Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/357/32xecwoj5UwUndBG1G2YthCqQJ8.roa
File:                     32xecwoj5UwUndBG1G2YthCqQJ8.roa (raw, json)
Hash identifier:          rZcNU+bN1rzjjbcO0s0kv8emVx6s3Dfc78JXJkK5VL0=
Subject key identifier:   DF:6C:5E:73:0A:23:E5:4C:14:9D:D0:46:D4:6D:98:B6:10:AA:40:9F
Certificate issuer:       /CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
Certificate serial:       08
Authority key identifier: B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/32xecwoj5UwUndBG1G2YthCqQJ8.roa
Signing time:             Thu 24 Feb 2022 02:50:35 +0000
ROA not before:           Thu 24 Feb 2022 02:50:35 +0000
ROA not after:            Fri 24 Feb 2023 02:38:33 +0000
asID:                     37963
IP address blocks:        112.124.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3BA6AEF3B8FA2E5D9B5E43438E0020D426A1ECA
        Validity
            Not Before: Feb 24 02:50:35 2022 GMT
            Not After : Feb 24 02:38:33 2023 GMT
        Subject: CN=DF6C5E730A23E54C149DD046D46D98B610AA409F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:f4:b8:44:1c:ba:44:86:ce:dd:5a:ac:d8:
                    d7:11:ef:bc:0f:f2:1b:b2:8c:34:9e:b0:28:51:55:
                    71:5a:3a:52:2b:69:7b:78:e0:ce:7c:8e:1c:cb:c7:
                    90:a7:22:61:1d:b7:38:df:c1:30:3c:63:72:f0:8d:
                    f0:89:d5:a3:75:d9:ec:81:fc:4f:c5:b3:c2:77:78:
                    ef:04:6e:ce:9c:c3:04:a1:95:75:7f:06:0e:06:3f:
                    19:3e:7a:0f:07:a3:38:26:c9:66:60:b8:27:0f:9c:
                    5e:47:7a:58:05:ad:ca:df:65:72:85:29:72:95:de:
                    f9:fe:6a:39:8e:41:3c:3b:55:10:ba:d6:a8:02:d9:
                    88:d0:d1:57:9e:45:4c:87:82:e2:bc:96:4d:89:8b:
                    74:08:28:0e:8c:a8:eb:5a:0a:8a:f7:50:8a:5d:5a:
                    9d:23:7a:35:30:db:f9:93:03:4e:35:bc:ee:49:e9:
                    4c:3f:46:84:b5:9f:6a:5c:c9:e2:7b:36:32:d5:01:
                    8f:cd:a8:5b:e3:36:31:34:ce:65:fc:84:fe:ca:91:
                    b7:4b:91:08:a6:58:0a:4f:02:0e:3c:08:85:4d:5d:
                    19:a7:1d:96:f9:ef:b7:0e:8f:d3:72:90:04:9f:cb:
                    02:c7:66:79:60:92:62:0a:c2:63:86:c3:07:96:3f:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6C:5E:73:0A:23:E5:4C:14:9D:D0:46:D4:6D:98:B6:10:AA:40:9F
            X509v3 Authority Key Identifier:
