Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/65/34t62y1eDtizzgl1bC7Na-HoY2I.roa
File:                     34t62y1eDtizzgl1bC7Na-HoY2I.roa (raw, json)
Hash identifier:          DakpzTtOX4ADXu1BmABvQjrTioPKOv/DiqnxeEgxno8=
Subject key identifier:   DF:8B:7A:DB:2D:5E:0E:D8:B3:CE:09:75:6C:2E:CD:6B:E1:E8:63:62
Certificate issuer:       /CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
Certificate serial:       04
Authority key identifier: 98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/34t62y1eDtizzgl1bC7Na-HoY2I.roa
Signing time:             Tue 11 Oct 2022 01:36:20 +0000
ROA not before:           Tue 11 Oct 2022 01:36:20 +0000
ROA not after:            Wed 11 Oct 2023 01:28:10 +0000
asID:                     23853
IP address blocks:        211.147.79.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9824C555228B28B698DDE77BC1ADD0E2807B86B9
        Validity
            Not Before: Oct 11 01:36:20 2022 GMT
            Not After : Oct 11 01:28:10 2023 GMT
        Subject: CN=DF8B7ADB2D5E0ED8B3CE09756C2ECD6BE1E86362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:b6:4c:df:56:72:05:bf:f0:94:86:31:1a:
                    d8:fb:9a:a0:16:5a:ea:e0:52:b0:1e:63:d6:3d:7e:
                    15:f8:2a:5d:84:38:8b:77:87:19:42:af:76:6a:0d:
                    c4:8e:42:21:52:ea:e0:be:76:f3:9e:5b:0e:65:21:
                    f6:17:38:4b:22:5f:3f:9e:be:c1:a8:0e:30:7b:36:
                    b8:ca:4d:a3:86:67:bd:ce:1a:cc:53:6e:41:78:31:
                    0a:9d:95:a7:18:71:10:24:c3:d6:97:07:ed:11:61:
                    6c:ce:cc:f0:e5:4f:95:85:0c:d2:4a:58:f5:78:0d:
                    16:cb:98:02:fc:e7:26:2d:54:d1:a9:92:6e:54:4c:
                    dc:b6:6a:38:30:f1:4d:37:4c:3f:d2:e0:40:b3:17:
                    6f:eb:75:40:1b:94:fb:c5:20:65:72:ef:19:4e:40:
                    dc:d9:0a:17:8f:21:5b:84:13:81:fd:94:6d:5a:a9:
                    f9:db:ae:ec:6d:06:7a:eb:fa:cf:76:eb:6a:58:d8:
                    f7:aa:da:aa:28:f4:37:77:db:e2:1e:cd:95:44:a1:
                    9a:b2:cb:c8:09:1e:f1:94:1c:a8:46:59:01:d3:8d:
                    48:1f:2f:dd:bb:35:7c:ea:fd:73:f3:51:f8:1c:62:
                    28:c1:c6:5a:d9:1b:ec:6d:2f:ab:16:26:38:d5:4d:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8B:7A:DB:2D:5E:0E:D8:B3:CE:09:75:6C:2E:CD:6B:E1:E8:63:62
            X509v3 Authority Key Identifier:
                keyid:98:24:C5:55:22:8B:28:B6:98:DD:E7:7B:C1:AD:D0:E2:80:7B:86:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/mCTFVSKLKLaY3ed7wa3Q4oB7hrk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65/34t62y1eDtizzgl1bC7Na-HoY2I.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.147.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:fe:cf:76:e8:c1:c6:da:71:e2:e1:a8:de:d7:79:02:55:01:
