:99:34:A4:F1:B8:5B:F9:5F:CA:F4:21:87
Certificate issuer:       /CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
Certificate serial:       04
Authority key identifier: DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/q5_Ljdgqcw-ZNKTxuFv5X8r0IYc.roa
Signing time:             Wed 01 Jun 2022 07:08:09 +0000
ROA not before:           Wed 01 Jun 2022 07:08:09 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     63199
IP address blocks:        2400:5280:2000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA993FE5C04FF9F22C5262630BEC37F5B3A78285
        Validity
            Not Before: Jun  1 07:08:09 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=AB9FCB8DD82A730F9934A4F1B85BF95FCAF42187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f6:da:ea:c8:79:7f:b8:12:e4:9a:b6:ad:a0:
                    76:67:a8:d0:17:fe:f1:2f:c1:b2:80:e0:19:93:06:
                    91:96:33:ee:7f:86:16:71:4d:0c:c7:30:46:f8:1a:
                    24:9c:5c:48:26:e6:15:c2:c8:17:3f:8e:2b:c0:e6:
                    0d:a9:c4:9e:37:50:5b:a0:ca:39:83:83:b7:e0:93:
                    51:31:d8:81:89:db:65:4f:28:d2:d7:24:97:fc:31:
                    21:53:3a:22:42:5b:eb:4d:e1:b3:a1:9d:e0:9f:65:
                    28:9c:d7:f2:9e:f8:d3:4f:c1:b5:fc:c5:be:df:cb:
                    39:e0:22:2d:3f:a4:b9:0e:0f:cd:56:3c:22:ea:bc:
                    4e:1c:7b:b6:1d:81:9a:d1:60:f7:5c:79:04:b0:95:
                    96:51:da:3f:5b:a8:f8:19:a8:a9:00:29:ec:28:51:
                    1c:64:aa:1b:4a:8e:5e:da:d6:14:84:54:33:ba:7a:
                    93:a0:07:3a:ae:da:e3:16:a7:64:06:8a:4f:3e:c5:
                    c7:99:94:49:e5:51:c1:26:d3:cb:bc:58:16:19:ca:
                    73:da:71:15:65:be:f5:8d:9c:60:f2:2d:d1:b4:e5:
                    38:6a:5a:64:d2:cd:eb:1a:a3:ad:87:b5:51:cf:0f:
                    11:d5:df:71:33:d0:f5:cf:b2:b7:8d:d4:2e:30:37:
                    90:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9F:CB:8D:D8:2A:73:0F:99:34:A4:F1:B8:5B:F9:5F:CA:F4:21:87
            X509v3 Authority Key Identifier:
                keyid:DA:99:3F:E5:C0:4F:F9:F2:2C:52:62:63:0B:EC:37:F5:B3:A7:82:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/2pk_5cBP-fIsUmJjC-w39bOngoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2pk_5cBP-fIsUmJjC-w39bOngoU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/654/q5_Ljdgqcw-ZNKTxuFv5X8r0IYc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5280:2000::/38

    Signature Algorithm: sha256WithRSAEncryption
         c3:a7:76:44:e5:ac:ce:3f:40:bf:1b:6d:98:ec:11:b0:fc:2f:
         77:66:bd:90:e8:ff:3a:d6:1a:e6:42:33:02:51:19:20:d3:4f:
         56:77:ba:fd:67:54:19:c7:f6:20:a7:f6:91:97:0b:44:17:62:
         08:f9:7c:d1:88:51:62:81:b2:7b:30:2d:f7:3c:fb:38:c3:36:
         1a:a2:65:06:13:fe:a1:85:6f:fb:cc:8f:5e:7f:50:2d:ac:4d:
         98:60:31:44:50:8a:36:32:97:c1:9f:1b:70:ee:8d:e9:27:48:
         e5:9b:10:2d:b1:4d:48:4c:16:33:b0:f4:ff:7b:0e:c0:ac:b1:
         46:ed:47:72:84:84:90:21:91:e5:2a:64:43:25:57:6f:56:a0:
         00:ea:04:98:02:30:b4:86:c9:16:b5:7b:b7:ec:d6:da:83:0c:
         e2:4b:27:da:64:7c:b8:5a:99:6b:09:f7:61:8b:7e:26:ca:00:
         41:f2:80:11:55:36:00:fe:82:3c:cf:a0:77:97:dc:e5:6d:6f:
         e7:48:5b:ba:38:1d:f0:5b:40:37:9b:a3:25:5a:dc:a3:54:08:
         36:dc:ab:f3:e1:f0:55:fa:90:d8:51:eb:29:a3:81:78:37:c8:
         fe:01:c1:dd:62:b9:7a:d8:7d:82:dd:48:98:b2:ef:60:f4:d9:
         ad:ac:7f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----