Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/AyJcopFgoEUH2Xguv62BWq9KZjo.roa
File:                     AyJcopFgoEUH2Xguv62BWq9KZjo.roa (raw, json)
Hash identifier:          24oYAX9mxvhAwIlL2KGnXIaDd5DTKzipf2yLytVWFFo=
Subject key identifier:   03:22:5C:A2:91:60:A0:45:07:D9:78:2E:BF:AD:81:5A:AF:4A:66:3A
Certificate issuer:       /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial:       0A1A
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/AyJcopFgoEUH2Xguv62BWq9KZjo.roa
Signing time:             Mon 06 Jun 2022 20:04:56 +0000
ROA not before:           Mon 06 Jun 2022 20:04:56 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     137718
IP address blocks:        103.159.142.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2586 (0xa1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
        Validity
            Not Before: Jun  6 20:04:56 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=03225CA29160A04507D9782EBFAD815AAF4A663A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:00:08:c4:96:5f:b6:a9:86:1b:98:8b:ba:
                    33:29:e1:f3:7b:ab:34:e0:28:89:d6:60:d6:51:06:
                    3a:aa:b5:3d:ec:87:d7:74:6c:d7:03:ad:c1:fc:58:
                    55:c2:28:1d:a1:8e:e5:ca:01:d6:98:0e:d6:56:8a:
                    bb:59:31:bb:5c:f7:a6:52:76:d7:9d:b6:bb:12:44:
                    59:33:05:ec:5b:b3:0b:4f:7c:de:ee:2f:90:7d:23:
                    8f:18:9b:84:98:c0:7b:41:9f:6e:64:b1:64:45:b5:
                    36:c9:66:88:26:85:42:4c:1f:3e:7c:97:1b:06:41:
                    52:92:29:18:58:43:53:55:bf:4e:a3:5c:5a:bb:3e:
                    85:2d:39:50:a1:41:6a:55:c4:42:57:17:b1:1e:b7:
                    62:78:49:09:0a:22:78:47:55:ed:d3:b8:a5:0c:22:
                    21:ae:02:31:24:2e:de:ff:83:99:65:bd:c4:60:12:
                    10:4e:1c:12:96:ee:3e:11:51:00:db:95:84:81:25:
                    74:c6:2b:48:7e:fc:e3:7d:42:aa:91:53:38:6b:f0:
                    da:e8:7e:ca:36:b0:2d:b8:fe:30:8a:2a:31:19:8d:
                    c9:31:f9:7d:4c:9e:da:a6:43:f8:83:b5:30:f0:06:
                    ab:57:ac:a3:7e:0d:0a:ec:c4:88:da:19:93:50:40:
                    a0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:22:5C:A2:91:60:A0:45:07:D9:78:2E:BF:AD:81:5A:AF:4A:66:3A
            X509v3 Authority Key Identifier:
                keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/AyJcopFgoEUH2Xguv62BWq9KZjo.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:2a:81:86:53:d4:cd:c6:71:b0:47:4e:e4:a0:93:cb:eb:
         62:ef:d0:d8:46:df:a0:e7:83:ef:dc:92:ec:d1:23:54:c6:d0:
         d0:e1:7b:57:e4:d7:ba:42:95:04:3f:e6:13:da:e8:43:94:ff:
         57:b4:d1:79:4c:fb:c8:a7:2b:b9:56:71:d2:18:a0:56:71:3d:
         b6:00:11:59:98:d9:24:a7:9a:cb:46:da:c3:05:77:b5:91:f0:
         e9:d8:c4:9a:bd:c6:b1:0e:d9:46:f3:18:e8:b3:3b:2e:ab:4b:
         d2:e1:1a:a8:5c:ef:7a:69:2f:c1:45:39:9f:46:07:c9:ff:04:
         ff:8e:0c:8a:5a:9a:84:18:d5:8b:d2:e6:d4:c9:02:7d:df:da:
         0e:7a:4f:67:e2:5f:2f:94:e8:80:dd:ca:1a:15:9f:59:8d:61:
         b7:8b:fe:44:8c:37:3b:61:fc:bd:fd:ee:10:65:3f:f3:61:5e:
         3f:6c:8e:e4:cd:34:63:65:ba:fd:b4:72:c2:14:66:89:1d:41:
         f2:f1:4d:ad:8a:01:4b:09:fe:a4:89:03:e6:5f:bf:3e:c8:83:
         d9:ab:73:7b:4c:67:c2:f7:77:8f:f5:9f:82:fe:ac:8d:71:77:
         e2:38:f2:4d:7a:ea:86:fc:bf:d8:3d:ed:81:a6:be:80:51:26:
         0b:5a:8f:3a
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICChowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjA4
QjkxOEQyRDQ1QjYzNzFBQ0I5NzcwNzQzNTUzRDFCRjIyNDcwODAeFw0yMjA2MDYy
MDA0NTZaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKDAzMjI1Q0EyOTE2MEEw
NDUwN0Q5NzgyRUJGQUQ4MTVBQUY0QTY2M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDROwAIxJZftqmGG5iLujMp4fN7qzTgKInWYNZRBjqqtT3sh9d0
bNcDrcH8WFXCKB2hjuXKAdaYDtZWirtZMbtc96ZSdtedtrsSRFkzBexbswtPfN7u
L5B9I48Ym4SYwHtBn25ksWRFtTbJZogmhUJMHz58lxsGQVKSKRhYQ1NVv06jXFq7
PoUtOVChQWpVxEJXF7Eet2J4SQkKInhHVe3TuKUMIiGuAjEkLt7/g5llvcRgEhBO
HBKW7j4RUQDblYSBJXTGK0h+/ON9QqqRUzhr8Nrofso2sC24/jCKKjEZjckx+X1M
ntqmQ/iDtTDwBqtXrKN+DQrsxIjaGZNQQKCDAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUAyJcopFgoEUH2Xguv62BWq9KZjowHwYDVR0jBBgwFoAUsIuRjS1Ftjcay5dw
dDVT0b8iRwgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA0
NC9zSXVSalMxRnRqY2F5NWR3ZERWVDBiOGlSd2cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL3NJdVJqUzFGdGpjYXk1ZHdkRFZUMGI4aVJ3Zy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNDQvQXlKY29wRmdvRVVI
MlhndXY2MkJXcTlLWmpvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWefjjANBgkqhkiG9w0BAQsFAAOCAQEAWlwqgYZT1M3GcbBHTuSgk8vrYu/Q
2EbfoOeD79yS7NEjVMbQ0OF7V+TXukKVBD/mE9roQ5T/V7TReUz7yKcruVZx0hig
VnE9tgARWZjZJKeay0bawwV3tZHw6djEmr3GsQ7ZRvMY6LM7LqtL0uEaqFzvemkv
wUU5n0YHyf8E/44MilqahBjVi9Lm1MkCfd/aDnpPZ+JfL5TogN3KGhWfWY1ht4v+
RIw3O2H8vf3uEGU/82FeP2yO5M00Y2W6/bRywhRmiR1B8vFNrYoBSwn+pIkD5l+/
PsiD2atze0xnwvd3j/Wfgv6sjXF34jjyTXrqhvy/2D3tgaa+gFEmC1qPOg==
-----END CERTIFICATE-----