Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/592C730090C411ECA65C9E855A40D577.roa
File:                     592C730090C411ECA65C9E855A40D577.roa (raw, json)
Hash identifier:          m/xyBNjDbGkcFwyeRhRjnA6uhZuAJFMo5fJ8UGpXVvM=
Subject key identifier:   D0:46:70:02:D3:A0:23:61:41:99:94:00:2A:F6:17:35:24:93:60:4E
Certificate issuer:       /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial:       37
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/592C730090C411ECA65C9E855A40D577.roa
Signing time:             Fri 18 Feb 2022 14:09:13 +0000
ROA not before:           Fri 18 Feb 2022 14:09:08 +0000
ROA not after:            Mon 02 Mar 2026 14:09:08 +0000
asID:                     33763
IP address blocks:        2c0f:f980:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
        Validity
            Not Before: Feb 18 14:09:08 2022 GMT
            Not After : Mar  2 14:09:08 2026 GMT
        Subject: CN=620fa888-0203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:af:b1:82:74:aa:00:94:37:21:43:7c:03:
                    8e:85:19:78:c3:71:1b:dc:90:b5:9e:ea:e8:00:bf:
                    eb:1d:4e:f6:9b:9f:2a:71:94:91:f5:74:48:f5:00:
                    a3:50:1a:be:2c:f8:15:08:c2:d7:ba:58:d8:2c:72:
                    c6:08:6c:1c:47:59:63:13:85:4a:86:8b:8c:d9:d5:
                    b4:51:46:da:85:6e:ce:49:e6:48:25:4f:cf:4a:3c:
                    ac:bd:98:7d:62:f4:b9:31:07:39:47:6f:19:b1:60:
                    10:f7:75:fb:ab:48:a7:aa:31:88:f4:31:73:6b:54:
                    10:16:01:63:47:cb:70:41:f2:73:e8:f0:8f:d0:9e:
                    72:b3:4c:c1:8b:6b:61:ec:0e:a3:8a:22:b1:75:72:
                    d1:51:d4:93:48:5b:61:7c:5d:0c:76:96:a6:99:68:
                    29:9c:3d:66:08:02:ef:53:33:5b:c9:29:83:ac:90:
                    7a:e8:04:64:45:f3:38:b6:93:88:05:87:5a:c1:d8:
                    eb:bd:01:07:83:47:34:d6:f9:9c:57:a5:aa:bc:5e:
                    3d:af:56:ee:e9:f2:b0:75:3d:dc:23:97:40:3e:1c:
                    40:88:8c:c5:d2:d6:49:db:dd:d0:03:eb:59:43:38:
                    df:0b:13:38:53:66:38:06:c3:d9:37:16:63:02:ca:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:46:70:02:D3:A0:23:61:41:99:94:00:2A:F6:17:35:24:93:60:4E
            X509v3 Authority Key Identifier:
                keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/592C730090C411ECA65C9E855A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f980:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:a4:b3:44:e4:c7:a9:22:05:a4:fd:13:cd:24:a6:4f:db:cb:
         4b:28:82:8e:72:3a:6d:69:da:fb:30:10:70:3e:7e:ec:f5:58:
         94:e0:0a:6b:25:99:81:c0:1b:ac:cc:84:e0:8a:a8:40:bf:e6:
         2e:ff:00:0e:e1:84:56:1f:ef:dd:ec:ce:12:81:ee:b7:27:0d:
         fb:ed:5c:06:93:f7:95:6a:3a:6a:d5:d1:47:18:df:bd:b9:07:
         8e:41:bd:08:b8:45:e4:97:21:2a:22:5b:e8:b0:01:c5:dc:25:
         2e:05:2a:87:20:6d:bd:ef:71:14:29:95:b3:08:a1:61:25:c7:
         b6:da:38:b1:14:28:ef:a2:62:d6:3a:d3:e5:4b:a5:b4:f4:04:
         f1:14:6a:ef:4c:25:59:db:19:d4:1a:06:da:62:7b:23:66:c8:
         b4:31:06:85:b1:a8:9f:ff:4c:62:b6:34:e6:a7:ec:17:7e:fe:
         b4:ab:96:b5:a9:0a:f5:47:54:1f:56:2b:fa:6c:e9:09:d5:5e:
         af:2a:b7:97:3d:30:f5:bf:ba:82:5d:eb:fe:0f:e5:c9:fc:8c:
         c0:79:59:3c:a3:c6:88:70:1d:a5:14:66:72:42:dd:99:ac:5c:
         68:a8:f6:59:ef:ba:85:b9:33:eb:20:4b:06:2e:2f:ab:c1:d6:
         e0:fb:08:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIBNzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NDc0QUFGMTEwLwYDVQQFEyhFQkFDQTkyQjg1QTQyQjhEMEI4OUM5Q0FBOTJBNUZD
QzVDOTZBQzE2MB4XDTIyMDIxODE0MDkwOFoXDTI2MDMwMjE0MDkwOFowGDEWMBQG
A1UEAwwNNjIwZmE4ODgtMDIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMhfr7GCdKoAlDchQ3wDjoUZeMNxG9yQtZ7q6AC/6x1O9pufKnGUkfV0SPUA
o1Aaviz4FQjC17pY2CxyxghsHEdZYxOFSoaLjNnVtFFG2oVuzknmSCVPz0o8rL2Y
fWL0uTEHOUdvGbFgEPd1+6tIp6oxiPQxc2tUEBYBY0fLcEHyc+jwj9CecrNMwYtr
YewOo4oisXVy0VHUk0hbYXxdDHaWpploKZw9ZggC71MzW8kpg6yQeugEZEXzOLaT
iAWHWsHY670BB4NHNNb5nFelqrxePa9W7unysHU93COXQD4cQIiMxdLWSdvd0APr
WUM43wsTOFNmOAbD2TcWYwLKQLsCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBTQRnAC
06AjYUGZlAAq9hc1JJNgTjAfBgNVHSMEGDAWgBTrrKkrhaQrjQuJycqpKl/MXJas
FjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTQ3NEEvNkVDQTZDOTY3NDdGMTFFQ0FDMUJGRTk2NUE0MEQ1NzcvNjZ5cEs0
V2tLNDBMaWNuS3FTcGZ6RnlXckJZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNjZ5cEs0V2tLNDBMaWNuS3FTcGZ6RnlXckJZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTQ3NEEvNkVDQTZDOTY3NDdGMTFFQ0FDMUJGRTk2NUE0
MEQ1NzcvNTkyQzczMDA5MEM0MTFFQ0E2NUM5RTg1NUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCwP+YBQMA0GCSqGSIb3DQEB
CwUAA4IBAQCBpLNE5MepIgWk/RPNJKZP28tLKIKOcjptadr7MBBwPn7s9ViU4Apr
JZmBwBuszITgiqhAv+Yu/wAO4YRWH+/d7M4Sge63Jw377VwGk/eVajpq1dFHGN+9
uQeOQb0IuEXklyEqIlvosAHF3CUuBSqHIG2973EUKZWzCKFhJce22jixFCjvomLW
OtPlS6W09ATxFGrvTCVZ2xnUGgbaYnsjZsi0MQaFsaif/0xitjTmp+wXfv60q5a1
qQr1R1QfViv6bOkJ1V6vKreXPTD1v7qCXev+D+XJ/IzAeVk8o8aIcB2lFGZyQt2Z
rFxoqPZZ77qFuTPrIEsGLi+rwdbg+wj7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org