Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/497/fyFlgzXFzsOlQDNfTT-wuoZzAKU.roa
File:                     fyFlgzXFzsOlQDNfTT-wuoZzAKU.roa (raw, json)
Hash identifier:          xFL4lxCXsgD4ixZomaNGK0nayaoI+i0SC68j9uwv/K0=
Subject key identifier:   7F:21:65:83:35:C5:CE:C3:A5:40:33:5F:4D:3F:B0:BA:86:73:00:A5
Certificate issuer:       /CN=46F8343DCDAD3AAC408560492C21B59D762BC456
Certificate serial:       0968
Authority key identifier: 46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/fyFlgzXFzsOlQDNfTT-wuoZzAKU.roa
Signing time:             Tue 07 Jun 2022 20:13:14 +0000
ROA not before:           Tue 07 Jun 2022 20:13:14 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     56002
IP address blocks:        2405:ad00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2408 (0x968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46F8343DCDAD3AAC408560492C21B59D762BC456
        Validity
            Not Before: Jun  7 20:13:14 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=7F21658335C5CEC3A540335F4D3FB0BA867300A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:3d:a5:9c:37:d7:41:ca:b8:db:22:05:d5:
                    ac:e4:1a:c0:12:c1:5e:f2:49:df:58:b3:5a:0f:d3:
                    f5:28:84:b7:c2:62:44:90:c3:7e:e4:fa:31:29:88:
                    0c:73:ec:f6:e0:b4:42:e7:4b:55:a5:f4:7c:e1:60:
                    3b:92:26:f5:d5:56:8d:e0:5c:c8:c5:ed:fb:d2:a2:
                    a6:e8:de:11:15:b5:d8:b7:bd:34:e7:1e:46:33:15:
                    81:7f:c1:56:be:d7:01:42:db:f8:2d:d3:8e:2f:b8:
                    5f:ab:0d:89:e6:48:12:6e:a3:8c:12:39:67:35:a2:
                    0d:8e:fc:6e:54:bd:b0:bd:d2:32:51:72:63:b0:70:
                    d6:93:78:18:6c:a4:3d:32:c4:f7:1f:86:fb:ae:bd:
                    49:30:12:00:e9:a0:0a:72:58:86:6b:6c:5c:40:e1:
                    85:4f:3f:19:09:22:e0:ed:d6:4f:5a:d1:7e:a8:aa:
                    9e:56:28:4f:cc:8d:09:4f:57:82:f7:24:58:15:60:
                    54:5e:15:67:8a:70:29:0d:89:73:4c:25:88:84:b9:
                    02:c3:76:ff:dc:59:2a:95:3a:9c:da:82:eb:06:e7:
                    6e:b5:a3:c0:7b:f5:72:5a:4f:47:b0:a1:1c:32:5a:
                    f3:74:90:5d:e2:0b:93:ce:3b:2a:fd:d9:2c:03:42:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:21:65:83:35:C5:CE:C3:A5:40:33:5F:4D:3F:B0:BA:86:73:00:A5
            X509v3 Authority Key Identifier:
