Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/Z8NYX3y5cueDP3w93jX6AAKGy8I.roa
File:                     Z8NYX3y5cueDP3w93jX6AAKGy8I.roa (raw, json)
Hash identifier:          HNZJl30jEzjnx5krN0LpFjA3hDWABnxPNM5k60IXnp4=
Subject key identifier:   67:C3:58:5F:7C:B9:72:E7:83:3F:7C:3D:DE:35:FA:00:02:86:CB:C2
Certificate issuer:       /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial:       04AB
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Z8NYX3y5cueDP3w93jX6AAKGy8I.roa
Signing time:             Tue 30 Nov 2021 04:55:53 +0000
ROA not before:           Tue 30 Nov 2021 04:55:53 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     59077
IP address blocks:        2401:3480::/36 maxlen: 36
                          2401:3480:2000::/36 maxlen: 36
                          2401:3480:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195 (0x4ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
        Validity
            Not Before: Nov 30 04:55:53 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=67C3585F7CB972E7833F7C3DDE35FA000286CBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:5d:cb:a0:bd:2a:20:e1:c7:3a:c6:f5:0c:
                    bc:20:3b:d1:ea:fc:ab:64:12:ad:9b:da:aa:81:68:
                    4c:71:75:9b:31:4a:95:0e:87:cb:53:1d:ab:ee:c9:
                    9e:77:f4:f1:19:55:3f:a7:4f:f6:9a:32:dd:ed:33:
                    83:f0:bc:4c:4c:ea:89:76:18:5b:af:6d:30:14:2e:
                    a5:2c:ad:98:10:1f:68:9e:ea:f1:85:94:b3:43:f6:
                    c3:c7:35:34:d1:7b:09:0f:5b:b2:76:27:ac:17:64:
                    ad:e8:ca:a6:e8:da:5a:97:08:3f:9e:93:ed:3e:82:
                    66:35:de:33:f4:60:c8:0c:d9:19:3c:56:7e:75:03:
                    bf:f5:4d:5a:23:35:88:21:0c:60:be:ca:21:79:3f:
                    0f:4f:dd:f1:1e:3b:e3:e0:52:76:22:22:21:fe:21:
                    fc:8f:9c:74:c2:10:21:30:cb:34:64:46:62:e8:f4:
                    7d:79:cb:3c:f4:98:fa:1e:83:c4:73:73:da:9c:94:
                    6a:f8:ef:61:8c:ae:7a:97:c3:f0:31:f2:99:92:f4:
                    c1:98:f4:03:4c:f0:78:52:7f:17:55:c6:5d:12:da:
                    18:6b:96:28:3e:88:7c:79:6b:5c:13:19:f8:78:f5:
                    f5:6e:10:9b:2d:63:7f:aa:98:4a:55:76:81:a9:8c:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C3:58:5F:7C:B9:72:E7:83:3F:7C:3D:DE:35:FA:00:02:86:CB:C2
            X509v3 Authority Key Identifier:
                keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/Z8NYX3y5cueDP3w93jX6AAKGy8I.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3480::/36
                  2401:3480:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         c4:43:94:83:e8:17:3a:07:54:dc:6b:33:fd:57:c6:33:ed:95:
         9e:8f:da:b3:08:cb:f8:2f:ba:91:c8:fa:98:5f:f9:d6:a4:2b:
         1e:16:cf:70:b0:76:06:13:fd:e0:de:f7:fa:cf:8a:ca:da:90:
         8d:15:ef:26:d9:c4:1e:81:02:76:46:ed:38:2c:f8:de:0c:71:
         d4:d0:e5:68:3b:41:eb:78:55:93:88:1d:3e:47:be:f4:22:e9:
         1c:f1:30:62:d6:99:1c:71:06:e2:05:73:a2:db:a4:c8:36:11:
         11:6b:22:5a:fd:8e:30:cf:ba:49:76:e9:22:75:0f:82:4b:62:
         e3:45:7f:df:e3:8d:81:2d:5e:8b:a7:09:3f:e2:05:be:bf:0b:
         43:5d:d8:09:61:e6:bf:0a:de:22:9b:54:ca:9b:a3:fd:ee:46:
         44:a6:90:76:46:00:61:46:f3:f4:34:54:aa:b0:56:e4:7f:72:
         34:f7:9e:3f:1f:37:c2:a2:89:db:5e:9a:58:b1:61:ce:5e:3b:
         8a:cd:4c:fb:a8:1b:a0:e8:2c:d8:9a:25:c7:f6:2c:72:b1:8d:
         4f:bf:dd:27:82:5d:b2:9a:d6:ac:e1:91:88:6a:43:0f:b9:d0:
         da:7d:c8:a9:9d:ef:25:1c:3c:68:26:26:7c:89:8d:fc:9e:23:
         f8:22:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----