Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2639/rfuoTrPY0wFvOZ0DEE9CxjWz4sk.roa
File:                     rfuoTrPY0wFvOZ0DEE9CxjWz4sk.roa (raw, json)
Hash identifier:          iBV7KFGqDDgCa3FHV8/zCTijQWgoJ/UootxZypF7k5Q=
Subject key identifier:   AD:FB:A8:4E:B3:D8:D3:01:6F:39:9D:03:10:4F:42:C6:35:B3:E2:C9
Certificate issuer:       /CN=8B2950FDB514F7F24D45698E0F28DA13FC551908
Certificate serial:       06E0
Authority key identifier: 8B:29:50:FD:B5:14:F7:F2:4D:45:69:8E:0F:28:DA:13:FC:55:19:08
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iylQ_bUU9_JNRWmODyjaE_xVGQg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/rfuoTrPY0wFvOZ0DEE9CxjWz4sk.roa
Signing time:             Sat 23 Oct 2021 03:10:01 +0000
ROA not before:           Sat 23 Oct 2021 03:10:01 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     24424
IP address blocks:        103.104.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B2950FDB514F7F24D45698E0F28DA13FC551908
        Validity
            Not Before: Oct 23 03:10:01 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=ADFBA84EB3D8D3016F399D03104F42C635B3E2C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:f8:e1:a2:9c:e2:96:bb:72:e2:22:e1:d3:
                    33:24:3c:03:de:cb:a4:09:19:93:58:d9:7f:28:bc:
                    ea:b4:ce:dc:41:26:75:0c:d7:e2:a1:4c:08:9b:87:
                    a8:e0:51:5c:bc:70:14:2d:2a:3e:27:e4:c9:b8:2c:
                    9a:0b:04:11:78:1b:b8:d4:8f:bf:a6:f8:62:6d:47:
                    a2:3c:89:70:85:90:c1:82:02:96:ea:c7:b3:c9:dd:
                    fe:d6:22:3c:d9:16:23:17:31:f8:fc:74:f0:ea:88:
                    ee:8b:01:66:7b:97:6b:08:65:82:14:83:98:98:22:
                    16:a9:91:3f:58:35:fd:fe:da:0b:f5:2c:0a:35:77:
                    c9:8d:82:3c:74:fb:62:91:fa:b7:5d:41:df:30:67:
                    4c:d4:5f:b2:23:70:7b:e4:c4:7d:4e:c4:8b:e7:bd:
                    91:d1:eb:f5:2d:d1:c5:9b:0b:d2:f7:fa:70:1e:11:
                    b7:66:95:8c:9a:9c:f7:48:56:1b:29:f7:72:6f:72:
                    9c:08:71:ff:6e:0f:7b:73:de:1b:3d:9c:0c:1d:82:
                    5c:b7:f5:4e:d6:03:b5:6a:41:2e:93:c3:48:64:c6:
                    27:bb:f3:b8:fa:a0:93:ee:f9:eb:6e:51:c6:87:79:
                    b9:7a:1b:9d:fb:3e:e4:3d:82:ab:45:52:53:c2:74:
                    b9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FB:A8:4E:B3:D8:D3:01:6F:39:9D:03:10:4F:42:C6:35:B3:E2:C9
            X509v3 Authority Key Identifier:
