Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/AsqEr4ClYtrt8k0qDz2U55a23XQ.roa
File:                     AsqEr4ClYtrt8k0qDz2U55a23XQ.roa (raw, json)
Hash identifier:          TsXS4Rh1sznQevZ8KcDWnaP80gSd08lJpmCgVi2YWDY=
Subject key identifier:   02:CA:84:AF:80:A5:62:DA:ED:F2:4D:2A:0F:3D:94:E7:96:B6:DD:74
Certificate issuer:       /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial:       04A2
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/AsqEr4ClYtrt8k0qDz2U55a23XQ.roa
Signing time:             Tue 30 Nov 2021 04:41:43 +0000
ROA not before:           Tue 30 Nov 2021 04:41:43 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     4811
IP address blocks:        2401:3480:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
        Validity
            Not Before: Nov 30 04:41:43 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=02CA84AF80A562DAEDF24D2A0F3D94E796B6DD74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8d:fd:8c:d4:6d:a8:b3:36:94:67:53:36:4d:
                    59:e8:4c:5c:70:2a:55:35:95:fc:ec:a5:34:74:f4:
                    13:59:97:48:79:bb:54:f9:4e:d0:71:e8:41:db:dc:
                    45:7f:95:45:09:55:0f:a2:92:95:19:b6:92:e7:61:
                    14:36:c7:65:ed:10:f4:a5:87:76:a1:5b:19:31:02:
                    c5:30:3e:41:a0:ef:42:bf:57:69:5d:04:e0:6e:33:
                    ae:fc:60:10:d2:b5:07:89:81:43:56:2b:b6:5e:fa:
                    ec:9f:f1:9a:dc:76:5f:1e:05:34:51:b9:4f:b1:af:
                    49:36:21:53:61:0b:08:39:5c:05:d1:62:e0:f7:9c:
                    5e:4c:27:28:0f:34:b0:9a:da:e6:90:9a:06:07:00:
                    c4:0a:01:d7:8d:fc:2e:fa:af:bc:ad:69:f9:47:c7:
                    c2:43:26:33:81:ce:6e:bb:fe:5e:a8:ba:92:5f:55:
                    e3:aa:06:0c:9d:cf:9c:e9:ce:e2:57:dd:e1:a0:09:
                    db:b3:61:0f:89:fc:b5:9d:f5:60:44:89:8b:7c:d8:
                    48:f5:48:d3:c1:53:3a:df:f8:68:9f:11:f9:b9:6c:
                    c9:7f:69:01:e7:1a:d8:8e:bd:78:45:50:9d:74:88:
                    0e:c6:36:27:20:54:ed:8b:c4:eb:79:92:b0:88:9e:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CA:84:AF:80:A5:62:DA:ED:F2:4D:2A:0F:3D:94:E7:96:B6:DD:74
            X509v3 Authority Key Identifier:
                keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/AsqEr4ClYtrt8k0qDz2U55a23XQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3480:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:4e:82:d2:fe:1f:e1:79:f7:06:fc:43:94:1b:d5:29:bc:f7:
         da:9b:3a:15:03:23:69:d0:eb:60:a4:65:f1:b2:f7:70:b5:50:
         10:cd:de:c0:ca:c8:21:2e:69:2e:ac:58:14:50:41:b9:87:fc:
         f7:97:8b:85:ed:38:78:52:a5:2a:ad:21:4c:e6:c1:51:c9:91:
         7d:32:a3:82:70:9c:ac:1d:83:ec:42:1c:91:ac:a7:94:e8:ec:
         bf:63:8d:f3:00:72:69:01:0e:bc:0a:e7:f8:05:40:d3:3d:76:
         26:5a:dc:3e:6e:e7:49:4a:67:13:f5:9d:22:25:ab:13:3b:58:
         9c:ae:a0:04:66:ea:55:6e:bc:46:7e:62:d6:ca:d9:0e:ed:c2:
         2b:90:c6:93:c8:45:04:ed:47:7f:4d:e1:6f:0b:3d:54:21:98:
         8a:1a:e3:78:15:51:28:5a:eb:46:30:0b:f1:e2:1e:1a:78:59:
         32:26:46:89:06:71:52:eb:07:b9:c5:f4:4a:f2:7c:a7:04:9b:
         e4:20:de:d3:4e:f6:23:0e:98:22:d6:bb:bc:a3:11:6b:78:d0:
         7d:5e:87:e1:e7:dd:c8:e2:f6:05:cd:d5:46:90:ec:0d:ba:26:
         06:fa:e0:0e:0b:b8:14:53:00:d0:5f:f6:ef:8d:90:ab:89:10:
         cf:68:59:11
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTVE
N0MxQjBDMjk4RUQxODMzNzFDOURGQTQ5RDVCNUZDRERFOTg0RjAeFw0yMTExMzAw
NDQxNDNaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKDAyQ0E4NEFGODBBNTYy
REFFREYyNEQyQTBGM0Q5NEU3OTZCNkRENzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsjf2M1G2oszaUZ1M2TVnoTFxwKlU1lfzspTR09BNZl0h5u1T5
TtBx6EHb3EV/lUUJVQ+ikpUZtpLnYRQ2x2XtEPSlh3ahWxkxAsUwPkGg70K/V2ld
BOBuM678YBDStQeJgUNWK7Ze+uyf8Zrcdl8eBTRRuU+xr0k2IVNhCwg5XAXRYuD3
nF5MJygPNLCa2uaQmgYHAMQKAdeN/C76r7ytaflHx8JDJjOBzm67/l6oupJfVeOq
Bgydz5zpzuJX3eGgCduzYQ+J/LWd9WBEiYt82Ej1SNPBUzrf+GifEfm5bMl/aQHn
GtiOvXhFUJ10iA7GNicgVO2LxOt5krCInuXPAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUAsqEr4ClYtrt8k0qDz2U55a23XQwHwYDVR0jBBgwFoAU5dfBsMKY7Rgzccnf
pJ1bX83emE8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3
LzVkZkJzTUtZN1JnemNjbmZwSjFiWDgzZW1FOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNWRmQnNNS1k3Umd6Y2NuZnBKMWJYODNlbUU4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L0FzcUVyNENsWXRydDhr
MHFEejJVNTVhMjNYUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAkATSAIAAwDQYJKoZIhvcNAQELBQADggEBAKtOgtL+H+F59wb8Q5Qb1Sm899qb
OhUDI2nQ62CkZfGy93C1UBDN3sDKyCEuaS6sWBRQQbmH/PeXi4XtOHhSpSqtIUzm
wVHJkX0yo4JwnKwdg+xCHJGsp5To7L9jjfMAcmkBDrwK5/gFQNM9diZa3D5u50lK
ZxP1nSIlqxM7WJyuoARm6lVuvEZ+YtbK2Q7twiuQxpPIRQTtR39N4W8LPVQhmIoa
43gVUSha60YwC/HiHhp4WTImRokGcVLrB7nF9EryfKcEm+Qg3tNO9iMOmCLWu7yj
EWt40H1eh+Hn3cji9gXN1UaQ7A26Jgb64A4LuBRTANBf9u+NkKuJEM9oWRE=
-----END CERTIFICATE-----