Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/767/dR4cVsPGzqtvJ-pLVd_daRgYIZw.roa
File:                     dR4cVsPGzqtvJ-pLVd_daRgYIZw.roa (raw, json)
Hash identifier:          MIwYacr5hqeYGQmrFgWLgo75OnYBFJCgYH0IjcLfLGg=
Subject key identifier:   75:1E:1C:56:C3:C6:CE:AB:6F:27:EA:4B:55:DF:DD:69:18:18:21:9C
Certificate issuer:       /CN=CC8CF726F2323299108744D6930BEF18D677445D
Certificate serial:       17
Authority key identifier: CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/dR4cVsPGzqtvJ-pLVd_daRgYIZw.roa
Signing time:             Mon 20 Dec 2021 09:38:10 +0000
ROA not before:           Mon 20 Dec 2021 09:38:10 +0000
ROA not after:            Fri 16 Dec 2022 11:31:12 +0000
asID:                     48024
IP address blocks:        2403:3d80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC8CF726F2323299108744D6930BEF18D677445D
        Validity
            Not Before: Dec 20 09:38:10 2021 GMT
            Not After : Dec 16 11:31:12 2022 GMT
        Subject: CN=751E1C56C3C6CEAB6F27EA4B55DFDD691818219C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:52:46:fd:35:96:6d:29:17:61:5c:c6:a6:
                    4b:95:5f:85:c0:c0:00:6d:12:e0:b5:6e:b5:96:fc:
                    94:91:4f:51:75:e3:d7:08:05:68:fb:35:e9:0a:2b:
                    d7:4a:4c:ae:b6:0d:49:c4:81:c3:8a:30:1d:97:8b:
                    60:cd:14:64:5e:ae:c8:b2:50:a8:9b:f4:32:01:52:
                    97:82:a9:9b:d3:84:aa:44:30:89:ba:47:d1:b9:75:
                    e2:9a:9a:5c:08:9f:43:fc:3b:f7:fb:d2:df:0d:90:
                    f9:15:df:32:81:01:07:99:5f:b9:9d:60:57:25:2e:
                    49:ca:06:03:b8:33:fc:25:50:1a:60:b1:b5:cb:f4:
                    f2:0b:89:7d:db:b2:5c:6b:b3:1c:e0:88:2a:cb:3d:
                    98:51:c6:62:2a:c4:2f:04:34:78:b6:ed:21:a9:96:
                    19:33:84:dc:14:84:1a:46:2c:d8:87:61:ad:56:a2:
                    ae:7a:8c:51:82:1b:f2:97:b7:45:7e:d8:3f:85:66:
                    0c:36:70:a2:96:ef:17:69:a2:98:67:25:b8:84:2c:
                    97:8e:62:d6:23:ae:41:8b:e9:2e:1d:2d:54:cd:5d:
                    2c:3b:c4:29:6f:11:01:98:d7:8f:7a:9e:68:5b:fa:
                    56:af:bc:17:69:fd:b0:93:cf:73:69:38:50:e7:e2:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1E:1C:56:C3:C6:CE:AB:6F:27:EA:4B:55:DF:DD:69:18:18:21:9C
            X509v3 Authority Key Identifier:
                keyid:CC:8C:F7:26:F2:32:32:99:10:87:44:D6:93:0B:EF:18:D6:77:44:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zIz3JvIyMpkQh0TWkwvvGNZ3RF0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/767/dR4cVsPGzqtvJ-pLVd_daRgYIZw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:bd:7b:bb:41:cf:52:85:c8:d2:d9:3e:81:46:30:a4:27:0f:
