Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/XwkHZGKjN5vhXPkasXw-DwEuu74.roa
File:                     XwkHZGKjN5vhXPkasXw-DwEuu74.roa (raw, json)
Hash identifier:          QFxazpuulFJ+1qOGXGBdFZqUSNPqENG/gj03ZgPnGzo=
Subject key identifier:   5F:09:07:64:62:A3:37:9B:E1:5C:F9:1A:B1:7C:3E:0F:01:2E:BB:BE
Certificate issuer:       /CN=8300DC1220426D203B631DEE7FDA2006B0931A8E
Certificate serial:       06F6
Authority key identifier: 83:00:DC:12:20:42:6D:20:3B:63:1D:EE:7F:DA:20:06:B0:93:1A:8E
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gwDcEiBCbSA7Yx3uf9ogBrCTGo4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/XwkHZGKjN5vhXPkasXw-DwEuu74.roa
Signing time:             Tue 25 Jan 2022 19:04:51 +0000
ROA not before:           Tue 25 Jan 2022 19:04:51 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     31216
IP address blocks:        2401:5180::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8300DC1220426D203B631DEE7FDA2006B0931A8E
        Validity
            Not Before: Jan 25 19:04:51 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=5F09076462A3379BE15CF91AB17C3E0F012EBBBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:e9:03:f0:b2:90:cb:d9:46:9c:88:c6:19:
                    42:90:20:a2:47:ba:1b:0c:02:66:48:11:ad:38:ca:
                    e1:46:8d:97:cd:8c:f5:cf:47:e8:3a:b0:ed:17:ef:
                    2c:62:e2:9d:db:8e:a2:ac:81:86:5a:f4:46:a0:9c:
                    18:e3:7f:d1:09:6f:dc:11:5e:52:f5:de:5c:34:fb:
                    2d:77:a6:d4:d4:6f:fa:dc:66:21:ad:31:56:7a:88:
                    54:3e:ee:39:9a:c2:59:39:8c:f4:55:4b:7c:4c:d9:
                    cf:6f:39:b9:30:16:01:52:7d:c7:2e:b9:46:ae:87:
                    db:d1:f5:1a:fa:94:07:1e:a8:9c:eb:86:f2:07:bb:
                    c0:1c:e7:7d:bf:cb:26:5e:b5:6f:68:b4:f9:3c:a0:
                    5f:4d:53:b4:79:e3:0e:49:33:93:ee:c7:80:ea:6d:
                    5e:2b:1d:f6:7b:79:df:2b:db:bc:4e:ef:8d:e3:c7:
                    8e:82:61:0b:37:04:55:14:f8:21:23:6d:72:d9:e9:
                    18:f9:67:7e:04:79:59:3d:c5:68:5e:e1:2e:e0:00:
                    2c:0b:93:47:66:69:8b:71:86:6c:4b:08:7a:72:fb:
                    8c:ff:5f:84:59:d5:a0:56:2d:d4:c4:73:5f:cb:00:
                    00:c6:55:39:b4:fa:68:24:ff:fc:6a:94:96:6b:78:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:09:07:64:62:A3:37:9B:E1:5C:F9:1A:B1:7C:3E:0F:01:2E:BB:BE
            X509v3 Authority Key Identifier:
                keyid:83:00:DC:12:20:42:6D:20:3B:63:1D:EE:7F:DA:20:06:B0:93:1A:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/gwDcEiBCbSA7Yx3uf9ogBrCTGo4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/gwDcEiBCbSA7Yx3uf9ogBrCTGo4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/XwkHZGKjN5vhXPkasXw-DwEuu74.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:2d:af:ec:69:ac:e3:1a:2a:1d:e8:9d:25:a8:e3:cb:38:
         07:29:4d:12:01:cd:64:20:d0:b2:f6:d8:94:9d:d6:bb:d2:a6:
         ac:bd:6d:b6:3b:1c:09:4f:6b:2b:36:7a:e7:ba:15:c9:e2:ab:
         ea:2a:cd:5a:c2:31:0d:54:a2:d4:49:be:80:9b:48:4f:e1:c6:
         50:9e:fe:cd:59:73:ef:4d:27:04:8c:70:00:e2:ec:40:c2:46:
         a7:0a:93:2d:b6:50:4b:e9:3b:34:de:3a:c3:24:ea:c2:a2:bb:
         61:22:d0:8c:3e:0f:bd:7e:69:6a:3d:2b:ad:c2:a1:03:44:0c:
         eb:58:6d:d2:51:c8:9f:33:84:54:a9:36:3d:43:de:21:79:1e:
         9c:bd:ca:2a:84:c4:be:85:59:e0:70:b3:b7:ee:29:f2:47:5d:
         08:d0:5c:fb:dd:d4:1b:81:c7:4d:c0:25:aa:83:3d:86:b1:34:
         1d:a9:0c:ee:65:d8:61:3d:16:82:27:38:e0:b0:62:0b:6a:c7:
         5e:b3:a7:90:5e:0e:eb:a2:5f:48:e0:87:18:d5:2c:e5:b9:98:
         25:98:13:0b:56:79:b9:55:51:12:c1:be:a0:1e:22:e9:17:2f:
         e9:6e:4b:98:94:60:4e:36:b2:81:d7:e6:11:64:17:06:eb:95:
         09:3f:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----