Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/082B413E991611ECAD44377C5A40D577.roa
File:                     082B413E991611ECAD44377C5A40D577.roa (raw, json)
Hash identifier:          WfwM7a77UJbCqAZRAvmkaD6vDnphpvbxFbQ9MG2uEk8=
Subject key identifier:   E8:7F:99:99:80:82:8F:14:3A:07:22:25:1E:69:FC:2D:E3:3E:72:FB
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       02F0
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/082B413E991611ECAD44377C5A40D577.roa
Signing time:             Tue 01 Mar 2022 04:14:05 +0000
ROA not before:           Tue 01 Mar 2022 04:14:01 +0000
ROA not after:            Wed 01 Mar 2023 04:14:01 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Mar  1 04:14:01 2022 GMT
            Not After : Mar  1 04:14:01 2023 GMT
        Subject: CN=621d9d8d-4b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:23:ac:d9:0b:ee:99:c2:95:a0:7f:03:76:
                    cc:06:28:9f:cd:51:28:e0:37:8b:4b:73:2c:78:dc:
                    0c:2f:44:aa:06:f3:6e:16:8d:3a:1d:30:dd:51:14:
                    46:57:7b:0e:86:ff:bc:2a:74:74:36:a6:7c:ba:ad:
                    3b:af:4d:6e:8c:f9:b8:73:c8:6e:3d:b2:75:2b:f2:
                    42:54:fe:e5:4f:92:96:9e:ac:0c:9d:f8:d5:f7:ca:
                    2c:78:1e:96:4c:b5:55:8a:62:49:d7:ff:38:30:30:
                    b6:95:74:60:1d:86:54:40:72:d5:09:6b:26:c3:17:
                    64:a1:e0:66:c0:1c:df:b6:f9:92:2c:46:b7:a0:77:
                    df:97:c0:b1:8d:6a:9a:b7:84:44:b3:df:13:9b:a0:
                    fb:33:3a:5f:09:ef:b7:c6:07:63:c4:87:65:86:59:
                    1f:c1:81:4e:6a:8b:39:7a:f6:23:3b:b6:6b:95:ef:
                    e3:3c:c4:44:d7:20:7f:e8:ba:83:ff:8c:ee:47:3e:
                    e3:e3:e3:78:2a:76:50:b9:d2:12:d4:7d:d6:03:ae:
                    15:b6:6b:89:1d:9a:f2:66:49:1a:f9:b3:0d:05:2c:
                    69:e6:ab:c3:ca:ed:99:8d:60:43:23:6b:43:5b:e4:
                    de:b8:cf:2b:df:e7:24:41:f1:d8:1c:f9:3e:a4:8f:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7F:99:99:80:82:8F:14:3A:07:22:25:1E:69:FC:2D:E3:3E:72:FB
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/082B413E991611ECAD44377C5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:a5:11:2b:16:5d:5a:06:5b:3f:bf:ba:5d:a2:6b:fd:3f:92:
         30:21:a0:08:a4:d1:d7:ad:5a:85:2a:bf:ac:51:60:ba:20:8e:
         9b:c8:6e:5b:85:6b:12:40:c0:b9:dd:6a:7a:75:a8:0a:32:e1:
         7d:2b:b7:36:ab:a7:d0:32:94:2b:a4:82:2e:cb:68:76:df:c5:
         ee:06:c6:99:f6:56:92:ab:ca:dd:37:10:4e:6e:ba:06:54:d9:
         fd:2b:dc:a1:1f:ab:23:e7:d2:07:6e:48:49:c7:35:5d:fd:b5:
         c7:82:4f:69:b2:44:29:92:4d:34:15:00:5f:38:51:4f:f1:33:
         eb:09:7d:f8:d3:e4:9c:4f:29:00:af:ef:24:bc:b1:c4:f6:6b:
         8e:58:3a:f1:62:db:97:fb:37:d0:de:af:ee:b8:db:de:6a:2c:
         5c:32:31:3f:91:3e:33:49:ff:3e:c1:c1:64:f8:e4:ab:1a:e7:
         17:57:b0:e3:4a:f8:5c:77:f9:73:fd:30:47:53:26:6f:02:51:
         aa:69:39:ab:02:e6:a5:92:e9:2e:30:6a:b2:88:85:55:e3:a3:
         04:a1:d7:cb:99:52:55:20:48:37:8b:be:f7:f4:b9:2e:13:3a:
         6a:88:5d:94:eb:32:05:a7:86:cd:4f:a0:57:f7:ad:70:e7:c6:
         4c:cb:c1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org