                keyid:B3:BA:6A:EF:3B:8F:A2:E5:D9:B5:E4:34:38:E0:02:0D:42:6A:1E:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/s7pq7zuPouXZteQ0OOACDUJqHso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/s7pq7zuPouXZteQ0OOACDUJqHso.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/357/32xecwoj5UwUndBG1G2YthCqQJ8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.124.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a7:83:1b:03:77:05:14:2b:07:5d:02:f9:2b:8f:53:92:3b:45:
         1e:94:92:ab:7b:09:66:15:a0:cf:fd:47:54:5d:54:97:6f:7f:
         a1:3a:59:bb:ed:ae:f6:09:6c:ef:84:b5:42:2d:94:ad:29:0c:
         de:26:9d:a8:26:23:ee:4f:6b:2a:56:f4:05:27:fb:2c:de:c8:
         62:52:c0:ef:51:e5:18:c9:a1:5e:d0:95:90:74:84:a2:55:37:
         c6:a4:47:39:12:cf:23:9c:db:51:70:d7:21:48:20:be:a1:2d:
         c6:3c:9b:25:f4:be:fd:31:1f:39:6c:c7:c1:01:f8:54:55:e0:
         bd:8c:02:be:3e:f9:28:17:ff:c8:54:a5:d5:e9:0d:3f:4f:eb:
         15:14:6c:f5:21:7e:77:78:6e:17:3f:ad:bc:8d:f7:f3:0d:96:
         c7:20:04:2d:ba:ce:27:75:28:47:c7:c5:3f:a4:ee:1a:90:ca:
         d2:b3:c6:86:03:b0:ed:d3:f0:07:bf:86:a2:2b:b6:71:d0:ba:
         05:55:2a:8b:73:d3:fb:c4:f1:5b:2a:7f:4f:54:f6:bd:ea:82:
         69:61:75:a4:8a:62:fa:30:53:35:c5:d7:c0:d9:00:74:4d:42:
         4c:80:f4:e5:05:a9:f7:0f:b2:0b:6f:d9:8e:fe:03:ce:25:58:
         a9:6a:9e:da
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCM0JB
NkFFRjNCOEZBMkU1RDlCNUU0MzQzOEUwMDIwRDQyNkExRUNBMB4XDTIyMDIyNDAy
NTAzNVoXDTIzMDIyNDAyMzgzM1owMzExMC8GA1UEAxMoREY2QzVFNzMwQTIzRTU0
QzE0OUREMDQ2RDQ2RDk4QjYxMEFBNDA5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANft9LhEHLpEhs7dWqzY1xHvvA/yG7KMNJ6wKFFVcVo6Uitpe3jg
znyOHMvHkKciYR23ON/BMDxjcvCN8InVo3XZ7IH8T8Wzwnd47wRuzpzDBKGVdX8G
DgY/GT56DwejOCbJZmC4Jw+cXkd6WAWtyt9lcoUpcpXe+f5qOY5BPDtVELrWqALZ
iNDRV55FTIeC4ryWTYmLdAgoDoyo61oKivdQil1anSN6NTDb+ZMDTjW87knpTD9G
hLWfalzJ4ns2MtUBj82oW+M2MTTOZfyE/sqRt0uRCKZYCk8CDjwIhU1dGacdlvnv
tw6P03KQBJ/LAsdmeWCSYgrCY4bDB5Y/gKECAwEAAaOCAfAwggHsMB0GA1UdDgQW
BBTfbF5zCiPlTBSd0EbUbZi2EKpAnzAfBgNVHSMEGDAWgBSzumrvO4+i5dm15DQ4
4AINQmoeyjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNTcv
czdwcTd6dVBvdVhadGVRME9PQUNEVUpxSHNvLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9zN3BxN3p1UG91WFp0ZVEwT09BQ0RVSnFIc28uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zNTcvMzJ4ZWN3b2o1VXdVbmRC
RzFHMll0aENxUUo4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AnB8MA0GCSqGSIb3DQEBCwUAA4IBAQCngxsDdwUUKwddAvkrj1OSO0UelJKrewlm
FaDP/UdUXVSXb3+hOlm77a72CWzvhLVCLZStKQzeJp2oJiPuT2sqVvQFJ/ss3shi
UsDvUeUYyaFe0JWQdISiVTfGpEc5Es8jnNtRcNchSCC+oS3GPJsl9L79MR85bMfB
AfhUVeC9jAK+PvkoF//IVKXV6Q0/T+sVFGz1IX53eG4XP628jffzDZbHIAQtus4n
dShHx8U/pO4akMrSs8aGA7Dt0/AHv4aiK7Zx0LoFVSqLc9P7xPFbKn9PVPa96oJp
YXWkimL6MFM1xdfA2QB0TUJMgPTlBan3D7ILb9mO/gPOJVipap7a
-----END CERTIFICATE-----