Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/756/C2LZ1x7pGGKmZBuuB5K7jADAFBA.roa
File:                     C2LZ1x7pGGKmZBuuB5K7jADAFBA.roa (raw, json)
Hash identifier:          wQT/rLc2lHjELrXyz6VSSq8kFoo0jCvKai6p4VuAbU8=
Subject key identifier:   0B:62:D9:D7:1E:E9:18:62:A6:64:1B:AE:07:92:BB:8C:00:C0:14:10
Certificate issuer:       /CN=5D5275087E81EF56497D62415B79989C9363C20F
Certificate serial:       06EF
Authority key identifier: 5D:52:75:08:7E:81:EF:56:49:7D:62:41:5B:79:98:9C:93:63:C2:0F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/C2LZ1x7pGGKmZBuuB5K7jADAFBA.roa
Signing time:             Wed 15 Dec 2021 07:23:17 +0000
ROA not before:           Wed 15 Dec 2021 07:23:17 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     398704
IP address blocks:        103.232.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775 (0x6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D5275087E81EF56497D62415B79989C9363C20F
        Validity
            Not Before: Dec 15 07:23:17 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=0B62D9D71EE91862A6641BAE0792BB8C00C01410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:1e:79:3e:14:30:28:02:c1:f7:14:f8:32:
                    c4:8a:aa:94:e5:56:d3:a5:c7:90:3a:83:e3:6a:a4:
                    40:40:c6:7b:7b:ec:60:d7:1f:42:36:4d:7c:36:0c:
                    67:f1:10:2a:9a:f9:eb:d6:74:f7:14:99:48:d6:92:
                    6f:32:45:62:d5:8f:5e:ef:4b:d2:8a:ef:16:ef:ba:
                    cf:c1:7b:d0:81:b5:aa:a5:f1:f1:d7:5c:6d:2e:4e:
                    ea:65:ed:f4:4d:fd:93:72:ea:c1:6c:ef:66:7e:16:
                    ab:27:64:65:3f:15:5d:7f:19:ef:c2:02:88:63:63:
                    64:44:f6:a1:4f:77:42:82:81:49:39:c0:73:97:42:
                    d9:0c:1d:31:73:bf:9a:dd:99:bc:90:e3:b6:fe:f8:
                    24:fd:78:b7:35:eb:a6:2c:c2:06:c8:a5:99:5d:00:
                    2b:e8:f8:a6:55:e8:07:25:30:c9:ca:22:cc:66:dc:
                    21:4a:bb:6e:e6:31:7c:a5:65:88:ba:7f:f8:b0:66:
                    7a:f1:05:ee:3e:12:f4:5a:5b:da:15:09:0d:62:02:
                    ae:3a:cb:ff:47:aa:8f:d9:b3:5c:e2:81:18:36:fb:
                    b3:01:66:ab:aa:6a:84:53:49:eb:54:4d:79:4c:39:
                    7b:1e:c3:46:d8:a9:53:09:0f:03:d9:f4:50:ac:7c:
                    b3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:62:D9:D7:1E:E9:18:62:A6:64:1B:AE:07:92:BB:8C:00:C0:14:10
            X509v3 Authority Key Identifier:
                keyid:5D:52:75:08:7E:81:EF:56:49:7D:62:41:5B:79:98:9C:93:63:C2:0F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/XVJ1CH6B71ZJfWJBW3mYnJNjwg8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/756/C2LZ1x7pGGKmZBuuB5K7jADAFBA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:ea:6d:a6:cd:e4:e2:f4:06:e8:0c:09:4d:47:0c:53:38:
         e0:b0:24:33:8d:fe:72:25:1c:9f:6e:3b:1b:25:69:44:30:88:
         ca:68:88:48:e6:5b:3c:c9:f7:8c:b9:71:ea:e2:e4:6a:05:12:
         fd:fb:7d:a5:65:0e:d2:08:66:7f:b2:b4:57:d3:9a:3f:7b:6b:
         3b:8c:11:01:e2:95:96:21:5c:b8:c8:bc:1c:49:2e:9a:dc:23:
         7b:dc:1d:31:7c:d1:53:60:d8:59:e0:c3:df:e8:d8:5b:49:21:
         d0:61:49:17:16:2a:e4:bf:84:01:30:9b:34:e4:c0:3e:37:aa:
         f2:4e:5e:d6:fe:e8:6c:6b:ef:ce:0c:77:5f:55:45:fe:8f:fa:
         52:a6:15:f8:03:da:bc:6b:67:38:cb:7b:e0:e3:75:78:51:0e:
         a5:85:eb:e4:3b:bc:7d:3e:f3:ce:be:70:92:75:66:f2:e3:f6:
         4d:9f:9d:09:00:d0:03:55:7b:6e:1c:ea:a6:d4:86:4c:4d:ee:
         67:9d:cf:e9:15:b1:8b:55:48:8d:2e:6c:ac:11:90:72:bf:46:
         5e:82:66:db:4e:60:61:0d:80:4e:56:a4:43:12:e1:8c:03:77:
         ec:83:9e:dc:90:1d:92:df:fb:56:5f:e6:63:a9:1f:b0:3b:37:
         14:21:15:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----