                keyid:8B:29:50:FD:B5:14:F7:F2:4D:45:69:8E:0F:28:DA:13:FC:55:19:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/iylQ_bUU9_JNRWmODyjaE_xVGQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iylQ_bUU9_JNRWmODyjaE_xVGQg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2639/rfuoTrPY0wFvOZ0DEE9CxjWz4sk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:1d:f9:b6:69:eb:d4:20:43:71:53:ef:2e:75:ea:29:4d:
         7a:8d:7f:4a:5e:22:90:7b:ef:e2:2e:63:a1:01:d8:86:48:20:
         77:2b:e6:6b:92:3a:2e:9c:82:52:d2:83:a3:7d:f9:fa:0e:0b:
         4a:00:3e:c5:b5:af:ad:df:fa:95:bc:08:ca:6c:11:f2:f1:c8:
         fd:5a:73:86:9a:56:f7:e6:9e:e3:c9:6c:91:c8:b4:ff:2a:97:
         4e:86:98:aa:c6:41:17:77:14:4f:3b:26:64:20:e8:58:d5:d8:
         4e:8f:ee:eb:e3:56:56:c4:a9:e5:b9:6a:40:52:f7:38:38:f5:
         ed:46:4a:5b:92:91:5b:70:3e:91:77:f0:40:83:4b:b7:31:ba:
         50:fc:ab:87:82:d1:42:94:db:03:11:dd:20:3e:14:fa:5d:0e:
         00:4b:f7:fa:23:fb:21:1d:88:d1:cc:5b:ae:3b:76:64:bf:70:
         a2:da:5f:ec:3c:10:83:ba:fe:dd:62:8b:5e:b1:dc:fc:0b:06:
         28:71:d7:f8:6c:12:c7:a4:1e:58:0b:9b:0b:67:9d:20:34:b1:
         6a:36:ee:75:5e:e1:6f:1d:81:fc:8a:48:c6:ce:fc:64:c9:35:
         a9:80:d8:71:86:e7:a8:50:4c:2b:83:ca:4a:4a:17:e5:66:df:
         a2:97:3b:86
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEIy
OTUwRkRCNTE0RjdGMjRENDU2OThFMEYyOERBMTNGQzU1MTkwODAeFw0yMTEwMjMw
MzEwMDFaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEFERkJBODRFQjNEOEQz
MDE2RjM5OUQwMzEwNEY0MkM2MzVCM0UyQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaWfjhopzilrty4iLh0zMkPAPey6QJGZNY2X8ovOq0ztxBJnUM
1+KhTAibh6jgUVy8cBQtKj4n5Mm4LJoLBBF4G7jUj7+m+GJtR6I8iXCFkMGCApbq
x7PJ3f7WIjzZFiMXMfj8dPDqiO6LAWZ7l2sIZYIUg5iYIhapkT9YNf3+2gv1LAo1
d8mNgjx0+2KR+rddQd8wZ0zUX7IjcHvkxH1OxIvnvZHR6/Ut0cWbC9L3+nAeEbdm
lYyanPdIVhsp93JvcpwIcf9uD3tz3hs9nAwdgly39U7WA7VqQS6Tw0hkxie787j6
oJPu+etuUcaHebl6G537PuQ9gqtFUlPCdLmrAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUrfuoTrPY0wFvOZ0DEE9CxjWz4skwHwYDVR0jBBgwFoAUiylQ/bUU9/JNRWmO
DyjaE/xVGQgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYz
OS9peWxRX2JVVTlfSk5SV21PRHlqYUVfeFZHUWcuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l5bFFfYlVVOV9KTlJXbU9EeWphRV94VkdRZy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MzkvcmZ1b1RyUFkwd0Z2
T1owREVFOUN4ald6NHNrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdomDANBgkqhkiG9w0BAQsFAAOCAQEAgnsd+bZp69QgQ3FT7y516ilNeo1/
Sl4ikHvv4i5joQHYhkggdyvma5I6LpyCUtKDo335+g4LSgA+xbWvrd/6lbwIymwR
8vHI/VpzhppW9+ae48lskci0/yqXToaYqsZBF3cUTzsmZCDoWNXYTo/u6+NWVsSp
5blqQFL3ODj17UZKW5KRW3A+kXfwQINLtzG6UPyrh4LRQpTbAxHdID4U+l0OAEv3
+iP7IR2I0cxbrjt2ZL9wotpf7DwQg7r+3WKLXrHc/AsGKHHX+GwSx6QeWAubC2ed
IDSxajbudV7hbx2B/IpIxs78ZMk1qYDYcYbnqFBMK4PKSkoX5Wbfopc7hg==
-----END CERTIFICATE-----