Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/D9DBE00E90A011ECA2FA8E9D5A40D577.roa
File:                     D9DBE00E90A011ECA2FA8E9D5A40D577.roa (raw, json)
Hash identifier:          zcc3taLjneTB3txACymQks580BigCvT/qIxo28I1tTQ=
Subject key identifier:   9F:19:D0:06:BE:E9:BD:6A:98:11:57:CE:C2:81:A6:09:86:83:7F:9E
Certificate issuer:       /CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
Certificate serial:       28
Authority key identifier: EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/D9DBE00E90A011ECA2FA8E9D5A40D577.roa
Signing time:             Fri 18 Feb 2022 09:55:07 +0000
ROA not before:           Fri 18 Feb 2022 09:55:03 +0000
ROA not after:            Mon 02 Mar 2026 09:55:03 +0000
asID:                     33763
IP address blocks:        196.216.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361474AAF/serialNumber=EBACA92B85A42B8D0B89C9CAA92A5FCC5C96AC16
        Validity
            Not Before: Feb 18 09:55:03 2022 GMT
            Not After : Mar  2 09:55:03 2026 GMT
        Subject: CN=620f6cfb-d6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:1e:b9:0d:12:7c:53:0c:7c:a2:1e:7d:5a:
                    01:30:41:d3:fe:42:17:28:6d:b5:b0:42:7a:58:18:
                    eb:88:ed:73:25:86:70:98:0c:fe:27:47:bc:36:25:
                    d2:4c:eb:ea:1c:43:3b:36:68:ee:c2:d3:5b:e1:9e:
                    1d:89:08:d4:15:be:28:b9:20:3e:b4:7d:67:c8:12:
                    4a:f8:0f:08:14:5e:08:20:1d:b4:e8:a8:8c:93:87:
                    c5:90:2d:b5:06:2e:ab:ba:59:74:54:32:b1:b7:cf:
                    09:8f:0c:40:dc:8d:02:a5:0e:57:76:0a:c2:b8:9a:
                    54:a6:06:e4:b1:04:67:a8:28:6d:7c:03:6c:41:bf:
                    60:f3:a0:f2:15:c0:df:8f:cf:71:57:98:78:31:2d:
                    7c:1c:79:fc:8d:b5:31:b1:e3:0b:70:a8:3d:b1:15:
                    82:ea:3b:bd:3c:5c:22:ce:e7:83:b9:d8:c3:e7:b8:
                    5c:af:a7:4c:da:31:e6:e2:30:e6:95:56:aa:ea:fb:
                    1a:ee:f0:b9:0b:a9:87:7b:0e:00:92:e0:e1:5d:1f:
                    19:9e:21:a8:2c:74:ee:57:2e:33:a0:3f:56:13:ef:
                    36:66:c2:75:b0:25:3e:dc:67:2f:77:26:3d:e6:38:
                    d9:18:92:19:f9:5c:04:b7:a0:10:72:9a:6f:52:15:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:19:D0:06:BE:E9:BD:6A:98:11:57:CE:C2:81:A6:09:86:83:7F:9E
            X509v3 Authority Key Identifier:
                keyid:EB:AC:A9:2B:85:A4:2B:8D:0B:89:C9:CA:A9:2A:5F:CC:5C:96:AC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/66ypK4WkK40LicnKqSpfzFyWrBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/66ypK4WkK40LicnKqSpfzFyWrBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361474A/6ECA6C96747F11ECAC1BFE965A40D577/D9DBE00E90A011ECA2FA8E9D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.216.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:b8:74:5b:9e:82:12:a3:24:be:34:77:62:01:f6:4b:82:bf:
