Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/nBzXMKqaWwij2flPBbQ8Z-JNiXQ.roa
File:                     nBzXMKqaWwij2flPBbQ8Z-JNiXQ.roa (raw, json)
Hash identifier:          qLUj5qb8Qpv1MY3m5g0CeZ0I3aBHMVlShaugSNMnyDg=
Subject key identifier:   9C:1C:D7:30:AA:9A:5B:08:A3:D9:F9:4F:05:B4:3C:67:E2:4D:89:74
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0967
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/nBzXMKqaWwij2flPBbQ8Z-JNiXQ.roa
Signing time:             Tue 07 Jun 2022 10:06:40 +0000
ROA not before:           Tue 07 Jun 2022 10:06:40 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     134762
IP address blocks:        43.226.64.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Jun  7 10:06:40 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=9C1CD730AA9A5B08A3D9F94F05B43C67E24D8974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:08:27:4e:5c:89:9b:a3:f8:1c:ab:17:98:
                    87:3a:77:20:a1:1a:01:56:cb:9b:71:17:ed:8e:b0:
                    57:1a:ec:ca:7c:56:f3:be:f8:16:ab:70:cb:ca:67:
                    bc:59:87:c9:89:9b:2d:0d:f3:c4:98:8b:65:3d:a5:
                    7b:06:af:74:36:2e:13:1c:e0:24:76:6f:e4:2d:0f:
                    b7:2a:88:5a:e7:2e:38:d3:73:e3:79:6c:0b:6b:18:
                    54:4c:4f:b4:26:4d:80:3d:e7:f8:de:d1:e8:b3:d6:
                    03:35:61:d4:35:2c:25:09:30:17:a1:9d:cd:8f:b2:
                    32:60:b8:8c:c5:60:ac:f9:ce:2f:2d:9f:f0:bb:97:
                    3f:12:8a:98:d3:f8:9d:2c:1c:4d:4a:d0:de:fc:0a:
                    ec:0d:c3:fc:21:b9:7d:92:e6:bf:fa:8a:f6:71:93:
                    68:9a:4c:12:34:82:29:38:c8:45:1c:41:d6:4f:fe:
                    d1:51:7f:00:b9:32:30:6c:39:de:e3:5c:4f:c0:94:
                    c3:20:c6:01:fc:cb:d7:ad:6b:db:4e:6e:56:85:4e:
                    57:c8:7f:42:82:19:14:91:ff:21:70:10:24:de:f2:
                    fc:0a:eb:f2:66:58:32:c4:a8:99:9b:03:30:10:fa:
                    eb:fe:36:15:67:41:65:f1:63:d5:e4:bc:be:1e:0e:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1C:D7:30:AA:9A:5B:08:A3:D9:F9:4F:05:B4:3C:67:E2:4D:89:74
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/nBzXMKqaWwij2flPBbQ8Z-JNiXQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:3f:f0:11:a0:4a:a2:73:b0:2c:c6:93:7f:64:05:7f:cd:47:
         20:14:1b:8b:c7:ef:a5:a0:36:68:ce:68:71:a5:df:c9:36:82:
         c0:c2:5e:62:08:05:22:68:d5:b9:30:3c:00:e7:6d:a8:a7:0a:
         bb:49:ae:0b:ea:a6:51:23:9a:0e:ea:6d:50:55:05:ef:10:d1:
         52:2a:d5:cc:1a:ab:2d:5f:8d:9d:19:30:b4:6b:be:18:6f:c3:
         d6:c4:21:c0:80:37:23:e9:cd:4c:ac:f4:7e:24:34:0b:10:53:
         eb:60:b8:9a:be:21:8f:a9:d8:46:d7:ed:3e:4d:80:33:09:8b:
         cb:55:80:72:a6:69:4b:e2:cb:ec:f0:8f:ea:7e:2c:63:37:e6:
         4f:b0:d7:e6:86:b0:30:1c:44:19:b2:2d:d8:c8:f8:06:bc:52:
         25:83:dd:9e:32:0d:1b:7a:4a:d1:8a:c0:c7:af:16:7b:e5:a8:
         52:30:1f:3b:e5:8c:90:55:d5:3e:52:75:c9:94:cf:c3:46:31:
         5a:66:45:6c:3c:10:af:cd:d3:f2:8b:6a:60:09:b2:63:ee:ff:
         5b:a7:83:43:21:4b:30:ee:9e:ed:80:1a:65:69:a0:d1:be:24:
         d0:b9:14:15:1a:2a:d1:fe:61:2c:f9:6d:79:93:c3:93:f8:0d:
         4d:d6:47:2a
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yMjA2MDcx
MDA2NDBaFw0yMzA2MDcwMzM0NDNaMDMxMTAvBgNVBAMTKDlDMUNENzMwQUE5QTVC
MDhBM0Q5Rjk0RjA1QjQzQzY3RTI0RDg5NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaqAgnTlyJm6P4HKsXmIc6dyChGgFWy5txF+2OsFca7Mp8VvO+
+BarcMvKZ7xZh8mJmy0N88SYi2U9pXsGr3Q2LhMc4CR2b+QtD7cqiFrnLjjTc+N5
bAtrGFRMT7QmTYA95/je0eiz1gM1YdQ1LCUJMBehnc2PsjJguIzFYKz5zi8tn/C7
lz8SipjT+J0sHE1K0N78CuwNw/whuX2S5r/6ivZxk2iaTBI0gik4yEUcQdZP/tFR
fwC5MjBsOd7jXE/AlMMgxgH8y9eta9tOblaFTlfIf0KCGRSR/yFwECTe8vwK6/Jm
WDLEqJmbAzAQ+uv+NhVnQWXxY9XkvL4eDjTrAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUnBzXMKqaWwij2flPBbQ8Z+JNiXQwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvbkJ6WE1LcWFXd2lq
MmZsUEJiUThaLUpOaVhRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAyviQDANBgkqhkiG9w0BAQsFAAOCAQEAVj/wEaBKonOwLMaTf2QFf81HIBQb
i8fvpaA2aM5ocaXfyTaCwMJeYggFImjVuTA8AOdtqKcKu0muC+qmUSOaDuptUFUF
7xDRUirVzBqrLV+NnRkwtGu+GG/D1sQhwIA3I+nNTKz0fiQ0CxBT62C4mr4hj6nY
RtftPk2AMwmLy1WAcqZpS+LL7PCP6n4sYzfmT7DX5oawMBxEGbIt2Mj4BrxSJYPd
njING3pK0YrAx68We+WoUjAfO+WMkFXVPlJ1yZTPw0YxWmZFbDwQr83T8otqYAmy
Y+7/W6eDQyFLMO6e7YAaZWmg0b4k0LkUFRoq0f5hLPlteZPDk/gNTdZHKg==
-----END CERTIFICATE-----