         2e:b7:d6:d0:0f:39:be:68:6e:d7:24:12:86:56:12:60:24:71:
         68:97:5a:7c:0f:a3:e7:bf:84:c4:e9:d6:30:3a:a2:ad:9d:95:
         1b:c7:93:db:3d:59:fa:2c:b2:ca:0e:d7:0c:9f:07:7b:b8:81:
         f4:f0:04:a0:1f:76:62:e9:62:e7:c3:0a:61:9c:f1:c1:43:6c:
         b6:fb:ec:5c:01:44:1b:94:f7:cd:32:89:22:16:34:ea:4e:60:
         24:74:37:1b:eb:9f:7f:55:b1:65:cc:b9:20:28:8f:76:92:7e:
         f3:3e:18:6d:f3:86:a8:36:a7:c5:54:48:1b:e3:91:53:ad:2f:
         0d:e7:fe:67:88:86:25:95:c8:31:c8:1e:c3:f8:cf:38:eb:7f:
         d3:bc:a1:a5:d0:4f:f9:7a:8a:a7:db:df:9a:0a:f9:4a:85:d8:
         f9:c0:1a:2a:4c:56:7c:34:39:0e:07:d3:0c:ba:28:71:69:6f:
         33:05:e7:f9:54:75:9d:3a:17:21:d2:4c:47:75:12:21:28:4e:
         20:1a:67:9c:f1:79:3a:c3:a9:37:a0:84:97:56:f4:1a:f0:bb:
         f7:bb:fb:35:cc:e4:63:e1:96:de:02:21:e9:a1:ee:69:c2:52:
         3d:55:de:00
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQzhD
RjcyNkYyMzIzMjk5MTA4NzQ0RDY5MzBCRUYxOEQ2Nzc0NDVEMB4XDTIxMTIyMDA5
MzgxMFoXDTIyMTIxNjExMzExMlowMzExMC8GA1UEAxMoNzUxRTFDNTZDM0M2Q0VB
QjZGMjdFQTRCNTVERkRENjkxODE4MjE5QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMCGUkb9NZZtKRdhXMamS5VfhcDAAG0S4LVutZb8lJFPUXXj1wgF
aPs16Qor10pMrrYNScSBw4owHZeLYM0UZF6uyLJQqJv0MgFSl4Kpm9OEqkQwibpH
0bl14pqaXAifQ/w79/vS3w2Q+RXfMoEBB5lfuZ1gVyUuScoGA7gz/CVQGmCxtcv0
8guJfduyXGuzHOCIKss9mFHGYirELwQ0eLbtIamWGTOE3BSEGkYs2IdhrVairnqM
UYIb8pe3RX7YP4VmDDZwopbvF2mimGcluIQsl45i1iOuQYvpLh0tVM1dLDvEKW8R
AZjXj3qeaFv6Vq+8F2n9sJPPc2k4UOfia3MCAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBR1HhxWw8bOq28n6ktV391pGBghnDAfBgNVHSMEGDAWgBTMjPcm8jIymRCHRNaT
C+8Y1ndEXTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Njcv
ekl6M0p2SXlNcGtRaDBUV2t3dnZHTlozUkYwLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC96SXozSnZJeU1wa1FoMFRXa3d2dkdOWjNSRjAuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83NjcvZFI0Y1ZzUEd6cXR2Si1w
TFZkX2RhUmdZSVp3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACQDPYAwDQYJKoZIhvcNAQELBQADggEBADm9e7tBz1KFyNLZPoFGMKQnDy631tAP
Ob5obtckEoZWEmAkcWiXWnwPo+e/hMTp1jA6oq2dlRvHk9s9WfosssoO1wyfB3u4
gfTwBKAfdmLpYufDCmGc8cFDbLb77FwBRBuU980yiSIWNOpOYCR0Nxvrn39VsWXM
uSAoj3aSfvM+GG3zhqg2p8VUSBvjkVOtLw3n/meIhiWVyDHIHsP4zzjrf9O8oaXQ
T/l6iqfb35oK+UqF2PnAGipMVnw0OQ4H0wy6KHFpbzMF5/lUdZ06FyHSTEd1EiEo
TiAaZ5zxeTrDqTeghJdW9Brwu/e7+zXM5GPhlt4CIemh7mnCUj1V3gA=
-----END CERTIFICATE-----