         61:a7:a1:c8:ef:c3:82:0b:e3:2d:a1:83:73:88:b8:99:05:f2:
         cd:2a:88:34:0e:8b:e1:6b:ea:0b:f3:41:47:cf:71:73:d6:2f:
         f4:51:ef:da:38:65:3a:9c:06:5a:d4:0b:f9:73:5d:ee:2f:cb:
         e3:e9:c2:46:68:e2:7a:3b:a1:98:6b:92:e1:a7:d4:59:a6:02:
         a2:e7:b3:c5:35:e2:1d:22:c8:d9:ac:1a:c1:ca:f3:59:96:9c:
         a4:70:77:55:4d:1e:ac:ba:39:68:ec:5c:a3:31:de:53:01:b2:
         65:3e:09:5a:84:59:3d:d8:6a:2c:7c:7d:f8:c1:5b:cc:af:97:
         06:09:be:ca:24:51:ff:27:0e:53:88:e8:b9:ed:b7:65:d7:92:
         2b:87:7f:af:1e:ac:e8:9f:5d:53:90:54:87:b3:64:64:b0:da:
         bb:b1:b0:7e:8a:f8:b1:c2:a6:52:88:39:cf:b3:a1:b1:62:f6:
         c4:12:fe:3f:15:0c:a6:db:92:2a:6f:3a:de:79:22:e7:86:52:
         93:c2:46:d9:af:df:b2:59:1f:73:27:9e:76:c8:85:c8:66:ce:
         f2:05:f9:e1:3c:32:55:b8:94:75:0c:63:c4:b9:35:48:12:6b:
         21:37:5b:7b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODI0
QzU1NTIyOEIyOEI2OThEREU3N0JDMUFERDBFMjgwN0I4NkI5MB4XDTIyMTAxMTAx
MzYyMFoXDTIzMTAxMTAxMjgxMFowMzExMC8GA1UEAxMoREY4QjdBREIyRDVFMEVE
OEIzQ0UwOTc1NkMyRUNENkJFMUU4NjM2MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANgitkzfVnIFv/CUhjEa2PuaoBZa6uBSsB5j1j1+FfgqXYQ4i3eH
GUKvdmoNxI5CIVLq4L52855bDmUh9hc4SyJfP56+wagOMHs2uMpNo4Znvc4azFNu
QXgxCp2VpxhxECTD1pcH7RFhbM7M8OVPlYUM0kpY9XgNFsuYAvznJi1U0amSblRM
3LZqODDxTTdMP9LgQLMXb+t1QBuU+8UgZXLvGU5A3NkKF48hW4QTgf2UbVqp+duu
7G0Geuv6z3braljY96raqij0N3fb4h7NlUShmrLLyAke8ZQcqEZZAdONSB8v3bs1
fOr9c/NR+BxiKMHGWtkb7G0vqxYmONVNS/sCAwEAAaOCAe8wggHrMB0GA1UdDgQW
BBTfi3rbLV4O2LPOCXVsLs1r4ehjYjAfBgNVHSMEGDAWgBSYJMVVIosotpjd53vB
rdDigHuGuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC82NS9t
Q1RGVlNLTEtMYVkzZWQ3d2EzUTRvQjdocmsuY3JsMGMGCCsGAQUFBwEBBFcwVTBT
BggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0Qw
MDAwL21DVEZWU0tMS0xhWTNlZDd3YTNRNG9CN2hyay5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtp
LmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzY1LzM0dDYyeTFlRHRpenpnbDFi
QzdOYS1Ib1kySS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5j
bi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
k08wDQYJKoZIhvcNAQELBQADggEBAH7+z3bowcbaceLhqN7XeQJVAWGnocjvw4IL
4y2hg3OIuJkF8s0qiDQOi+Fr6gvzQUfPcXPWL/RR79o4ZTqcBlrUC/lzXe4vy+Pp
wkZo4no7oZhrkuGn1FmmAqLns8U14h0iyNmsGsHK81mWnKRwd1VNHqy6OWjsXKMx
3lMBsmU+CVqEWT3Yaix8ffjBW8yvlwYJvsokUf8nDlOI6Lntt2XXkiuHf68erOif
XVOQVIezZGSw2ruxsH6K+LHCplKIOc+zobFi9sQS/j8VDKbbkipvOt55IueGUpPC
Rtmv37JZH3MnnnbIhchmzvIF+eE8MlW4lHUMY8S5NUgSayE3W3s=
-----END CERTIFICATE-----