         c9:36:c8:a7:f1:fb:57:79:76:d8:02:ef:6f:fa:85:d7:2b:72:
         15:b9:f5:11:cf:40:63:84:5b:e5:67:57:f9:a9:e4:fa:8d:e9:
         0c:51:9b:da:15:7a:a7:78:1b:34:71:5c:fe:ad:3a:bd:26:38:
         7b:e1:61:82:dd:4e:74:fa:8f:d5:35:0d:55:54:8b:d6:2d:eb:
         4b:20:4f:4e:a9:0d:bd:84:a0:f8:14:34:36:4d:23:fb:34:e7:
         84:cd:2e:92:82:2c:b9:1e:7c:b1:a5:96:e1:ca:30:96:e3:89:
         5c:29:fe:ae:11:74:57:db:9a:6c:39:39:91:40:3b:e1:df:6b:
         f2:e6:7e:00:a3:93:73:94:03:1b:42:b0:da:96:7a:d8:69:98:
         96:e9:49:8e:bf:94:3f:db:ac:32:5b:83:d8:f5:eb:f6:e1:e0:
         3c:f9:17:c1:50:e2:26:4c:4d:74:9a:b9:d2:92:8a:cb:96:65:
         5b:ee:91:70:4f:c6:db:81:16:56:ce:d1:94:40:df:16:04:0a:
         4b:ec:11:32:b8:85:df:f1:e7:c7:7d:a0:3f:b5:fc:00:ac:67:
         26:61:96:fb:ba:59:56:28:1a:f5:2b:d2:3d:9d:9d:ab:10:8d:
         8f:bf:29:35
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBKDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzYx
NDc0QUFGMTEwLwYDVQQFEyhFQkFDQTkyQjg1QTQyQjhEMEI4OUM5Q0FBOTJBNUZD
QzVDOTZBQzE2MB4XDTIyMDIxODA5NTUwM1oXDTI2MDMwMjA5NTUwM1owGDEWMBQG
A1UEAwwNNjIwZjZjZmItZDZhOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKynHrkNEnxTDHyiHn1aATBB0/5CFyhttbBCelgY64jtcyWGcJgM/idHvDYl
0kzr6hxDOzZo7sLTW+GeHYkI1BW+KLkgPrR9Z8gSSvgPCBReCCAdtOiojJOHxZAt
tQYuq7pZdFQysbfPCY8MQNyNAqUOV3YKwriaVKYG5LEEZ6gobXwDbEG/YPOg8hXA
34/PcVeYeDEtfBx5/I21MbHjC3CoPbEVguo7vTxcIs7ng7nYw+e4XK+nTNox5uIw
5pVWqur7Gu7wuQuph3sOAJLg4V0fGZ4hqCx07lcuM6A/VhPvNmbCdbAlPtxnL3cm
PeY42RiSGflcBLegEHKab1IVleUCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBSfGdAG
vum9apgRV87CgaYJhoN/njAfBgNVHSMEGDAWgBTrrKkrhaQrjQuJycqpKl/MXJas
FjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTQ3NEEvNkVDQTZDOTY3NDdGMTFFQ0FDMUJGRTk2NUE0MEQ1NzcvNjZ5cEs0
V2tLNDBMaWNuS3FTcGZ6RnlXckJZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNjZ5cEs0V2tLNDBMaWNuS3FTcGZ6RnlXckJZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTQ3NEEvNkVDQTZDOTY3NDdGMTFFQ0FDMUJGRTk2NUE0
MEQ1NzcvRDlEQkUwMEU5MEEwMTFFQ0EyRkE4RTlENUE0MEQ1Nzcucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsTYODANBgkqhkiG9w0BAQsF
AAOCAQEARbh0W56CEqMkvjR3YgH2S4K/yTbIp/H7V3l22ALvb/qF1ytyFbn1Ec9A
Y4Rb5WdX+ank+o3pDFGb2hV6p3gbNHFc/q06vSY4e+Fhgt1OdPqP1TUNVVSL1i3r
SyBPTqkNvYSg+BQ0Nk0j+zTnhM0ukoIsuR58saWW4cowluOJXCn+rhF0V9uabDk5
kUA74d9r8uZ+AKOTc5QDG0Kw2pZ62GmYlulJjr+UP9usMluD2PXr9uHgPPkXwVDi
JkxNdJq50pKKy5ZlW+6RcE/G24EWVs7RlEDfFgQKS+wRMriF3/Hnx32gP7X8AKxn
JmGW+7pZViga9SvSPZ2dqxCNj78pNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:30 2024 by rpki-client on console-ams.rpki-client.org