Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/AA7611C490C111EC9F3FEF7D5A40D577.roa
File:                     AA7611C490C111EC9F3FEF7D5A40D577.roa (raw, json)
Hash identifier:          8scRHyH7ElaD3HkzZ+OvNTZShmKP87MHtuNtRxUFBpo=
Subject key identifier:   8F:B6:67:7D:7A:19:85:04:CB:6A:AD:EE:2F:50:72:F5:4E:5F:B2:06
Certificate issuer:       /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial:       34
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/AA7611C490C111EC9F3FEF7D5A40D577.roa
Signing time:             Fri 18 Feb 2022 13:50:00 +0000
ROA not before:           Fri 18 Feb 2022 13:49:57 +0000
ROA not after:            Mon 02 Mar 2026 13:49:57 +0000
asID:                     33763
IP address blocks:        196.216.54.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
        Validity
            Not Before: Feb 18 13:49:57 2022 GMT
            Not After : Mar  2 13:49:57 2026 GMT
        Subject: CN=620fa408-5731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:66:65:e9:97:37:74:93:9d:5a:db:be:ac:
                    b1:cf:27:8c:6b:f3:91:fa:c9:e0:19:b5:e5:13:01:
                    f9:9a:ca:82:36:c6:92:b4:d4:b2:5f:8f:f7:0b:36:
                    e7:32:85:a6:3e:4d:f9:d9:dc:0e:b9:d1:87:6c:03:
                    3e:73:9c:2b:e3:fd:b1:9c:f3:e1:54:97:89:b6:7d:
                    61:12:98:d5:6b:e7:3a:60:5c:61:08:9d:ff:e8:2c:
                    0c:a9:dd:b4:b6:b5:32:99:91:0d:a9:bf:b2:a2:c6:
                    56:52:e3:99:3d:3a:c3:cd:cb:51:9d:0e:44:f3:79:
                    c9:58:29:fa:ff:e7:a9:52:d4:cf:33:b1:10:71:0c:
                    94:ba:01:04:8c:c2:3d:31:8e:14:ce:60:fe:d7:34:
                    be:48:55:49:bd:8d:df:67:bb:e7:38:30:8f:d9:3e:
                    95:d8:d2:93:9f:e6:6e:c5:c5:32:75:91:b2:c3:74:
                    e6:e4:51:71:cf:42:67:27:77:8f:72:15:c0:c7:d9:
                    34:75:38:8f:3e:3b:73:fe:0f:07:54:b0:ab:51:c6:
                    7c:aa:59:00:4b:a5:ab:56:7d:a7:ac:cb:b9:0d:84:
                    cc:7d:87:9f:a4:f4:a9:3f:3d:23:ce:21:5c:d3:0b:
                    36:c1:9f:58:c2:fb:4c:c9:0f:0a:7e:78:4b:8c:8e:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B6:67:7D:7A:19:85:04:CB:6A:AD:EE:2F:50:72:F5:4E:5F:B2:06
            X509v3 Authority Key Identifier:
                keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/AA7611C490C111EC9F3FEF7D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:21:fa:30:97:db:2b:3d:da:7d:b4:68:a8:62:31:d4:64:da:
         33:8d:c5:81:a0:3f:45:69:01:62:86:66:ba:1d:e5:70:d1:d8:
