Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/848/YY9ON5-mE2JQ_RQAY7YpZuS1wBA.roa
File:                     YY9ON5-mE2JQ_RQAY7YpZuS1wBA.roa (raw, json)
Hash identifier:          Y1ptmZiPdbZsYGr+oFbOEZYiWye9P/jKPnHKm//kF/o=
Subject key identifier:   61:8F:4E:37:9F:A6:13:62:50:FD:14:00:63:B6:29:66:E4:B5:C0:10
Certificate issuer:       /CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
Certificate serial:       0B7B
Authority key identifier: 47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/YY9ON5-mE2JQ_RQAY7YpZuS1wBA.roa
Signing time:             Tue 07 Jun 2022 10:09:55 +0000
ROA not before:           Tue 07 Jun 2022 10:09:55 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     59000
IP address blocks:        2401:5180::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2939 (0xb7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4716CB5B4481EC13AEDD40B2C302C50F601AF77D
        Validity
            Not Before: Jun  7 10:09:55 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=618F4E379FA6136250FD140063B62966E4B5C010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:55:eb:6c:68:b9:5a:46:8c:6c:f8:0d:30:b0:
                    b8:a0:d9:b9:d9:f9:b6:98:08:4f:ba:68:81:59:2d:
                    0d:22:da:8a:e8:36:8f:aa:23:70:4f:42:c1:5b:df:
                    9e:dc:b1:23:73:b2:f5:2f:13:6f:60:d2:48:82:bb:
                    05:77:7d:40:10:81:0c:bd:78:a9:3b:6d:c4:8e:65:
                    af:b5:3c:69:72:4d:00:cc:40:ed:df:1c:24:09:fb:
                    26:e7:6d:e2:c8:44:4e:44:bf:b1:d6:f6:e1:a4:8e:
                    55:d4:1d:b2:a2:5c:07:b5:2d:8a:61:e1:45:ee:c8:
                    f8:81:50:0f:98:31:f2:f4:4a:ab:0a:97:38:3c:a4:
                    ab:68:1d:1a:77:ce:e8:af:02:c7:a6:25:36:d5:58:
                    10:0e:65:8a:9b:14:8e:31:23:f1:3a:b7:75:4c:8b:
                    8e:a4:5d:33:bf:b0:d6:db:3b:6e:92:2d:a2:e8:9a:
                    1e:10:cf:f1:52:c5:60:8b:ec:26:cc:cd:73:70:60:
                    32:bf:8a:44:56:74:cf:bf:75:76:9c:36:50:c9:8b:
                    6a:f4:fd:a2:35:ef:6e:a2:1e:c2:6f:6c:15:49:98:
                    3b:d6:61:1f:68:bb:0b:f7:61:e2:66:49:77:63:12:
                    c0:a6:92:d8:b4:ef:d9:6a:e9:ac:f2:ce:65:26:9a:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8F:4E:37:9F:A6:13:62:50:FD:14:00:63:B6:29:66:E4:B5:C0:10
            X509v3 Authority Key Identifier:
                keyid:47:16:CB:5B:44:81:EC:13:AE:DD:40:B2:C3:02:C5:0F:60:1A:F7:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/RxbLW0SB7BOu3UCywwLFD2Aa930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/RxbLW0SB7BOu3UCywwLFD2Aa930.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/848/YY9ON5-mE2JQ_RQAY7YpZuS1wBA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:d9:2e:6b:66:6c:da:c4:7e:21:f7:08:cb:91:8c:17:52:49:
         c8:17:bf:e9:1d:9c:a6:b8:49:3d:d2:ca:12:02:c2:51:dd:5f:
         c6:5d:3a:5d:77:f1:3b:2e:d4:9b:ea:cb:00:71:6a:26:df:6c:
         60:41:26:23:68:25:fb:58:d0:f7:ba:4f:2b:d3:d0:14:2f:cd:
         bb:2d:bb:de:9c:ae:d1:92:1f:e3:a8:80:91:5e:cd:13:40:b1:
         ba:69:8c:95:a0:bf:94:eb:d0:c1:3f:97:aa:e7:b4:59:99:77:
         f7:a1:4f:f6:e9:4b:63:8a:14:42:04:80:4b:17:ed:e3:0d:9a:
         c0:c8:bf:91:6b:54:42:28:2d:19:db:51:6b:c7:c7:99:fd:52:
         09:13:1d:fc:22:f3:a1:96:61:38:9b:71:80:68:c0:f5:10:a1:
         34:bc:c6:75:a0:7d:e9:44:6b:7d:a1:db:84:30:aa:65:e0:3b:
         61:b0:7b:6f:c6:f7:60:70:9c:54:a1:dc:e0:5f:2e:30:20:b1:
         8e:9d:86:08:4d:b5:51:8f:3a:de:de:3a:20:a1:c7:5b:23:7d:
         d4:55:fa:b3:20:14:75:3b:c4:28:ec:70:8b:5c:e2:b8:23:96:
         a4:ff:0f:a0:ae:eb:ec:c1:19:da:ce:83:15:52:70:73:38:d1:
         a2:45:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----