Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/16C8CEF0B09011EC9913A06D5A40D577.roa
File:                     16C8CEF0B09011EC9913A06D5A40D577.roa (raw, json)
Hash identifier:          C8odgTR1dcExpuxkhhRcuEDO+xOcyS/1dXffeEMLulA=
Subject key identifier:   6C:F7:8E:C0:D2:31:42:1F:43:5C:3E:78:56:B3:00:4A:18:3C:15:42
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0371
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/16C8CEF0B09011EC9913A06D5A40D577.roa
Signing time:             Thu 31 Mar 2022 01:15:45 +0000
ROA not before:           Thu 31 Mar 2022 01:15:40 +0000
ROA not after:            Fri 31 Mar 2023 01:15:40 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Mar 31 01:15:40 2022 GMT
            Not After : Mar 31 01:15:40 2023 GMT
        Subject: CN=624500c0-b0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:22:ff:2a:5b:f3:6e:76:0b:b4:bf:34:a9:
                    2e:40:a8:c7:2c:d3:14:c7:96:44:c9:e1:a1:a4:92:
                    c4:4d:78:24:85:f2:1f:55:d8:8e:41:aa:2e:80:9e:
                    b1:ce:63:ce:00:0a:d8:cc:12:c7:bd:60:7d:fb:d3:
                    0c:40:aa:6d:1f:d1:d0:fc:72:83:3c:0d:93:48:8a:
                    25:8f:a6:ed:17:71:e0:9e:4e:19:e9:e5:cb:10:79:
                    fa:71:50:f1:3d:39:4f:82:ea:12:60:13:bf:87:3f:
                    5b:f9:a9:d0:fe:40:6b:06:82:05:d3:50:69:d4:b6:
                    d5:1e:ba:23:22:5c:03:cc:27:0c:c8:85:fd:44:4a:
                    ef:37:44:74:a5:c5:31:ba:b9:f6:9d:44:f8:ad:4a:
                    10:c9:bd:2b:7e:d3:7e:e5:56:7a:c1:7b:89:d9:a2:
                    2d:2b:38:5a:b0:c1:11:3f:1b:fa:25:f1:bf:5d:20:
                    bb:6c:24:bf:76:d4:46:0e:b7:b5:19:4c:51:df:13:
                    64:a1:6d:37:0a:b6:97:3a:c7:4a:e6:93:87:56:e4:
                    b1:1f:df:b0:58:b2:84:8c:85:1f:93:dd:62:f6:7f:
                    6c:18:d4:9a:00:be:b0:70:3f:9e:29:16:56:b6:9d:
                    32:da:30:e2:cb:25:43:47:0a:a0:bc:b2:9e:fb:b6:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F7:8E:C0:D2:31:42:1F:43:5C:3E:78:56:B3:00:4A:18:3C:15:42
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/16C8CEF0B09011EC9913A06D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:66:10:50:f1:e3:67:11:2c:36:53:6d:4c:30:36:ad:32:
         2d:b5:20:16:30:cb:14:b7:40:3a:70:3a:80:9d:fc:2f:40:5d:
         4d:ba:cc:37:b5:a7:84:a9:0c:d1:e3:db:b4:c8:e5:45:76:f2:
         e9:f8:d8:8f:3c:91:97:c3:01:c7:d7:d9:9e:08:15:dd:30:a7:
         58:f3:20:f0:2b:65:7d:ce:21:18:79:63:5e:37:03:77:61:37:
         af:c9:d6:35:90:ff:c4:1b:28:4c:7e:d9:33:0e:36:4b:15:4a:
         23:fe:4c:04:3c:f7:cd:db:81:00:f9:bf:83:40:14:8b:7b:9d:
         2c:2a:4f:29:08:22:28:f4:33:ee:8c:58:32:48:90:b3:ff:77:
         06:94:c6:7c:3a:88:11:56:e0:42:f1:04:2d:1e:70:fc:5c:fd:
         a0:34:ad:22:09:ea:32:97:13:73:58:84:8b:15:b8:24:d9:48:
         90:4a:62:1c:ac:01:21:a8:85:4d:c9:ac:44:d5:09:e1:8c:0b:
         09:5f:4d:27:64:04:6a:7a:c3:14:51:66:63:07:3f:07:d6:29:
         f2:f2:e9:87:d6:e7:23:7b:04:00:a8:99:d7:52:a3:c2:32:e3:
         c9:f6:9c:48:43:8f:50:e6:38:aa:61:0c:0e:c9:4a:08:74:32:
         e5:05:13:58
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAzMzEwMTE1NDBaFw0yMzAzMzEwMTE1NDBaMBgxFjAU
BgNVBAMMDTYyNDUwMGMwLWIwZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDxiL/KlvzbnYLtL80qS5AqMcs0xTHlkTJ4aGkksRNeCSF8h9V2I5Bqi6A
nrHOY84ACtjMEse9YH370wxAqm0f0dD8coM8DZNIiiWPpu0XceCeThnp5csQefpx
UPE9OU+C6hJgE7+HP1v5qdD+QGsGggXTUGnUttUeuiMiXAPMJwzIhf1ESu83RHSl
xTG6ufadRPitShDJvSt+037lVnrBe4nZoi0rOFqwwRE/G/ol8b9dILtsJL921EYO
t7UZTFHfE2ShbTcKtpc6x0rmk4dW5LEf37BYsoSMhR+T3WL2f2wY1JoAvrBwP54p
Fla2nTLaMOLLJUNHCqC8sp77tsFFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUbPeO
wNIxQh9DXD54VrMAShg8FUIwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzE2QzhDRUYwQjA5MDExRUM5OTEzQTA2RDVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBABgaZhBQ8eNnESw2U21MMDatMi21IBYwyxS3QDpwOoCd/C9AXU26zDe1
p4SpDNHj27TI5UV28un42I88kZfDAcfX2Z4IFd0wp1jzIPArZX3OIRh5Y143A3dh
N6/J1jWQ/8QbKEx+2TMONksVSiP+TAQ8983bgQD5v4NAFIt7nSwqTykIIij0M+6M
WDJIkLP/dwaUxnw6iBFW4ELxBC0ecPxc/aA0rSIJ6jKXE3NYhIsVuCTZSJBKYhys
ASGohU3JrETVCeGMCwlfTSdkBGp6wxRRZmMHPwfWKfLy6YfW5yN7BAComddSo8Iy
48n2nEhDj1DmOKphDA7JSgh0MuUFE1g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org