         71:b2:d9:31:61:d4:8d:84:7d:79:f4:dc:0f:a5:dd:9a:63:6b:
         79:6f:a4:0b:06:bf:2c:36:1a:76:93:25:71:48:6c:73:17:0c:
         a9:6b:c0:0b:51:2f:58:c0:a1:c2:43:af:8b:d8:5f:43:5e:d6:
         6b:f3:1a:26:aa:f7:e5:28:8e:29:97:5c:6d:22:30:94:1b:8e:
         12:9c:cf:40:a3:db:01:cd:17:3b:31:e1:0a:27:40:dc:2c:f5:
         e6:e4:7d:6e:1b:83:98:6b:cb:5b:c8:f2:48:5b:74:3c:3d:74:
         1b:6d:27:b1:43:e0:27:d8:7e:70:7d:ec:b6:dd:12:59:01:f9:
         a3:c8:4f:14:da:bc:26:e4:e1:20:80:d2:03:bd:c4:81:99:d0:
         9b:09:71:0e:ee:3c:9b:a4:06:7b:d6:6c:b2:81:70:eb:f5:cb:
         8c:22:27:13:d0:49:6c:43:05:ce:07:94:1f:9c:46:4c:e8:f4:
         6a:2e:b7:87:21:fb:ea:12:08:2f:1f:1e:af:cb:48:4f:37:5d:
         6f:79:8a:a9:b1:12:b1:02:ee:17:9a:b4:94:fd:2d:1f:96:22:
         12:d4:0b:85
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBNDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NDc0QUFGMTEwLwYDVQQFEyhFQkFDQTkyQjg1QTQyQjhEMEI4OUM5Q0FBOTJBNUZD
QzVDOTZBQzE2MB4XDTIyMDIxODEzNDk1N1oXDTI2MDMwMjEzNDk1N1owGDEWMBQG
A1UEAwwNNjIwZmE0MDgtNTczMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKtwZmXplzd0k51a276ssc8njGvzkfrJ4Bm15RMB+ZrKgjbGkrTUsl+P9ws2
5zKFpj5N+dncDrnRh2wDPnOcK+P9sZzz4VSXibZ9YRKY1WvnOmBcYQid/+gsDKnd
tLa1MpmRDam/sqLGVlLjmT06w83LUZ0ORPN5yVgp+v/nqVLUzzOxEHEMlLoBBIzC
PTGOFM5g/tc0vkhVSb2N32e75zgwj9k+ldjSk5/mbsXFMnWRssN05uRRcc9CZyd3
j3IVwMfZNHU4jz47c/4PB1Swq1HGfKpZAEulq1Z9p6zLuQ2EzH2Hn6T0qT89I84h
XNMLNsGfWML7TMkPCn54S4yO9ucCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSPtmd9
ehmFBMtqre4vUHL1Tl+yBjAfBgNVHSMEGDAWgBTrrKkrhaQrjQuJycqpKl/MXJas
FjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTQ3NEEvNkVDQTZDOTY3NDdGMTFFQ0FDMUJGRTk2NUE0MEQ1NzcvNjZ5cEs0
V2tLNDBMaWNuS3FTcGZ6RnlXckJZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNjZ5cEs0V2tLNDBMaWNuS3FTcGZ6RnlXckJZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTQ3NEEvNkVDQTZDOTY3NDdGMTFFQ0FDMUJGRTk2NUE0
MEQ1NzcvQUE3NjExQzQ5MEMxMTFFQzlGM0ZFRjdENUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcTYNjANBgkqhkiG9w0BAQsF
AAOCAQEAKiH6MJfbKz3afbRoqGIx1GTaM43FgaA/RWkBYoZmuh3lcNHYcbLZMWHU
jYR9efTcD6XdmmNreW+kCwa/LDYadpMlcUhscxcMqWvAC1EvWMChwkOvi9hfQ17W
a/MaJqr35SiOKZdcbSIwlBuOEpzPQKPbAc0XOzHhCidA3Cz15uR9bhuDmGvLW8jy
SFt0PD10G20nsUPgJ9h+cH3stt0SWQH5o8hPFNq8JuThIIDSA73EgZnQmwlxDu48
m6QGe9ZssoFw6/XLjCInE9BJbEMFzgeUH5xGTOj0ai63hyH76hIILx8er8tITzdd
b3mKqbESsQLuF5q0lP0tH5YiEtQLhQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:06 2024 by rpki-client on console-fra.rpki-client.org