Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/47E9BEDA24BE11ECB5EB5866D8A014CE.roa
File:                     47E9BEDA24BE11ECB5EB5866D8A014CE.roa (raw, json)
Hash identifier:          Escvutnz/Oygp5rRfNaxBQqdoUpUg4/4UFViKLFNZpY=
Subject key identifier:   5A:2C:60:E2:0F:D4:C2:B2:1A:98:2A:36:D1:C2:B8:3F:47:26:49:79
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       1C
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/47E9BEDA24BE11ECB5EB5866D8A014CE.roa
Signing time:             Mon 04 Oct 2021 02:53:41 +0000
ROA not before:           Mon 04 Oct 2021 02:53:37 +0000
ROA not after:            Tue 04 Oct 2022 02:53:37 +0000
asID:                     3970
IP address blocks:        2001:43f8:df0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Oct  4 02:53:37 2021 GMT
            Not After : Oct  4 02:53:37 2022 GMT
        Subject: CN=615a6cb5-2630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:08:8c:95:89:6f:9c:2f:17:d4:51:25:56:
                    ea:23:0d:89:7c:91:5d:f1:f9:3a:33:3e:74:e6:64:
                    bb:d1:9c:72:0f:b0:6d:de:3d:1b:5e:7c:95:8f:bb:
                    b4:eb:f2:4e:5b:c7:05:df:73:88:f1:ab:a6:08:37:
                    d3:26:40:d3:36:f2:b1:a5:75:00:42:1e:05:c1:08:
                    ac:d2:99:b3:dc:a7:18:aa:a4:05:a1:ad:f5:52:ef:
                    2a:fe:24:ab:6b:69:b7:5d:5f:7a:f6:db:28:ae:0e:
                    8e:a6:7e:7e:be:58:90:04:6a:05:3f:57:2f:12:64:
                    ed:aa:f1:5b:91:75:da:88:5f:1d:25:0f:86:c0:91:
                    6a:ed:7f:29:80:c4:ce:c9:13:6d:aa:cd:91:af:c6:
                    bd:1c:45:4a:bb:b2:11:c5:af:d6:39:55:83:53:65:
                    e8:0a:80:44:1a:bd:f8:af:59:aa:9c:45:30:b8:fc:
                    76:db:76:c5:65:9b:05:23:d7:58:5b:9b:d9:37:ea:
                    bb:bf:e2:a0:d8:5b:59:62:a0:d8:61:39:01:4c:98:
                    04:1a:d4:fe:58:5f:f1:9c:9c:e1:2f:86:47:3f:fd:
                    a0:74:d1:6c:b7:84:06:62:78:f3:e8:61:0a:57:ce:
                    b9:a3:69:e8:ec:e5:61:f0:f9:ff:dd:61:12:fc:4e:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2C:60:E2:0F:D4:C2:B2:1A:98:2A:36:D1:C2:B8:3F:47:26:49:79
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/47E9BEDA24BE11ECB5EB5866D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:8d:69:23:bc:cb:80:38:ef:62:fa:0e:66:7c:2a:a6:5b:fa:
         e1:71:69:d1:a0:0f:08:5a:bf:f1:42:08:44:24:b9:9b:c5:39:
         bf:a2:b5:fa:41:48:e6:1c:32:3e:1d:c5:37:55:2c:36:18:79:
         ac:aa:66:c7:b9:a6:a1:af:ad:35:47:b1:9e:38:f1:3d:4b:1d:
         c4:a2:aa:80:2b:27:28:57:12:54:d8:17:13:31:8d:84:d0:27:
         16:56:32:51:a2:a5:1e:9c:03:84:4f:eb:3e:87:f4:06:97:07:
         8c:6b:03:b1:fc:1a:43:d4:d4:ad:92:19:4d:76:df:68:5a:35:
         4d:73:75:53:bd:76:07:04:b1:e0:be:61:a6:d9:94:17:82:7f:
         d9:90:99:cf:60:69:b9:43:f9:6b:68:ae:dc:16:2b:52:13:15:
         c1:6b:16:12:d1:80:05:47:5b:a4:5f:68:fe:e8:47:61:6f:24:
         c9:68:74:56:27:b9:b0:86:4f:90:62:75:34:68:b9:ba:3b:3b:
         9d:74:d6:96:d1:e6:46:c5:19:79:26:2e:a2:a7:17:de:c9:e2:
         5a:c9:e7:b8:12:61:6b:c6:ff:d0:f9:df:8e:45:51:c1:63:b2:
         00:fb:28:37:ce:f4:94:10:14:44:f3:f9:20:15:bc:63:0a:de:
         5e:de:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----