Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/46422222950A11EC87EFE48D5A40D577.roa
File:                     46422222950A11EC87EFE48D5A40D577.roa (raw, json)
Hash identifier:          ANMUfXRilJQTDKb2trwFsw0Au/KOnyNMi6KsvyaYuiQ=
Subject key identifier:   AC:42:2C:0F:D7:44:A8:F6:9D:A7:08:B8:E8:E0:33:E3:9E:31:80:5A
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       02CD
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/46422222950A11EC87EFE48D5A40D577.roa
Signing time:             Thu 24 Feb 2022 00:39:50 +0000
ROA not before:           Thu 24 Feb 2022 00:00:46 +0000
ROA not after:            Fri 24 Feb 2023 00:00:46 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb 24 00:00:46 2022 GMT
            Not After : Feb 24 00:00:46 2023 GMT
        Subject: CN=6216d3d6-8524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:f2:e2:f6:4d:17:c8:90:71:03:61:69:02:
                    7b:36:b5:96:0a:c9:90:08:06:35:24:99:0c:fc:11:
                    24:4b:4d:af:62:8a:3e:8c:d0:21:76:ec:e4:5f:09:
                    d5:47:8c:27:be:76:bd:4e:35:3b:2b:60:96:25:51:
                    29:5d:f4:37:7c:5a:9e:c5:bd:9f:eb:61:e9:73:ce:
                    0a:31:b3:3d:89:a9:80:32:f9:08:fb:10:a1:93:6a:
                    d2:f9:0b:5d:51:d9:b3:3f:3e:9c:cf:ad:3f:4b:e1:
                    a8:72:e4:0e:56:a4:20:57:99:12:8b:d6:53:30:93:
                    15:3e:af:c5:5a:14:10:87:f7:f0:fe:97:ad:10:77:
                    ef:71:6e:b9:a8:81:f2:b0:bb:1b:da:e1:e7:75:7d:
                    fe:c5:84:0f:33:7f:ac:37:23:28:a2:58:8a:20:3c:
                    a0:70:ee:45:9c:7d:77:ee:1e:7d:04:d7:13:8c:e1:
                    c8:fb:16:aa:d3:51:c1:4d:28:2a:82:f8:7f:99:76:
                    ca:ca:2b:ca:3c:98:c0:bf:e4:ff:5d:d5:af:5a:a1:
                    e5:44:f3:44:f8:53:18:2a:ba:31:47:84:59:e6:e3:
                    51:78:c2:3a:71:34:dc:84:ec:8b:a2:56:01:0f:fa:
                    2d:c7:9a:dd:69:19:60:1a:20:b3:d2:1d:8c:7f:5a:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:2C:0F:D7:44:A8:F6:9D:A7:08:B8:E8:E0:33:E3:9E:31:80:5A
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/46422222950A11EC87EFE48D5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:cf:df:e1:4e:6d:61:3b:c1:ce:79:e2:be:fb:6c:2d:ad:
         0d:e9:ca:55:9b:32:6e:76:8e:ff:1d:00:9e:30:61:cc:8f:a7:
         ea:20:65:0f:9f:a6:e8:65:f9:b4:af:3d:31:9d:58:51:ed:4c:
         fc:de:60:22:8b:2a:82:9d:ef:5e:cf:69:ce:07:77:6d:22:b1:
         35:a5:d3:68:a3:95:b1:aa:bc:fc:63:55:ac:f2:a8:42:77:34:
         cd:4a:fe:0e:d0:0c:c2:51:f2:a9:08:60:43:52:b0:6f:b0:ae:
         d6:7e:3f:27:59:b5:b6:24:e5:a5:60:87:3d:d8:57:ca:53:e1:
         02:54:8e:e5:42:be:7e:34:d8:3f:3b:30:36:63:92:76:a4:17:
         46:08:a9:27:10:fb:9c:36:d3:f3:20:60:f8:cd:c0:a8:b9:34:
         72:18:75:18:57:d1:15:38:74:64:e4:7c:c0:7a:f8:66:8a:c0:
         f5:6c:f6:87:9d:fa:29:11:f6:af:b8:9a:85:97:96:39:1e:c6:
         f3:06:5f:4f:11:bf:6c:86:72:84:9c:a8:fb:f0:69:3b:9e:db:
         06:ca:0a:65:1d:d5:ff:e2:91:46:09:1f:8a:ba:b9:e5:97:8a:
         c9:8a:7f:f4:4f:15:e1:e6:cc:78:fd:0e:ba:85:01:e4:71:62:
         f5:7c:48:6f
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAs0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAyMjQwMDAwNDZaFw0yMzAyMjQwMDAwNDZaMBgxFjAU
BgNVBAMMDTYyMTZkM2Q2LTg1MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmCfLi9k0XyJBxA2FpAns2tZYKyZAIBjUkmQz8ESRLTa9iij6M0CF27ORf
CdVHjCe+dr1ONTsrYJYlUSld9Dd8Wp7FvZ/rYelzzgoxsz2JqYAy+Qj7EKGTatL5
C11R2bM/PpzPrT9L4ahy5A5WpCBXmRKL1lMwkxU+r8VaFBCH9/D+l60Qd+9xbrmo
gfKwuxva4ed1ff7FhA8zf6w3IyiiWIogPKBw7kWcfXfuHn0E1xOM4cj7FqrTUcFN
KCqC+H+ZdsrKK8o8mMC/5P9d1a9aoeVE80T4UxgqujFHhFnm41F4wjpxNNyE7Iui
VgEP+i3Hmt1pGWAaILPSHYx/WoBNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrEIs
D9dEqPadpwi46OAz454xgFowHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzQ2NDIyMjIyOTUwQTExRUM4N0VGRTQ4RDVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAD+Bz9/hTm1hO8HOeeK++2wtrQ3pylWbMm52jv8dAJ4wYcyPp+og
ZQ+fpuhl+bSvPTGdWFHtTPzeYCKLKoKd717Pac4Hd20isTWl02ijlbGqvPxjVazy
qEJ3NM1K/g7QDMJR8qkIYENSsG+wrtZ+PydZtbYk5aVghz3YV8pT4QJUjuVCvn40
2D87MDZjknakF0YIqScQ+5w20/MgYPjNwKi5NHIYdRhX0RU4dGTkfMB6+GaKwPVs
9oed+ikR9q+4moWXljkexvMGX08Rv2yGcoScqPvwaTue2wbKCmUd1f/ikUYJH4q6
ueWXismKf/RPFeHmzHj9DrqFAeRxYvV8SG8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org