Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/0946607E90C111ECAF9E237B5A40D577.roa
File:                     0946607E90C111ECAF9E237B5A40D577.roa (raw, json)
Hash identifier:          u4uPYDouzaMiPwd1S/63TQzqAoAylMoTWufksEt+DCk=
Subject key identifier:   0D:D3:D6:C3:32:23:11:C3:59:BC:B6:32:F5:6F:C5:2B:9F:54:54:39
Certificate issuer:       /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial:       32
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/0946607E90C111ECAF9E237B5A40D577.roa
Signing time:             Fri 18 Feb 2022 13:45:30 +0000
ROA not before:           Fri 18 Feb 2022 13:45:26 +0000
ROA not after:            Mon 02 Mar 2026 13:45:26 +0000
asID:                     33763
IP address blocks:        196.216.48.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
        Validity
            Not Before: Feb 18 13:45:26 2022 GMT
            Not After : Mar  2 13:45:26 2026 GMT
        Subject: CN=620fa2fa-1876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:d5:48:c5:76:8b:0d:38:d3:22:4b:4b:94:
                    bc:3c:9e:9e:ad:77:00:71:e4:bc:02:4b:6b:70:a1:
                    c0:85:cb:7a:f1:54:c4:f7:54:89:de:73:a7:41:e2:
                    84:4f:d0:d1:ca:c7:c9:2a:1b:dc:63:e0:ef:48:d0:
                    1b:5a:17:6b:e2:ef:7a:7e:1b:0d:46:0a:f5:ea:a1:
                    66:56:45:a7:fd:9a:2a:c6:f4:65:0c:58:58:d3:0e:
                    80:54:67:b5:a3:e1:b0:c2:84:49:5f:63:81:6f:27:
                    cc:5a:55:4b:35:00:a5:e6:11:b2:ee:4b:f2:e2:89:
                    d4:10:dc:06:4d:8f:14:8a:5c:b3:9e:ca:f8:a6:84:
                    8c:1f:3a:98:69:80:91:8b:5d:1e:7f:6d:df:41:b1:
                    48:5d:e0:9a:b2:c7:5b:ef:aa:d6:20:33:2b:65:09:
                    9c:4e:cd:68:d8:6b:0a:1f:e2:4b:a2:f2:11:b9:9e:
                    77:94:3f:65:4f:ee:e3:2f:0e:25:a8:a5:b1:95:66:
                    57:c9:c7:94:4c:83:93:91:0d:ce:7d:8d:31:03:11:
                    ce:e1:c0:59:90:3f:6c:5e:84:9d:95:48:ba:2e:26:
                    d7:c6:ae:35:35:77:5a:e3:6a:ab:eb:b9:00:18:2f:
                    20:c9:ca:11:b8:81:e2:90:88:63:7d:7a:be:04:8a:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D3:D6:C3:32:23:11:C3:59:BC:B6:32:F5:6F:C5:2B:9F:54:54:39
            X509v3 Authority Key Identifier:
                keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/0946607E90C111ECAF9E237B5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:f0:a4:d3:8b:5d:4e:6b:32:e7:39:d4:8d:f2:48:c0:18:99:
         8e:0b:7a:59:5a:59:b4:4d:1f:87:8c:0e:ed:ae:65:19:71:0d:
         15:1c:08:91:d1:3d:5b:e1:c2:13:88:da:f2:57:75:df:18:7f:
         ac:ec:2e:56:90:a1:0e:84:1a:53:b7:63:51:51:dc:68:37:f9:
         9c:24:aa:fc:86:6d:8d:a2:5c:42:29:d8:bc:a8:37:9d:38:e1:
         8e:da:4f:e2:30:91:82:6c:be:2d:ea:93:75:0f:b7:6d:17:32:
         68:4f:f9:61:89:0c:90:9f:9c:5d:fa:bc:01:8b:b5:be:23:0b:
         c7:b1:11:9a:40:2b:81:64:34:d0:61:50:25:d5:96:52:45:3c:
         e3:71:7a:b0:b7:a7:2f:eb:e0:8c:92:48:69:87:88:98:d5:19:
         2a:4c:87:91:47:a2:58:9b:ad:d2:8e:57:9b:04:db:17:25:b5:
         53:53:f5:ed:47:ea:27:43:28:62:2b:01:af:df:65:78:60:56:
         ad:d8:61:ee:c4:52:ae:13:43:62:e3:e8:f0:d8:f7:b0:e4:80:
         c9:f6:aa:95:7a:69:c5:6b:64:f6:97:37:a5:b1:34:7c:28:d2:
         68:48:92:a9:82:1e:1b:99:b7:61:08:f4:d8:33:47:4c:ce:0e:
         d5:d3:a1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org