Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/341/jY067eclXSU1vEhqcaMNACqJM2w.roa
File:                     jY067eclXSU1vEhqcaMNACqJM2w.roa (raw, json)
Hash identifier:          UqD9qRiK7YQt51e9fCmbKsO2buz/w3ReBvzBJ4mos4E=
Subject key identifier:   8D:8D:3A:ED:E7:25:5D:25:35:BC:48:6A:71:A3:0D:00:2A:89:33:6C
Certificate issuer:       /CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
Certificate serial:       04
Authority key identifier: 85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/jY067eclXSU1vEhqcaMNACqJM2w.roa
Signing time:             Thu 24 Feb 2022 03:09:21 +0000
ROA not before:           Thu 24 Feb 2022 03:09:21 +0000
ROA not after:            Fri 24 Feb 2023 03:06:27 +0000
asID:                     37963
IP address blocks:        110.75.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=856DA85F9A8A286B652870D4E47635FF3D0E92AE
        Validity
            Not Before: Feb 24 03:09:21 2022 GMT
            Not After : Feb 24 03:06:27 2023 GMT
        Subject: CN=8D8D3AEDE7255D2535BC486A71A30D002A89336C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:69:31:fe:42:4e:4b:ca:da:52:fb:e9:fb:
                    ff:c8:9e:5f:08:32:7b:aa:3b:fb:1f:76:79:d1:2e:
                    02:93:d7:69:bd:e4:87:4c:98:8b:ce:4d:de:e4:e9:
                    d5:e5:12:34:78:f7:77:a9:f8:46:b6:eb:2f:88:cb:
                    e0:8b:21:e8:8f:6c:c2:2e:d4:7c:80:2e:97:d3:f5:
                    b5:bc:77:ec:53:13:e0:a3:1a:a5:9e:dd:ed:a3:6e:
                    ba:f1:a9:23:f4:8f:ca:ba:a1:73:71:b3:8d:98:94:
                    e8:03:87:e7:ae:a3:c2:26:76:5d:3d:d1:1d:0f:6a:
                    3c:ce:13:5f:6d:79:c2:3b:69:82:d3:bb:92:5d:4c:
                    05:da:a9:ad:9e:52:27:82:9e:5e:07:d9:07:c3:2f:
                    3c:f2:ae:25:43:bd:bd:a9:8b:98:ce:69:b0:ca:e7:
                    8a:c2:d4:c9:8d:06:b8:93:ac:88:c5:fe:92:f5:e8:
                    20:ad:ad:6e:06:c8:52:d6:a2:f4:21:70:1e:2d:c7:
                    9e:36:af:3f:e0:73:3b:f2:9a:8a:9b:32:36:5a:bd:
                    37:8b:a8:53:21:54:94:a5:e0:97:48:c2:e5:c9:a6:
                    7f:bf:a3:25:b7:eb:0f:01:14:af:c6:53:70:ff:5a:
                    19:57:b6:aa:24:f8:8a:86:b5:e2:5b:56:0d:87:ea:
                    cf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8D:3A:ED:E7:25:5D:25:35:BC:48:6A:71:A3:0D:00:2A:89:33:6C
            X509v3 Authority Key Identifier:
                keyid:85:6D:A8:5F:9A:8A:28:6B:65:28:70:D4:E4:76:35:FF:3D:0E:92:AE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/hW2oX5qKKGtlKHDU5HY1_z0Okq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/hW2oX5qKKGtlKHDU5HY1_z0Okq4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/341/jY067eclXSU1vEhqcaMNACqJM2w.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.75.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:ce:8f:53:06:61:f4:b4:80:96:94:fe:ce:2f:e8:86:e3:
         80:c2:12:ce:3b:b0:8b:3b:9a:4e:3d:86:24:6f:81:34:7f:e9:
         88:99:b1:0c:6e:79:7a:ea:45:a6:7b:59:8d:b5:3d:15:1e:52:
         69:e0:d6:e2:30:20:cc:14:28:4b:86:ea:28:39:90:b1:83:a8:
         ec:63:73:90:28:5e:43:1d:43:4a:85:b8:36:97:8a:cf:5d:6a:
         ce:47:b1:1f:55:6b:5c:d1:c2:91:61:f9:55:69:46:e5:05:08:
         4f:8c:6e:19:09:02:ca:08:af:20:2e:1a:dd:49:d5:df:a9:cd:
         05:c3:6b:d1:b4:db:2c:69:be:65:f2:b6:f4:de:8f:d6:0f:86:
         a9:c6:53:3f:a1:f1:18:b9:88:0a:32:5b:31:b6:ea:6b:e2:58:
         41:84:de:2c:d0:19:06:52:16:6c:8e:e7:bd:79:73:96:a9:36:
         f8:8d:57:9d:d6:1d:1a:48:f6:04:1e:88:e0:ee:00:f6:b5:e5:
         e3:95:36:44:b7:1e:a4:7c:04:06:c0:ae:97:d8:8c:b3:b3:93:
         81:49:02:92:c9:7e:f7:c3:6d:7d:fd:a9:9f:cb:c8:24:95:48:
         7e:a0:9d:93:03:c5:5a:b8:74:6d:21:91:25:ac:02:55:ea:87:
         52:4b:4b:1e
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NTZE
QTg1RjlBOEEyODZCNjUyODcwRDRFNDc2MzVGRjNEMEU5MkFFMB4XDTIyMDIyNDAz
MDkyMVoXDTIzMDIyNDAzMDYyN1owMzExMC8GA1UEAxMoOEQ4RDNBRURFNzI1NUQy
NTM1QkM0ODZBNzFBMzBEMDAyQTg5MzM2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANLYaTH+Qk5LytpS++n7/8ieXwgye6o7+x92edEuApPXab3kh0yY
i85N3uTp1eUSNHj3d6n4RrbrL4jL4Ish6I9swi7UfIAul9P1tbx37FMT4KMapZ7d
7aNuuvGpI/SPyrqhc3GzjZiU6AOH566jwiZ2XT3RHQ9qPM4TX215wjtpgtO7kl1M
BdqprZ5SJ4KeXgfZB8MvPPKuJUO9vamLmM5psMrnisLUyY0GuJOsiMX+kvXoIK2t
bgbIUtai9CFwHi3HnjavP+BzO/KaipsyNlq9N4uoUyFUlKXgl0jC5cmmf7+jJbfr
DwEUr8ZTcP9aGVe2qiT4ioa14ltWDYfqz1UCAwEAAaOCAfEwggHtMB0GA1UdDgQW
BBSNjTrt5yVdJTW8SGpxow0AKokzbDAfBgNVHSMEGDAWgBSFbahfmoooa2UocNTk
djX/PQ6SrjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDEv
aFcyb1g1cUtLR3RsS0hEVTVIWTFfejBPa3E0LmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9oVzJvWDVxS0tHdGxLSERVNUhZMV96ME9rcTQuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNDEvalkwNjdlY2xYU1UxdkVo
cWNhTU5BQ3FKTTJ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
B25LADANBgkqhkiG9w0BAQsFAAOCAQEAJKfOj1MGYfS0gJaU/s4v6IbjgMISzjuw
izuaTj2GJG+BNH/piJmxDG55eupFpntZjbU9FR5SaeDW4jAgzBQoS4bqKDmQsYOo
7GNzkCheQx1DSoW4NpeKz11qzkexH1VrXNHCkWH5VWlG5QUIT4xuGQkCygivIC4a
3UnV36nNBcNr0bTbLGm+ZfK29N6P1g+GqcZTP6HxGLmICjJbMbbqa+JYQYTeLNAZ
BlIWbI7nvXlzlqk2+I1XndYdGkj2BB6I4O4A9rXl45U2RLcepHwEBsCul9iMs7OT
gUkCksl+98Ntff2pn8vIJJVIfqCdkwPFWrh0bSGRJawCVeqHUktLHg==
-----END CERTIFICATE-----