Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/204C4FD033F111ED9D59AACBF1222468.roa
File:                     204C4FD033F111ED9D59AACBF1222468.roa (raw, json)
Hash identifier:          BLEYY3PiuyyRMRrEfLrC13S7F9R8f4CTbxaMqROITvI=
Subject key identifier:   4C:E3:0A:53:C9:46:3D:2E:AB:D4:FA:18:CC:3D:7B:96:CB:C7:BF:16
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       06E2
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/204C4FD033F111ED9D59AACBF1222468.roa
Signing time:             Wed 14 Sep 2022 05:50:24 +0000
ROA not before:           Wed 14 Sep 2022 05:50:18 +0000
ROA not after:            Thu 14 Sep 2023 05:50:18 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Sep 14 05:50:18 2022 GMT
            Not After : Sep 14 05:50:18 2023 GMT
        Subject: CN=63216ba0-1197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:80:39:d7:5b:b0:85:39:a7:42:9d:87:0f:
                    64:4b:28:ba:f3:54:6e:4a:69:3c:f0:5f:4e:95:57:
                    42:6c:3f:b9:4d:b2:51:39:d1:33:76:3d:f8:30:8c:
                    9a:39:57:53:45:62:54:ce:d9:c9:5d:26:61:20:f2:
                    86:2c:11:0a:6f:95:10:82:8c:08:ab:00:5d:7f:81:
                    51:25:39:5f:cf:f2:1e:00:1a:73:02:1f:5c:15:4f:
                    61:20:fd:f6:c0:16:71:6f:fa:70:0e:05:a7:74:0e:
                    71:f4:8e:f9:09:f6:45:ed:bc:93:2b:10:99:bd:c4:
                    6e:7c:38:fd:a3:1e:7a:55:16:62:92:e0:ba:d0:d7:
                    c9:c4:2b:8e:6b:91:b0:f6:83:d9:d8:51:2a:6e:9e:
                    ce:81:d0:bd:22:a8:9c:7d:1b:33:01:21:d3:3e:a3:
                    e1:46:81:23:1e:aa:30:54:f5:e1:18:c6:26:e9:2c:
                    b2:d4:e1:b1:8b:56:4f:41:2e:d3:36:ca:2d:0f:33:
                    f8:c1:c9:56:58:12:81:b4:90:97:c4:ca:60:ce:1b:
                    05:4a:71:9a:29:63:4f:16:bd:1b:f8:9d:a6:4e:ca:
                    df:aa:e1:7a:cb:4c:5a:84:53:ff:76:5e:91:72:33:
                    f7:7c:7a:4a:05:2b:45:ed:e8:b5:1f:d1:ab:08:d1:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E3:0A:53:C9:46:3D:2E:AB:D4:FA:18:CC:3D:7B:96:CB:C7:BF:16
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/204C4FD033F111ED9D59AACBF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:69:d5:64:e1:b3:b0:40:41:6b:52:5f:85:18:a5:e6:53:cd:
         5d:48:ca:4a:3e:21:a0:af:fc:75:16:02:e7:f5:fb:82:33:b8:
         19:6e:75:43:07:0a:e0:f3:68:53:11:cb:76:28:46:6f:fd:7b:
         60:ad:24:d6:3d:2b:6d:96:a4:3b:cf:de:91:09:6e:e2:96:4b:
         8d:e3:35:54:ac:66:28:79:be:c0:76:dc:bc:65:80:13:b6:a2:
         8f:08:a1:6b:65:a7:72:50:23:67:63:b4:2c:2e:bc:05:1d:04:
         c9:ca:0a:25:73:9f:69:24:8d:91:5d:fc:eb:e3:30:1c:48:be:
         c7:59:b1:ee:77:64:53:7e:13:67:47:9b:bb:85:dd:9d:b5:a1:
         e3:20:f6:77:4f:90:f3:d5:4b:af:ca:09:de:39:03:2d:52:21:
         51:dc:de:e2:27:4d:27:eb:f5:75:9a:7f:8b:18:34:c9:4f:51:
         29:24:3f:17:70:c1:ce:dc:dc:79:a5:6d:17:68:a6:6f:ff:2a:
         2d:81:89:e3:4d:5b:58:fb:a4:77:e2:96:14:fc:46:c7:5d:46:
         3c:11:e1:38:aa:b8:31:50:af:93:15:f7:60:20:eb:4d:f6:7d:
         e5:a9:9f:75:96:41:3f:51:a6:5f:75:25:c4:99:7d:e3:1e:8b:
         4c:38:3f:f0
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA5MTQwNTUwMThaFw0yMzA5MTQwNTUwMThaMBgxFjAU
BgNVBAMMDTYzMjE2YmEwLTExOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRz4A511uwhTmnQp2HD2RLKLrzVG5KaTzwX06VV0JsP7lNslE50TN2Pfgw
jJo5V1NFYlTO2cldJmEg8oYsEQpvlRCCjAirAF1/gVElOV/P8h4AGnMCH1wVT2Eg
/fbAFnFv+nAOBad0DnH0jvkJ9kXtvJMrEJm9xG58OP2jHnpVFmKS4LrQ18nEK45r
kbD2g9nYUSpuns6B0L0iqJx9GzMBIdM+o+FGgSMeqjBU9eEYxibpLLLU4bGLVk9B
LtM2yi0PM/jByVZYEoG0kJfEymDOGwVKcZopY08WvRv4naZOyt+q4XrLTFqEU/92
XpFyM/d8ekoFK0Xt6LUf0asI0S0zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTOMK
U8lGPS6r1PoYzD17lsvHvxYwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzIwNEM0RkQwMzNGMTExRUQ5RDU5QUFDQkYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBABtp1WThs7BAQWtSX4UYpeZTzV1Iyko+IaCv/HUWAuf1+4IzuBlu
dUMHCuDzaFMRy3YoRm/9e2CtJNY9K22WpDvP3pEJbuKWS43jNVSsZih5vsB23Lxl
gBO2oo8IoWtlp3JQI2djtCwuvAUdBMnKCiVzn2kkjZFd/OvjMBxIvsdZse53ZFN+
E2dHm7uF3Z21oeMg9ndPkPPVS6/KCd45Ay1SIVHc3uInTSfr9XWaf4sYNMlPUSkk
Pxdwwc7c3HmlbRdopm//Ki2BieNNW1j7pHfilhT8RsddRjwR4TiquDFQr5MV92Ag
6032feWpn3WWQT9Rpl91JcSZfeMei0w4P/A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org