Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/n2uLkDGFdTKdfsRiVWnn28X215c.roa
File:                     n2uLkDGFdTKdfsRiVWnn28X215c.roa (raw, json)
Hash identifier:          Bf/USx11ilpF5hcDlMSw7lIhY85lPlZL1H0iP8P8B+c=
Subject key identifier:   9F:6B:8B:90:31:85:75:32:9D:7E:C4:62:55:69:E7:DB:C5:F6:D7:97
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       01FA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/n2uLkDGFdTKdfsRiVWnn28X215c.roa
Signing time:             Tue 06 Sep 2022 03:18:49 +0000
ROA not before:           Tue 06 Sep 2022 03:18:49 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     7018
IP address blocks:        112.75.0.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Sep  6 03:18:49 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=9F6B8B90318575329D7EC4625569E7DBC5F6D797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3a:4f:4c:5f:54:34:39:08:e9:e3:50:25:8a:
                    62:b5:12:43:6e:da:f8:e5:be:26:fc:66:cf:13:54:
                    7f:a4:25:51:4e:48:f4:81:9b:e1:dc:ba:ba:c0:b4:
                    0c:34:9b:1e:99:e7:6c:21:ef:85:8c:c9:de:df:5d:
                    d7:e8:e2:57:18:6e:e0:bf:31:d6:b9:49:f8:fa:c3:
                    c3:69:57:28:a8:2b:a7:08:e7:f9:73:a1:92:a9:07:
                    77:85:65:b8:38:d2:89:7c:ff:28:b1:ef:87:7a:69:
                    7b:6d:3f:a1:25:11:3d:2d:fc:5d:b1:b1:d5:bf:38:
                    86:fc:c7:ac:78:f2:6d:e1:5c:db:09:48:1d:a2:eb:
                    2d:94:4c:34:44:fa:03:24:f5:3c:d0:c3:22:ec:8b:
                    bb:1a:3d:a2:96:f8:b7:5e:89:c7:59:5b:e3:72:1e:
                    70:e1:59:e9:a3:61:2b:21:93:3d:27:2a:f4:6a:d1:
                    f0:b9:ed:da:36:37:8a:cf:66:fa:5c:83:df:c5:42:
                    18:0f:68:a3:b6:fd:2a:d2:ed:31:69:05:5c:4d:6a:
                    d9:f4:66:37:ee:f6:ae:92:66:3f:fd:b0:fe:73:4e:
                    e8:23:59:5d:04:76:b7:80:55:28:b3:69:32:bf:a8:
                    63:ec:70:be:63:f4:1c:af:ab:de:0b:f4:6a:37:ce:
                    ce:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6B:8B:90:31:85:75:32:9D:7E:C4:62:55:69:E7:DB:C5:F6:D7:97
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/n2uLkDGFdTKdfsRiVWnn28X215c.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bf:fa:3f:9b:9b:cb:f3:ed:cf:29:54:59:8b:8a:64:97:0b:09:
         c5:9f:06:8f:14:f1:e3:4f:ba:ad:93:bb:39:2a:79:9a:85:06:
         1e:a0:b9:88:39:30:a4:d1:cc:23:73:8a:9b:ec:b4:87:8a:fc:
         6b:1d:e6:e4:5b:5e:54:ed:f9:69:51:4b:50:e8:6d:17:98:db:
         e5:25:bb:49:fa:73:4d:f4:55:77:42:f2:e5:00:dc:ca:2a:27:
         27:60:40:c4:37:3f:40:57:67:f3:e4:db:77:1d:09:09:af:9e:
         ee:6f:b4:96:92:38:99:a8:09:36:91:e3:10:9c:6c:fc:62:82:
         ac:f2:ea:67:36:b0:15:1b:f0:f0:c4:21:64:b0:85:ba:c3:f5:
         e6:d0:c4:25:cf:ae:3f:f8:3c:11:e8:fc:09:9f:9e:a5:52:7e:
         b4:da:e6:d8:10:d6:f3:3d:ed:b8:9e:c6:05:bc:1f:13:14:c8:
         7d:82:e6:07:c1:b1:3e:c2:95:f5:52:70:41:a4:cc:b0:19:e4:
         c5:6c:03:4c:90:bc:91:17:3c:44:50:9c:be:62:d2:29:78:e0:
         8a:9d:c2:66:73:f9:d1:eb:4f:2d:5a:78:c4:63:87:d1:e5:99:
         f9:c7:63:79:2f:0c:c5:fa:5a:89:9f:78:21:44:c4:7d:c0:bc:
         2d:f7:3d:ca
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICAfowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yMjA5MDYw
MzE4NDlaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDlGNkI4QjkwMzE4NTc1
MzI5RDdFQzQ2MjU1NjlFN0RCQzVGNkQ3OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDyOk9MX1Q0OQjp41AlimK1EkNu2vjlvib8Zs8TVH+kJVFOSPSB
m+HcurrAtAw0mx6Z52wh74WMyd7fXdfo4lcYbuC/Mda5Sfj6w8NpVyioK6cI5/lz
oZKpB3eFZbg40ol8/yix74d6aXttP6ElET0t/F2xsdW/OIb8x6x48m3hXNsJSB2i
6y2UTDRE+gMk9TzQwyLsi7saPaKW+LdeicdZW+NyHnDhWemjYSshkz0nKvRq0fC5
7do2N4rPZvpcg9/FQhgPaKO2/SrS7TFpBVxNatn0Zjfu9q6SZj/9sP5zTugjWV0E
dreAVSizaTK/qGPscL5j9Byvq94L9Go3zs6rAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUn2uLkDGFdTKdfsRiVWnn28X215cwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL24ydUxrREdGZFRLZGZz
UmlWV25uMjhYMjE1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAdwSwAwDQYJKoZIhvcNAQELBQADggEBAL/6P5uby/PtzylUWYuKZJcLCcWfBo8U
8eNPuq2TuzkqeZqFBh6guYg5MKTRzCNzipvstIeK/Gsd5uRbXlTt+WlRS1DobReY
2+Ulu0n6c030VXdC8uUA3MoqJydgQMQ3P0BXZ/Pk23cdCQmvnu5vtJaSOJmoCTaR
4xCcbPxigqzy6mc2sBUb8PDEIWSwhbrD9ebQxCXPrj/4PBHo/AmfnqVSfrTa5tgQ
1vM97biexgW8HxMUyH2C5gfBsT7ClfVScEGkzLAZ5MVsA0yQvJEXPERQnL5i0il4
4IqdwmZz+dHrTy1aeMRjh9HlmfnHY3kvDMX6WomfeCFExH3AvC33Pco=
-----END CERTIFICATE-----