Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/567561A2A58D11ECB765F2915A40D577.roa
File:                     567561A2A58D11ECB765F2915A40D577.roa (raw, json)
Hash identifier:          Ub2BaEvdO8U1EXzjZbckMSWt7pkCtW8OoyzyvpafSvQ=
Subject key identifier:   68:45:D6:05:12:AC:78:9E:7C:B3:DB:1B:D2:AF:00:56:F7:3F:33:70
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       030C
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/567561A2A58D11ECB765F2915A40D577.roa
Signing time:             Thu 17 Mar 2022 00:58:20 +0000
ROA not before:           Thu 17 Mar 2022 00:00:16 +0000
ROA not after:            Fri 17 Mar 2023 00:00:16 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Mar 17 00:00:16 2022 GMT
            Not After : Mar 17 00:00:16 2023 GMT
        Subject: CN=623287ac-3f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:15:b0:15:95:7d:eb:15:47:44:a7:a9:3d:
                    1e:f9:11:b9:fe:91:ec:a1:05:fd:54:f4:58:3f:76:
                    53:ab:8f:db:71:31:5e:3f:e6:31:5a:2a:6a:31:38:
                    14:1b:7b:9f:4a:67:ca:de:66:1b:2f:b1:f0:c8:13:
                    74:e1:a4:cc:e8:eb:2e:c9:e0:24:0e:e9:b4:94:51:
                    3f:73:2d:1d:a7:05:21:da:f0:c9:ab:5d:62:f3:31:
                    d6:ed:14:d9:60:7d:6d:d7:f3:2a:61:3c:52:54:40:
                    28:30:95:0a:20:fc:c3:e9:ce:c4:61:a3:fb:d2:e5:
                    c2:ae:a2:7e:e3:7d:83:76:c0:06:b7:1a:32:0d:00:
                    26:e6:d2:bd:62:fa:54:d2:b1:4f:f9:17:c3:4f:86:
                    40:b2:98:f1:53:54:27:5a:c8:7e:99:b6:1a:ef:22:
                    1d:4a:ef:0c:c5:46:85:55:52:28:af:03:62:59:03:
                    af:c4:3d:f6:e9:9c:8a:50:45:7b:54:33:43:70:74:
                    de:33:7e:f1:45:9e:5d:f7:27:76:46:c7:91:0e:36:
                    2f:12:4b:72:5a:62:cd:e0:25:2f:2c:bf:8f:bb:fd:
                    29:1f:e0:da:53:ea:d5:35:c8:20:8a:c0:a6:1c:fa:
                    21:22:44:dd:7a:c9:6d:31:cc:f3:1e:21:ac:02:ef:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:45:D6:05:12:AC:78:9E:7C:B3:DB:1B:D2:AF:00:56:F7:3F:33:70
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/567561A2A58D11ECB765F2915A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:fe:99:23:d6:08:dc:e6:66:99:27:35:2f:73:cc:b3:dd:0c:
         25:cc:b7:4a:bb:6f:86:2d:7f:21:ae:c7:c3:23:ed:eb:cd:d6:
         e0:93:40:29:38:79:6c:0f:6c:c0:9e:96:8f:c6:19:f2:e5:37:
         55:c8:b7:1b:bb:89:2c:e4:09:a3:f2:df:26:c6:e7:80:e4:cc:
         a4:82:43:41:0a:29:84:37:6e:e3:63:8b:96:5f:21:b7:83:bd:
         be:7f:8c:bf:61:51:a4:eb:2b:32:04:f3:f7:b6:be:19:59:ca:
         83:2a:5c:0b:f3:ef:64:3b:d3:66:98:e8:2b:1d:0e:89:ad:36:
         1b:dd:76:ee:1c:f6:a1:8b:70:1c:cc:d1:b1:f4:81:4e:96:48:
         0d:41:c1:74:c4:ab:aa:7a:de:a0:93:76:46:73:9c:96:a8:c2:
         d0:94:6d:de:29:6b:7c:1d:85:13:f3:2c:5a:23:c3:f4:91:83:
         75:42:27:57:f6:95:36:29:a6:c3:10:f0:83:61:16:87:6e:0b:
         41:f3:ac:a6:15:9b:46:12:2a:82:04:4a:a7:c6:ff:d8:c8:ed:
         aa:3d:71:8b:04:9d:8f:5a:45:1b:1a:f0:95:85:ed:e6:00:c9:
         25:ca:53:ee:60:2a:78:fa:e2:6b:b2:c8:28:af:07:2b:0f:44:
         3a:40:2a:a7
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAzMTcwMDAwMTZaFw0yMzAzMTcwMDAwMTZaMBgxFjAU
BgNVBAMMDTYyMzI4N2FjLTNmNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChFhWwFZV96xVHRKepPR75Ebn+keyhBf1U9Fg/dlOrj9txMV4/5jFaKmox
OBQbe59KZ8reZhsvsfDIE3ThpMzo6y7J4CQO6bSUUT9zLR2nBSHa8MmrXWLzMdbt
FNlgfW3X8yphPFJUQCgwlQog/MPpzsRho/vS5cKuon7jfYN2wAa3GjINACbm0r1i
+lTSsU/5F8NPhkCymPFTVCdayH6ZthrvIh1K7wzFRoVVUiivA2JZA6/EPfbpnIpQ
RXtUM0NwdN4zfvFFnl33J3ZGx5EONi8SS3JaYs3gJS8sv4+7/Skf4NpT6tU1yCCK
wKYc+iEiRN16yW0xzPMeIawC76jtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaEXW
BRKseJ58s9sb0q8AVvc/M3AwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzU2NzU2MUEyQTU4RDExRUNCNzY1RjI5MTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBABX+mSPWCNzmZpknNS9zzLPdDCXMt0q7b4YtfyGux8Mj7evN1uCT
QCk4eWwPbMCelo/GGfLlN1XItxu7iSzkCaPy3ybG54DkzKSCQ0EKKYQ3buNji5Zf
IbeDvb5/jL9hUaTrKzIE8/e2vhlZyoMqXAvz72Q702aY6CsdDomtNhvddu4c9qGL
cBzM0bH0gU6WSA1BwXTEq6p63qCTdkZznJaowtCUbd4pa3wdhRPzLFojw/SRg3VC
J1f2lTYppsMQ8INhFoduC0HzrKYVm0YSKoIESqfG/9jI7ao9cYsEnY9aRRsa8JWF
7eYAySXKU+5gKnj64muyyCivBysPRDpAKqc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org