                keyid:46:F8:34:3D:CD:AD:3A:AC:40:85:60:49:2C:21:B5:9D:76:2B:C4:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/Rvg0Pc2tOqxAhWBJLCG1nXYrxFY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/497/fyFlgzXFzsOlQDNfTT-wuoZzAKU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:ad00::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:78:5a:26:41:cd:65:98:bd:cc:ec:6d:ad:14:dc:0e:96:e9:
         65:ba:5b:82:00:45:b9:2d:2c:52:3a:1b:f0:7c:5e:20:ff:38:
         41:5a:40:2b:ad:ad:f5:8f:72:87:a9:fe:4f:93:28:bf:e3:d8:
         6c:35:55:f1:65:28:3f:75:18:f6:64:2c:e6:56:a4:f8:04:78:
         6b:f4:f3:3d:a3:9d:15:db:95:e6:3b:68:7c:81:3c:50:4f:b3:
         c3:ea:4c:7b:18:cd:fe:0f:eb:75:fd:85:1e:62:18:30:6b:df:
         79:53:1d:9e:9f:bc:ed:58:e5:3d:4c:1d:81:e5:43:30:79:d2:
         f7:25:d7:3e:29:af:c0:0f:0d:2a:18:51:b1:03:00:a1:50:5c:
         97:35:43:c6:f0:c6:79:aa:3d:c3:a0:56:b2:fa:5c:99:e1:3e:
         a2:39:41:ae:44:2a:4c:ad:da:c2:f0:14:a9:87:d6:d1:15:00:
         4e:37:a4:50:c9:d7:ef:37:14:a1:a5:be:6a:d2:8c:6f:1e:ce:
         f6:52:bf:0d:e3:12:a6:33:df:4e:de:19:a0:65:41:f9:1c:09:
         f4:56:ca:28:07:73:26:fe:81:75:0a:0c:b3:f3:59:68:d0:e1:
         3b:2b:3d:ad:56:22:24:c2:75:fb:0e:0e:69:65:7e:97:ae:63:
         e8:9e:27:63
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDZG
ODM0M0RDREFEM0FBQzQwODU2MDQ5MkMyMUI1OUQ3NjJCQzQ1NjAeFw0yMjA2MDcy
MDEzMTRaFw0yMzA2MDcwMzM0NDNaMDMxMTAvBgNVBAMTKDdGMjE2NTgzMzVDNUNF
QzNBNTQwMzM1RjREM0ZCMEJBODY3MzAwQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzmj2lnDfXQcq42yIF1azkGsASwV7ySd9Ys1oP0/UohLfCYkSQ
w37k+jEpiAxz7PbgtELnS1Wl9HzhYDuSJvXVVo3gXMjF7fvSoqbo3hEVtdi3vTTn
HkYzFYF/wVa+1wFC2/gt044vuF+rDYnmSBJuo4wSOWc1og2O/G5UvbC90jJRcmOw
cNaTeBhspD0yxPcfhvuuvUkwEgDpoApyWIZrbFxA4YVPPxkJIuDt1k9a0X6oqp5W
KE/MjQlPV4L3JFgVYFReFWeKcCkNiXNMJYiEuQLDdv/cWSqVOpzagusG5261o8B7
9XJaT0ewoRwyWvN0kF3iC5POOyr92SwDQn9PAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUfyFlgzXFzsOlQDNfTT+wuoZzAKUwHwYDVR0jBBgwFoAURvg0Pc2tOqxAhWBJ
LCG1nXYrxFYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDk3
L1J2ZzBQYzJ0T3F4QWhXQkpMQ0cxblhZcnhGWS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvUnZnMFBjMnRPcXhBaFdCSkxDRzFuWFlyeEZZLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDk3L2Z5RmxnelhGenNPbFFE
TmZUVC13dW9aekFLVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD
BQAkBa0AMA0GCSqGSIb3DQEBCwUAA4IBAQBReFomQc1lmL3M7G2tFNwOlulluluC
AEW5LSxSOhvwfF4g/zhBWkArra31j3KHqf5Pkyi/49hsNVXxZSg/dRj2ZCzmVqT4
BHhr9PM9o50V25XmO2h8gTxQT7PD6kx7GM3+D+t1/YUeYhgwa995Ux2en7ztWOU9
TB2B5UMwedL3Jdc+Ka/ADw0qGFGxAwChUFyXNUPG8MZ5qj3DoFay+lyZ4T6iOUGu
RCpMrdrC8BSph9bRFQBON6RQydfvNxShpb5q0oxvHs72Ur8N4xKmM99O3hmgZUH5
HAn0VsooB3Mm/oF1Cgyz81lo0OE7Kz2tViIkwnX7Dg5pZX6XrmPonidj
-----END CERTIFICATE-----