Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/5Em2jAgw1U1hXFohtL3aIrrV948.roa
File:                     5Em2jAgw1U1hXFohtL3aIrrV948.roa (raw, json)
Hash identifier:          arPR9xGbJRkUTUZ6z7gzWCaz41XUonWhjVLe6xJTbF8=
Subject key identifier:   E4:49:B6:8C:08:30:D5:4D:61:5C:5A:21:B4:BD:DA:22:BA:D5:F7:8F
Certificate issuer:       /CN=8300DC1220426D203B631DEE7FDA2006B0931A8E
Certificate serial:       06F6
Authority key identifier: 83:00:DC:12:20:42:6D:20:3B:63:1D:EE:7F:DA:20:06:B0:93:1A:8E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gwDcEiBCbSA7Yx3uf9ogBrCTGo4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/5Em2jAgw1U1hXFohtL3aIrrV948.roa
Signing time:             Tue 25 Jan 2022 19:04:52 +0000
ROA not before:           Tue 25 Jan 2022 19:04:52 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     59000
IP address blocks:        2401:5180::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8300DC1220426D203B631DEE7FDA2006B0931A8E
        Validity
            Not Before: Jan 25 19:04:52 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=E449B68C0830D54D615C5A21B4BDDA22BAD5F78F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:4b:76:1c:fc:6c:ae:97:6d:9c:5c:a9:f5:
                    6b:3e:ad:56:4e:aa:41:81:57:af:b2:c4:83:01:2c:
                    b5:f6:2c:37:45:f8:31:19:0b:27:11:31:01:20:ee:
                    a3:70:40:7a:4d:05:35:d5:dc:be:9c:0f:e2:c6:62:
                    d3:ad:81:7b:eb:0b:b4:95:df:cb:66:c4:45:94:2f:
                    6e:68:45:ee:d0:7d:2d:69:3d:b4:f2:4e:dc:34:d0:
                    12:2b:3a:a2:e7:3e:87:23:bd:06:3f:d7:39:3e:d2:
                    f8:3b:5c:90:c0:42:12:4c:e0:5c:f1:a1:e2:f2:a8:
                    bd:f8:25:b9:96:d0:bb:ed:0f:f9:07:4d:65:44:2b:
                    0f:17:d9:8e:73:3c:d3:a0:91:92:44:ff:9a:b6:86:
                    bb:89:46:c4:78:de:cd:eb:06:ca:5a:02:db:1d:bb:
                    42:58:bf:a6:17:bb:63:57:a5:df:6d:81:92:47:aa:
                    f9:4d:cd:68:a5:4f:64:d0:0f:a3:2a:41:ab:e6:5f:
                    c6:ed:dc:63:7d:4a:45:a1:25:e5:2d:b6:78:84:8b:
                    bc:68:84:eb:76:f7:a9:65:42:f4:d3:d6:55:3e:be:
                    45:9e:98:07:66:73:b4:3f:82:6a:73:27:1a:1b:ad:
                    f1:82:46:66:1a:42:d7:35:26:58:90:0b:50:84:52:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:49:B6:8C:08:30:D5:4D:61:5C:5A:21:B4:BD:DA:22:BA:D5:F7:8F
            X509v3 Authority Key Identifier:
                keyid:83:00:DC:12:20:42:6D:20:3B:63:1D:EE:7F:DA:20:06:B0:93:1A:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/gwDcEiBCbSA7Yx3uf9ogBrCTGo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gwDcEiBCbSA7Yx3uf9ogBrCTGo4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/5Em2jAgw1U1hXFohtL3aIrrV948.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:34:ff:a8:5a:fa:1c:57:8f:55:79:b9:ee:35:b2:e5:f1:7d:
         e6:c9:24:13:95:c7:62:17:44:fd:62:17:bf:bb:5f:19:f5:24:
         61:6d:64:db:4c:d3:6a:df:55:85:18:b3:1d:dd:e1:11:ec:a7:
         60:59:ce:d3:12:92:c5:d3:a4:08:c3:b3:27:be:8e:76:bc:ba:
         56:8b:ca:ea:4e:dc:ad:71:dd:bd:c3:7c:c2:ed:33:84:79:f4:
         02:c0:91:46:06:eb:05:64:16:9c:3c:4f:e2:a5:36:f9:7b:88:
         b0:00:77:fb:91:4f:b6:c3:a5:00:05:38:75:e0:a4:04:be:da:
         8e:21:b2:6b:c9:3b:be:bc:fc:85:cd:df:51:ea:6e:7d:6b:ac:
         78:18:c5:78:d8:4d:bf:85:87:61:0f:4c:dc:01:63:73:90:ee:
         57:a8:90:e7:50:f0:d7:1f:f6:c3:36:61:13:7b:e6:2d:b5:80:
         a6:83:d8:5a:58:db:d2:23:49:a5:b3:93:c0:8e:53:b5:d8:ad:
         f3:eb:81:09:e1:a0:d1:c3:69:49:aa:81:d2:5a:a7:48:49:59:
         f5:3d:05:d0:12:2a:ea:4a:85:d6:a5:f3:12:f5:dc:a6:58:d4:
         a2:ad:97:80:ad:49:e7:47:a3:37:f5:74:9b:f1:df:5d:b5:76:
         58:ed:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----