Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/497/ScxqW68X_P-oMGm59T78aN_FDJI.roa
File:                     ScxqW68X_P-oMGm59T78aN_FDJI.roa (raw, json)
Hash identifier:          L0eeeeAfecM3S7AfXDbq88t0u2ltxJMcQruz/Mh1tWo=
Subject key identifier:   49:CC:6A:5B:AF:17:FC:FF:A8:30:69:B9:F5:3E:FC:68:DF:C5:0C:92
Certificate issuer:       /CN=2744F7A0B1932B675EB31FD14CDA50255D288A5C
Certificate serial:       03
Authority key identifier: 27:44:F7:A0:B1:93:2B:67:5E:B3:1F:D1:4C:DA:50:25:5D:28:8A:5C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J0T3oLGTK2desx_RTNpQJV0oilw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/ScxqW68X_P-oMGm59T78aN_FDJI.roa
Signing time:             Thu 27 May 2021 05:07:01 +0000
ROA not before:           Thu 27 May 2021 05:07:01 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     56002
IP address blocks:        2405:ad00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2744F7A0B1932B675EB31FD14CDA50255D288A5C
        Validity
            Not Before: May 27 05:07:01 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=49CC6A5BAF17FCFFA83069B9F53EFC68DFC50C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f3:cd:9b:13:0f:e6:25:32:45:05:12:4f:6a:
                    d1:af:2d:24:84:e9:89:4e:84:c8:95:79:30:17:80:
                    eb:42:ce:ed:02:df:f1:d9:21:89:c7:52:a0:b5:f7:
                    d0:13:10:10:8f:b9:32:ad:eb:f8:c4:a1:b0:1a:c1:
                    c0:eb:ea:bd:d0:f8:a7:9e:f8:b8:06:75:57:73:38:
                    de:c1:8e:d5:fc:4d:b2:b7:bc:d1:44:6f:29:9f:76:
                    b8:67:b9:c6:6e:bd:1e:06:22:9f:97:78:66:a0:ef:
                    c9:c9:ab:89:04:6d:fe:0f:b7:73:7b:90:29:13:ae:
                    8d:24:c5:84:4a:b5:d8:20:85:48:d0:a3:4f:93:03:
                    d5:84:ba:99:cc:9c:92:1b:ea:09:85:60:61:db:d7:
                    c2:02:bd:ed:5c:8d:59:f5:2c:79:8a:98:5f:56:a6:
                    8e:60:20:d1:68:b6:79:93:7f:82:43:ac:fb:31:b6:
                    b2:3f:65:c2:7b:1d:fd:56:f0:6e:1c:02:19:b6:5e:
                    d9:74:07:c9:9c:91:29:bf:20:04:e2:2d:eb:93:1f:
                    a6:cb:24:38:25:45:64:d0:4f:06:f4:41:6f:03:78:
                    96:c2:75:bb:5c:6e:97:97:11:cf:14:d5:2c:80:a4:
                    2d:47:d4:56:fa:08:a7:ab:52:5b:be:ca:ad:d3:95:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CC:6A:5B:AF:17:FC:FF:A8:30:69:B9:F5:3E:FC:68:DF:C5:0C:92
            X509v3 Authority Key Identifier:
                keyid:27:44:F7:A0:B1:93:2B:67:5E:B3:1F:D1:4C:DA:50:25:5D:28:8A:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/J0T3oLGTK2desx_RTNpQJV0oilw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/J0T3oLGTK2desx_RTNpQJV0oilw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/ScxqW68X_P-oMGm59T78aN_FDJI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:ad00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:63:12:9a:96:95:f1:45:05:1b:d7:41:58:17:12:7a:c5:
         37:04:b8:ea:e8:04:6b:0c:39:2f:90:2b:ef:e8:0f:e0:47:2a:
         52:54:b4:25:f1:d4:99:c1:c5:22:4a:a9:55:4f:d2:fd:ed:15:
         7f:5a:99:ec:25:4d:db:65:3c:6f:15:df:a3:48:ec:f4:3e:dc:
         8d:38:82:01:7a:97:81:a8:ff:b6:43:b3:2d:f2:86:8b:bd:f3:
         8c:eb:57:d0:49:78:73:04:c3:95:ed:1f:e2:96:41:84:d5:48:
         5a:0b:92:34:53:f0:9a:f2:74:ae:16:2c:9d:61:be:43:84:03:
         2e:bb:36:27:97:71:f1:a6:5c:99:82:d7:9e:dc:44:a0:7c:8e:
         cc:89:21:3b:e1:23:a0:96:ee:88:81:04:70:ba:d2:56:94:8e:
         57:30:6e:1e:00:f1:1c:14:ff:62:90:61:96:3a:dd:53:58:9f:
         c1:8d:95:7e:80:7f:48:b1:dc:cc:4c:0e:00:75:85:b3:a5:a6:
         d5:ee:97:57:8d:7d:99:7d:2d:3d:85:49:34:c5:bd:e6:3f:2e:
         f0:10:0b:89:f0:8e:42:ec:45:ac:c8:c4:fb:e9:ec:a2:d6:53:
         9c:36:bb:e4:70:24:b2:ce:05:ec:07:ac:bb:73:2e:9c:60:73:
         d0:b4:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----