Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/fYorwwk0oO11byYmco7MQNerGgE.roa
File:                     fYorwwk0oO11byYmco7MQNerGgE.roa (raw, json)
Hash identifier:          ooyLKe7rDjErRR3DvSfdjw2ZZ19z7DIJG9+UP+S4jWU=
Subject key identifier:   7D:8A:2B:C3:09:34:A0:ED:75:6F:26:26:72:8E:CC:40:D7:AB:1A:01
Certificate issuer:       /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial:       039F
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/fYorwwk0oO11byYmco7MQNerGgE.roa
Signing time:             Fri 26 Aug 2022 14:27:35 +0000
ROA not before:           Fri 26 Aug 2022 14:27:35 +0000
ROA not after:            Wed 19 Jul 2023 01:20:03 +0000
asID:                     1239
IP address blocks:        180.223.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
        Validity
            Not Before: Aug 26 14:27:35 2022 GMT
            Not After : Jul 19 01:20:03 2023 GMT
        Subject: CN=7D8A2BC30934A0ED756F2626728ECC40D7AB1A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:7e:6c:db:3d:1b:0b:9d:65:e1:80:89:79:
                    b3:5a:38:bf:97:1f:23:76:60:31:22:ea:83:51:30:
                    f8:6d:b5:1c:9e:2c:09:79:54:32:41:58:70:58:8f:
                    d8:ad:17:ce:bc:c7:4c:21:76:64:ba:d9:80:10:3f:
                    e6:06:58:b9:ba:f3:ff:8d:71:46:f0:11:4e:6d:7b:
                    92:23:de:db:cd:c8:88:4c:c0:ea:5a:0e:e4:a8:8c:
                    0e:f4:4d:ae:6b:e5:17:69:06:1e:3e:d0:6d:b5:97:
                    8d:e4:03:d8:5c:ca:f3:16:b0:ba:c3:df:cf:7c:11:
                    67:96:53:6d:c7:ec:ce:07:2f:46:3a:2c:3a:e2:98:
                    72:14:21:b4:d1:d4:31:39:a7:eb:42:00:95:1c:5b:
                    5c:25:00:7d:24:c7:7b:fe:98:74:5a:cb:a6:74:50:
                    a8:9b:40:34:17:a0:df:4f:82:01:6f:11:d7:c8:39:
                    a5:26:b2:46:c0:5c:29:1f:63:71:3d:37:0e:ec:9f:
                    41:58:1b:7a:fe:69:52:a5:0a:40:1d:dd:a8:c5:56:
                    f4:ef:39:64:02:a4:b4:a1:6b:7d:4e:b4:19:26:d3:
                    75:f0:10:4f:66:62:4a:f4:12:1f:83:b6:49:dc:67:
                    ed:01:ff:77:46:64:79:cd:9b:04:13:ca:95:92:15:
                    d6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8A:2B:C3:09:34:A0:ED:75:6F:26:26:72:8E:CC:40:D7:AB:1A:01
            X509v3 Authority Key Identifier:
                keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/fYorwwk0oO11byYmco7MQNerGgE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:ac:e2:fb:fb:62:17:02:21:46:b1:ac:1b:e4:c5:e6:4f:
         d0:03:62:6d:bd:8c:00:ba:c0:43:8f:43:bd:4b:5a:41:62:64:
         24:ec:2f:0a:ed:58:28:43:55:8d:94:40:90:6f:6e:2c:9d:2b:
         8d:bc:09:75:34:2c:6c:44:7f:6c:b0:b0:fc:d2:78:b7:03:41:
         a7:69:a4:9f:b3:57:9b:9e:aa:95:f9:08:73:ba:60:62:db:a5:
         14:d8:fd:ba:6f:ff:d2:67:5e:49:68:a9:c8:37:8a:5b:c7:5c:
         fd:cf:47:13:43:e1:02:d1:bd:4a:d3:d2:c0:d5:a8:92:c7:f8:
         54:b1:1c:33:09:6e:e3:18:a7:a7:fa:45:4f:1d:e1:ba:0d:a3:
         28:df:16:1e:74:af:6d:f7:a1:32:7a:3c:f3:8c:b8:fe:d0:56:
         f7:c9:64:cc:b0:e9:86:c4:e9:76:97:c2:87:a9:2e:66:da:ef:
         86:76:04:b1:e3:fe:1b:28:05:f5:a0:cd:a8:7e:60:3c:aa:13:
         64:ed:8b:a4:8e:89:61:39:24:85:89:d1:4e:49:47:66:61:13:
         9e:c1:e1:21:bb:1e:3b:a2:a4:85:d9:e0:bb:da:86:83:37:44:
         e8:69:9e:11:f7:cf:54:29:6a:f7:8a:b0:d1:bf:d9:c4:b7:df:
         d6:9d:d0:31
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICA58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkIw
QzUwNTQyQ0E4N0FBM0MxMkYzMEMzMjMyMzA2MkM4NzEwMjIyMTAeFw0yMjA4MjYx
NDI3MzVaFw0yMzA3MTkwMTIwMDNaMDMxMTAvBgNVBAMTKDdEOEEyQkMzMDkzNEEw
RUQ3NTZGMjYyNjcyOEVDQzQwRDdBQjFBMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5qH5s2z0bC51l4YCJebNaOL+XHyN2YDEi6oNRMPhttRyeLAl5
VDJBWHBYj9itF868x0whdmS62YAQP+YGWLm68/+NcUbwEU5te5Ij3tvNyIhMwOpa
DuSojA70Ta5r5RdpBh4+0G21l43kA9hcyvMWsLrD3898EWeWU23H7M4HL0Y6LDri
mHIUIbTR1DE5p+tCAJUcW1wlAH0kx3v+mHRay6Z0UKibQDQXoN9PggFvEdfIOaUm
skbAXCkfY3E9Nw7sn0FYG3r+aVKlCkAd3ajFVvTvOWQCpLSha31OtBkm03XwEE9m
Ykr0Eh+DtkncZ+0B/3dGZHnNmwQTypWSFdYPAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUfYorwwk0oO11byYmco7MQNerGgEwHwYDVR0jBBgwFoAUKwxQVCyoeqPBLzDD
IyMGLIcQIiEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEz
MC9Ld3hRVkN5b2VxUEJMekRESXlNR0xJY1FJaUUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxMzAvZllvcnd3azBvTzEx
YnlZbWNvN01RTmVyR2dFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBbTfwDANBgkqhkiG9w0BAQsFAAOCAQEAUy6s4vv7YhcCIUaxrBvkxeZP0ANi
bb2MALrAQ49DvUtaQWJkJOwvCu1YKENVjZRAkG9uLJ0rjbwJdTQsbER/bLCw/NJ4
twNBp2mkn7NXm56qlfkIc7pgYtulFNj9um//0mdeSWipyDeKW8dc/c9HE0PhAtG9
StPSwNWoksf4VLEcMwlu4xinp/pFTx3hug2jKN8WHnSvbfehMno884y4/tBW98lk
zLDphsTpdpfCh6kuZtrvhnYEseP+GygF9aDNqH5gPKoTZO2LpI6JYTkkhYnRTklH
ZmETnsHhIbseO6Kkhdngu9qGgzdE6GmeEffPVClq94qw0b/ZxLff1p3QMQ==
-----END CERTIFICATE-----