Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/IpXEWzd2l3KEI90sc-X7SJg1mk0.roa
File:                     IpXEWzd2l3KEI90sc-X7SJg1mk0.roa (raw, json)
Hash identifier:          8TMaozkY4PlKaP+2sZGGW+/8VFYpN9mj91O2SRUUO5Q=
Subject key identifier:   22:95:C4:5B:37:76:97:72:84:23:DD:2C:73:E5:FB:48:98:35:9A:4D
Certificate issuer:       /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial:       0A54
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/IpXEWzd2l3KEI90sc-X7SJg1mk0.roa
Signing time:             Tue 07 Jun 2022 10:05:37 +0000
ROA not before:           Tue 07 Jun 2022 10:05:37 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     58466
IP address blocks:        2401:3480:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644 (0xa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
        Validity
            Not Before: Jun  7 10:05:37 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=2295C45B377697728423DD2C73E5FB4898359A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:3f:f0:ae:15:ac:b6:1e:ca:95:97:f2:94:
                    a4:bb:04:ef:2a:e1:18:4d:c1:5e:4b:61:62:43:28:
                    71:08:09:21:ae:0d:fe:5e:88:17:2d:b6:49:69:66:
                    9f:d2:a9:90:46:fb:3f:7a:01:d4:90:92:c3:23:02:
                    22:6a:91:74:8c:b6:3f:19:78:98:7a:ad:db:ce:55:
                    ad:bc:ea:74:dc:80:91:43:cf:fa:cb:0d:64:26:8a:
                    9a:ea:39:bf:82:c4:43:44:e0:60:ad:c0:de:6b:5b:
                    5b:bc:8d:8b:c9:b2:fe:c1:82:bf:71:86:e6:70:7f:
                    bc:2f:b7:36:a1:1f:b0:92:db:9a:ab:cd:87:54:d4:
                    fd:be:d1:74:11:6a:ae:af:ad:fc:a1:e7:39:35:91:
                    a8:3f:fc:97:80:16:94:09:9a:da:a2:d2:f1:04:0f:
                    2e:07:47:29:15:eb:1b:bd:3d:68:bd:af:0e:61:a1:
                    e8:36:89:6b:f4:a3:45:e9:84:2e:db:5e:7a:42:d5:
                    5e:0c:2e:b4:6e:ba:3b:a6:e5:27:cb:2c:03:84:06:
                    81:bd:50:af:2e:10:f4:79:70:96:b1:83:de:de:f8:
                    d9:e6:ce:83:61:da:eb:24:9b:12:f0:5b:f8:90:5d:
                    99:9d:a8:22:33:4b:e8:01:4e:f5:98:50:79:06:65:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:C4:5B:37:76:97:72:84:23:DD:2C:73:E5:FB:48:98:35:9A:4D
            X509v3 Authority Key Identifier:
                keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/IpXEWzd2l3KEI90sc-X7SJg1mk0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3480:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:cd:bc:7d:a6:aa:fa:31:7a:7f:42:b5:5d:65:58:8a:55:75:
         a0:de:ca:87:d2:a3:f8:70:e9:7f:af:90:22:7a:8e:52:87:67:
         40:cb:dc:d6:08:0d:7d:51:a4:6e:98:bb:8a:d8:d4:a9:9b:bd:
         48:51:45:2c:f9:f4:47:5e:bf:ee:af:a9:ee:57:9d:f9:85:d1:
         92:2d:e1:86:fd:38:3c:7d:05:d2:57:bf:79:5d:99:cc:e5:d4:
         bd:43:4e:06:eb:f6:30:c1:50:13:7a:9c:2a:98:47:4a:61:c5:
         94:59:d0:33:07:fa:9e:de:cd:3c:fa:48:88:c3:3d:07:56:ea:
         d5:99:05:18:af:db:89:fe:1d:1f:b7:e5:22:45:71:e0:d8:16:
         67:6a:6a:8f:f9:47:7d:b8:98:02:fa:1c:e0:9f:e5:42:49:25:
         70:8c:61:e4:ca:f8:71:5c:a9:79:b1:0d:40:8f:cf:2f:26:9b:
         de:52:1e:1a:bd:ae:ee:a5:16:72:72:4a:5c:31:09:00:0c:cd:
         29:ca:60:51:ad:7c:43:7c:07:33:92:87:3e:a2:3c:03:67:3f:
         60:e3:28:fc:fd:86:52:50:d0:25:8b:0e:d8:d2:4e:b7:b4:27:
         25:9c:f2:e6:c6:d9:3c:58:2a:90:2f:b0:b4:0e:21:be:22:db:
         9b:b9:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----