Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2738/Axv1UA2yArtlrnT0KQY4eRc4QSQ.roa
File:                     Axv1UA2yArtlrnT0KQY4eRc4QSQ.roa (raw, json)
Hash identifier:          xPa7SvCkIfxq/4qfVBfLTIlsbdFSC6Q6xWBXbbxiuhc=
Subject key identifier:   03:1B:F5:50:0D:B2:02:BB:65:AE:74:F4:29:06:38:79:17:38:41:24
Certificate issuer:       /CN=F83D3035C08F8009CF3AD561D45AC6A0824BAAE8
Certificate serial:       03
Authority key identifier: F8:3D:30:35:C0:8F:80:09:CF:3A:D5:61:D4:5A:C6:A0:82:4B:AA:E8
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-D0wNcCPgAnPOtVh1FrGoIJLqug.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/Axv1UA2yArtlrnT0KQY4eRc4QSQ.roa
Signing time:             Thu 27 May 2021 05:05:19 +0000
ROA not before:           Thu 27 May 2021 05:05:19 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     137798
IP address blocks:        103.116.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F83D3035C08F8009CF3AD561D45AC6A0824BAAE8
        Validity
            Not Before: May 27 05:05:19 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=031BF5500DB202BB65AE74F42906387917384124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:8b:47:01:81:10:74:aa:39:16:c1:b0:fc:
                    7b:1c:c8:19:9f:7a:42:de:03:52:95:67:71:22:48:
                    40:69:e6:fc:7f:78:74:7b:8f:bb:08:89:6c:ca:e4:
                    74:71:14:f5:c6:e6:9a:7c:06:0c:89:f6:6c:43:83:
                    e9:f7:ab:23:91:9f:30:b8:ce:31:0f:a3:3b:d3:d0:
                    c1:b4:64:72:3a:94:58:27:ae:95:af:f0:04:4d:f2:
                    d0:b7:d9:54:57:8d:9e:81:a1:5b:db:4f:0e:94:7c:
                    cd:2a:48:29:7b:65:24:a4:db:28:99:e8:7b:83:ac:
                    0c:f2:4d:48:68:93:2e:ff:78:52:38:51:52:26:51:
                    40:24:2e:eb:25:bc:fb:08:74:e6:d9:d9:62:a9:6e:
                    0d:d0:6b:28:70:ec:26:1e:f5:14:1d:e8:a4:4e:eb:
                    a9:68:4f:f9:07:eb:01:04:19:5a:80:5c:a8:79:6a:
                    ee:ab:d1:6c:cb:5a:19:f5:d1:aa:f8:f7:7e:e2:04:
                    7e:da:ff:be:b6:c8:5b:80:17:80:a3:2c:8c:0d:03:
                    90:41:8f:19:9e:fc:6d:59:41:9e:f6:a9:f2:a7:00:
                    1c:74:94:80:38:52:a2:da:3f:af:47:42:13:fc:c7:
                    8c:e2:e2:bd:72:52:fa:da:80:a1:e7:45:9a:46:f4:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1B:F5:50:0D:B2:02:BB:65:AE:74:F4:29:06:38:79:17:38:41:24
            X509v3 Authority Key Identifier:
