Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/Fn2R4aduOvz0v5nWqXghURrCdDM.roa
File:                     Fn2R4aduOvz0v5nWqXghURrCdDM.roa (raw, json)
Hash identifier:          grOwUpVTDMe2uLcF5LPuu/9NatFX+WcufD3EBIz9Nok=
Subject key identifier:   16:7D:91:E1:A7:6E:3A:FC:F4:BF:99:D6:A9:78:21:51:1A:C2:74:33
Certificate issuer:       /CN=78F09594D587F2039FA47E6563CC5DD5AA00D668
Certificate serial:       05
Authority key identifier: 78:F0:95:94:D5:87:F2:03:9F:A4:7E:65:63:CC:5D:D5:AA:00:D6:68
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ePCVlNWH8gOfpH5lY8xd1aoA1mg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/Fn2R4aduOvz0v5nWqXghURrCdDM.roa
Signing time:             Thu 27 May 2021 05:07:44 +0000
ROA not before:           Thu 27 May 2021 05:07:44 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     56040
IP address blocks:        43.255.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78F09594D587F2039FA47E6563CC5DD5AA00D668
        Validity
            Not Before: May 27 05:07:44 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=167D91E1A76E3AFCF4BF99D6A97821511AC27433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:21:a4:1d:9a:aa:e2:d9:a5:d6:7b:cf:47:
                    7b:35:86:d2:0f:88:67:0d:8a:d4:1d:60:87:04:78:
                    50:96:f5:52:df:74:8c:24:e9:b4:df:c1:08:30:f3:
                    c6:9a:75:61:14:ea:ab:37:cf:67:8d:5e:45:3e:fc:
                    b3:68:72:09:76:13:2b:12:72:7f:cd:02:51:35:e3:
                    66:be:7a:9a:dd:b9:95:60:90:f5:7b:cf:61:e0:42:
                    e3:a3:90:c6:6d:60:50:08:3b:5a:ee:ad:9f:16:7f:
                    91:ad:8c:8a:cb:c3:69:a0:b3:bc:82:67:0d:24:a4:
                    ed:09:2d:19:fb:b5:1f:35:f3:93:12:a5:16:d2:21:
                    20:7e:24:1d:ef:0f:21:b1:d1:34:60:e7:b5:a2:f4:
                    9e:58:4f:15:f2:d9:c6:55:2b:b0:10:2f:dc:05:d7:
                    c1:3b:2d:14:85:f7:ee:ef:0b:dc:9c:c7:c5:a6:62:
                    ca:39:69:4f:c8:bb:2a:ec:c7:c4:a0:57:ff:ca:49:
                    0b:4a:2a:35:04:1c:b4:a4:45:b6:08:c8:d5:bf:fe:
                    4f:f6:e9:61:6c:b7:c8:86:2a:9a:62:bc:66:33:19:
                    1e:49:4e:25:a5:c9:9b:9e:fe:78:e1:57:4c:e9:41:
                    19:4d:f0:1a:af:02:fe:bb:93:2e:13:ea:54:24:03:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7D:91:E1:A7:6E:3A:FC:F4:BF:99:D6:A9:78:21:51:1A:C2:74:33
            X509v3 Authority Key Identifier:
                keyid:78:F0:95:94:D5:87:F2:03:9F:A4:7E:65:63:CC:5D:D5:AA:00:D6:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/ePCVlNWH8gOfpH5lY8xd1aoA1mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ePCVlNWH8gOfpH5lY8xd1aoA1mg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/Fn2R4aduOvz0v5nWqXghURrCdDM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:4e:89:53:81:3c:8d:5c:10:07:17:5f:33:4a:a3:c1:2c:8c:
         4d:e6:7e:7e:71:58:79:0c:14:de:54:8a:b0:ea:59:2b:67:d5:
         f1:e2:a1:98:7f:c5:c0:00:c8:99:51:70:b2:f5:e0:f1:67:69:
         1c:5a:a0:be:85:9a:40:bc:2f:8a:23:99:91:a7:ff:1c:3e:a7:
         b5:6d:5a:20:ff:07:81:c9:b8:46:cb:9b:a6:32:83:4c:ac:4c:
         33:e7:74:21:c9:20:40:84:f6:8d:fa:19:55:74:71:7d:e4:8e:
         92:fb:8e:d3:02:e7:62:56:1d:39:21:a6:e7:a5:ff:47:12:98:
         c7:a5:5f:b6:d9:fd:09:59:7a:06:67:f8:ac:bb:0c:70:c4:66:
         7b:1c:f3:9f:57:a9:23:4d:d8:e4:57:fd:bf:20:94:d4:08:9f:
         7d:a0:74:7c:b3:e1:7e:30:00:fe:eb:fb:67:af:bf:e6:62:01:
         17:16:e8:c5:40:2c:32:4f:d0:1d:3d:76:fb:6e:18:cd:d6:a1:
         c7:4b:f5:1f:e6:0d:20:af:67:a4:21:04:60:ee:fa:eb:6e:53:
         29:95:55:f3:6e:b0:0e:2d:2a:a2:ae:1c:ae:a3:bf:36:e4:cf:
         91:cb:9f:4a:d5:ad:35:6c:e1:3c:b7:eb:b5:af:f7:e1:67:7a:
         41:68:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----