Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/R33LkTRcADMvC8b-fYMzX8wPAPY.roa
File:                     R33LkTRcADMvC8b-fYMzX8wPAPY.roa (raw, json)
Hash identifier:          2A22aPPAbBePc/MJj0/ibT+co7dacYHTTd5huDtVERE=
Subject key identifier:   47:7D:CB:91:34:5C:00:33:2F:0B:C6:FE:7D:83:33:5F:CC:0F:00:F6
Certificate issuer:       /CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
Certificate serial:       0B7A
Authority key identifier: 47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/R33LkTRcADMvC8b-fYMzX8wPAPY.roa
Signing time:             Tue 07 Jun 2022 10:09:54 +0000
ROA not before:           Tue 07 Jun 2022 10:09:54 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     31216
IP address blocks:        2401:5180::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2938 (0xb7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
        Validity
            Not Before: Jun  7 10:09:54 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=477DCB91345C00332F0BC6FE7D83335FCC0F00F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:ea:9a:78:0a:bb:8f:76:69:f5:62:4e:fe:
                    c5:6b:8a:76:58:73:02:a4:9f:48:c6:50:77:d5:91:
                    0a:a4:a4:80:c7:59:41:dd:09:b3:5b:e8:5b:ee:cf:
                    67:91:98:7a:42:85:b9:5e:18:ca:48:ab:34:b3:db:
                    d9:2e:cf:b3:fe:f8:8f:59:39:67:9e:b5:ae:6e:90:
                    99:1a:d1:bd:aa:b1:da:d8:ac:51:e9:c5:45:3a:a5:
                    45:98:9b:8c:fa:6a:d5:28:5b:2e:f0:d5:6f:40:4d:
                    21:c7:9d:8a:a5:0f:72:a6:07:c1:c3:45:bb:64:3a:
                    4a:9e:cf:9a:57:2b:69:e7:5d:6f:dc:3e:f8:80:4e:
                    20:b6:26:86:c4:33:04:29:ce:49:11:da:fd:a3:40:
                    37:d3:5c:a5:fc:38:45:db:50:55:b5:c3:5b:10:5e:
                    74:83:4d:20:ad:bc:63:48:bf:77:4a:12:11:d2:77:
                    e8:42:ba:23:7a:47:a8:e9:1e:a5:a4:f8:f1:5e:2b:
                    05:df:af:78:cd:0f:fd:c4:ab:10:50:96:e6:ca:0e:
                    ab:01:2b:bb:bb:31:e2:51:03:83:ec:68:e9:7e:c9:
                    78:05:68:ac:be:45:05:7a:fd:60:24:44:eb:a8:5b:
                    cb:24:5e:90:93:02:8c:e2:10:72:f1:9a:9a:12:ac:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7D:CB:91:34:5C:00:33:2F:0B:C6:FE:7D:83:33:5F:CC:0F:00:F6
            X509v3 Authority Key Identifier:
                keyid:47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/R33LkTRcADMvC8b-fYMzX8wPAPY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:ba:1f:77:93:64:8b:31:23:88:7c:99:52:04:d1:a6:07:50:
         7f:13:7a:33:e6:33:34:7a:6d:35:19:09:59:dc:60:cf:49:ad:
         36:c3:f1:00:5a:81:1c:39:03:4c:bd:17:29:7a:ed:db:a9:63:
         73:f7:70:2d:5c:3b:f4:e9:e2:29:c6:c6:ec:08:1a:2d:5b:bc:
         e7:da:57:c1:4e:6b:20:ce:09:98:cf:31:8e:8a:99:5c:ab:e1:
         79:41:ce:4b:a9:4a:3d:01:91:37:af:85:2b:68:ca:72:c4:3c:
         f8:23:24:42:f1:10:6b:60:18:16:db:9c:33:10:ae:b1:57:bd:
         58:76:d3:52:e0:5a:6d:c4:dc:9c:62:2f:74:9e:1e:1a:58:a3:
         05:eb:80:2a:df:75:35:d3:e5:24:6e:0e:eb:46:ad:5f:f8:f1:
         9f:94:f6:f4:1b:2e:86:0c:6c:10:55:32:13:45:7d:ec:22:fa:
         e9:6b:3a:f2:bd:9e:1e:3a:51:71:3a:65:59:7e:75:e4:e8:1f:
         90:3e:34:13:e9:b1:69:b6:5c:10:21:86:2e:62:e9:7b:78:a8:
         70:18:f6:09:3c:c4:15:f1:a8:a7:5f:cd:00:c7:19:2b:5f:30:
         45:e8:ae:54:0f:db:a2:e5:f7:69:4a:5a:81:14:f7:28:9b:0f:
         c0:f8:3a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----