                keyid:F8:3D:30:35:C0:8F:80:09:CF:3A:D5:61:D4:5A:C6:A0:82:4B:AA:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/-D0wNcCPgAnPOtVh1FrGoIJLqug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-D0wNcCPgAnPOtVh1FrGoIJLqug.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2738/Axv1UA2yArtlrnT0KQY4eRc4QSQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:5f:ef:c0:7e:5f:90:c5:af:b6:38:9a:b8:a5:da:a4:9b:
         6a:71:5d:e9:df:ca:6f:34:5b:17:a6:4d:7d:33:bb:87:8d:55:
         34:28:ee:00:be:b4:c8:7a:44:fb:94:c0:a5:7d:1a:9a:69:3c:
         f2:3a:ce:89:f3:64:99:df:8c:44:84:3d:88:35:d8:5a:df:c8:
         23:9c:c3:32:ae:96:f2:fc:5d:bb:50:81:cb:d1:e1:ef:e5:52:
         ed:b2:db:57:ee:37:4b:50:3d:58:36:89:08:71:73:5c:b7:34:
         d9:d4:92:57:fd:e6:cf:99:d9:75:76:4e:54:bc:f9:9a:13:76:
         7d:0b:59:6d:a5:5c:8b:e1:1d:88:5a:d8:c1:9e:f3:54:8a:d9:
         25:6c:c6:6f:1a:b3:26:46:db:f6:26:44:23:45:7b:56:13:07:
         9f:8a:c7:59:9a:03:7c:0a:d0:2a:13:27:58:f9:8b:fb:11:1d:
         da:25:8c:7b:77:2e:52:46:2d:fa:b1:78:a8:02:3c:14:cd:1b:
         75:10:32:9f:24:21:cc:00:ef:f7:24:ba:24:01:78:bc:bd:70:
         ed:f0:13:8d:a1:29:95:bc:ca:5b:b1:e6:d6:55:7d:cb:d8:cb:
         79:ec:72:62:79:23:f1:98:62:1a:84:0e:6f:27:9b:ca:77:c8:
         e7:69:2a:c2
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODNE
MzAzNUMwOEY4MDA5Q0YzQUQ1NjFENDVBQzZBMDgyNEJBQUU4MB4XDTIxMDUyNzA1
MDUxOVoXDTIyMDUyNzA0NTk1MlowMzExMC8GA1UEAxMoMDMxQkY1NTAwREIyMDJC
QjY1QUU3NEY0MjkwNjM4NzkxNzM4NDEyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKQXi0cBgRB0qjkWwbD8exzIGZ96Qt4DUpVncSJIQGnm/H94dHuP
uwiJbMrkdHEU9cbmmnwGDIn2bEOD6ferI5GfMLjOMQ+jO9PQwbRkcjqUWCeula/w
BE3y0LfZVFeNnoGhW9tPDpR8zSpIKXtlJKTbKJnoe4OsDPJNSGiTLv94UjhRUiZR
QCQu6yW8+wh05tnZYqluDdBrKHDsJh71FB3opE7rqWhP+QfrAQQZWoBcqHlq7qvR
bMtaGfXRqvj3fuIEftr/vrbIW4AXgKMsjA0DkEGPGZ78bVlBnvap8qcAHHSUgDhS
oto/r0dCE/zHjOLivXJS+tqAoedFmkb0AesCAwEAAaOCAfMwggHvMB0GA1UdDgQW
BBQDG/VQDbICu2WudPQpBjh5FzhBJDAfBgNVHSMEGDAWgBT4PTA1wI+ACc861WHU
Wsaggkuq6DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8yNzM4
Ly1EMHdOY0NQZ0FuUE90VmgxRnJHb0lKTHF1Zy5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvLUQwd05jQ1BnQW5QT3RWaDFGckdvSUpMcXVnLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjczOC9BeHYxVUEyeUFydGxy
blQwS1FZNGVSYzRRU1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAZ3RcMA0GCSqGSIb3DQEBCwUAA4IBAQCWHV/vwH5fkMWvtjiauKXapJtqcV3p
38pvNFsXpk19M7uHjVU0KO4AvrTIekT7lMClfRqaaTzyOs6J82SZ34xEhD2INdha
38gjnMMyrpby/F27UIHL0eHv5VLtsttX7jdLUD1YNokIcXNctzTZ1JJX/ebPmdl1
dk5UvPmaE3Z9C1ltpVyL4R2IWtjBnvNUitklbMZvGrMmRtv2JkQjRXtWEwefisdZ
mgN8CtAqEydY+Yv7ER3aJYx7dy5SRi36sXioAjwUzRt1EDKfJCHMAO/3JLokAXi8
vXDt8BONoSmVvMpbsebWVX3L2Mt57HJieSPxmGIahA5vJ5vKd8jnaSrC
-----END CERTIFICATE-----