Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/3OB0Bu5yi2uuOABEz072qBzcFzs.roa
File:                     3OB0Bu5yi2uuOABEz072qBzcFzs.roa (raw, json)
Hash identifier:          Y/An6kKAlrN/yR01nyqA6I78pr0CDpCehwX+LhWbryw=
Subject key identifier:   DC:E0:74:06:EE:72:8B:6B:AE:38:00:44:CF:4E:F6:A8:1C:DC:17:3B
Certificate issuer:       /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial:       0162
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/3OB0Bu5yi2uuOABEz072qBzcFzs.roa
Signing time:             Fri 21 Apr 2023 06:24:57 +0000
ROA not before:           Fri 21 Apr 2023 06:24:57 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     8100
IP address blocks:        210.79.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
        Validity
            Not Before: Apr 21 06:24:57 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=DCE07406EE728B6BAE380044CF4EF6A81CDC173B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:e5:4a:6c:eb:a0:1b:2a:db:3a:06:96:a8:
                    b5:ff:28:b7:99:14:93:7e:c0:f5:c9:af:46:62:49:
                    29:35:01:80:d7:78:08:35:b7:23:8b:55:02:bb:56:
                    a5:b8:22:6e:58:eb:ed:c4:09:d3:08:65:61:04:2d:
                    82:24:fc:7e:af:32:30:d1:96:4f:9d:bf:23:c1:9c:
                    81:06:d8:e6:6f:82:8d:cb:71:1b:98:4a:91:d5:35:
                    f9:2b:b1:b5:05:23:50:1b:76:58:94:3c:59:65:cf:
                    ed:47:3f:d7:d5:87:1d:2a:1e:17:22:e8:e5:5b:50:
                    6f:1d:10:42:6a:a6:3c:91:d7:8d:24:39:03:1e:23:
                    37:ad:eb:42:b7:40:56:ce:c6:7e:5b:0e:dd:7c:f4:
                    6e:f3:f7:c3:ea:11:b4:c2:9c:96:19:46:6b:45:83:
                    24:c1:0f:d8:36:3d:46:70:e7:4d:4b:9d:5b:e6:36:
                    27:6f:d3:5f:c3:60:92:a2:14:11:38:ab:2f:5b:7f:
                    b7:0a:e9:7c:ad:68:e0:d7:8e:ee:e7:ec:69:4a:c5:
                    14:73:07:e7:39:33:bb:66:e2:0e:f2:7e:38:22:a5:
                    58:f2:cc:cb:59:35:ad:c7:1b:0f:c7:d2:09:cb:30:
                    4a:7b:31:26:45:1b:e6:64:66:e3:28:dc:1e:f6:c0:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E0:74:06:EE:72:8B:6B:AE:38:00:44:CF:4E:F6:A8:1C:DC:17:3B
            X509v3 Authority Key Identifier:
                keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/3OB0Bu5yi2uuOABEz072qBzcFzs.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:37:5c:43:14:70:37:ad:e7:e9:e6:79:c2:58:f5:9e:62:3f:
         f4:09:5a:8c:3b:93:1a:c3:fe:f0:08:11:b0:ac:91:eb:3d:ec:
         ef:d8:7d:cf:55:90:99:57:25:0d:7a:bc:b3:49:3d:36:0b:57:
         95:8f:60:e2:5d:20:f5:42:a1:b1:08:16:12:59:82:fc:21:2e:
         18:86:14:e7:63:dd:ed:16:a4:10:87:e6:69:ae:68:c6:15:27:
         ea:fe:ad:eb:09:9a:c5:75:c5:8a:f8:24:84:61:98:fc:3e:cb:
         47:f9:2e:e3:17:46:93:1b:d8:81:35:cd:63:eb:d5:cf:dc:e5:
         81:70:97:bc:09:50:3a:0c:67:4d:19:05:68:28:9d:39:be:8b:
         46:89:63:e1:2d:92:d8:e9:2e:12:ee:17:83:3c:b9:85:7e:68:
         52:37:2a:ad:e5:3a:c4:5b:6e:3a:ab:c6:c5:81:b3:61:71:d3:
         b7:e0:6d:ae:8e:f5:d0:f5:19:00:5e:57:ce:07:20:a1:81:e5:
         0b:3f:e3:3d:c3:a2:2c:89:63:e8:b4:e7:c4:6c:22:8c:ca:22:
         cf:da:29:c6:95:2b:f7:70:16:ba:29:e9:d9:a7:48:cd:1a:3d:
         97:a4:7c:ef:5e:c0:87:c9:33:e6:17:f0:7c:48:7d:00:40:44:
         81:20:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----