Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7206B7E28D4911ECB041E3CF5A40D577.roa
File:                     7206B7E28D4911ECB041E3CF5A40D577.roa (raw, json)
Hash identifier:          jbhRhgS0PtVCKKzUZJLukNst5/4L3RWWoF3nX0AD254=
Subject key identifier:   B8:29:06:43:37:84:82:BC:CA:A5:97:15:83:0B:18:5B:66:96:EB:B6
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       0288
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7206B7E28D4911ECB041E3CF5A40D577.roa
Signing time:             Mon 14 Feb 2022 03:51:53 +0000
ROA not before:           Mon 14 Feb 2022 03:51:48 +0000
ROA not after:            Tue 14 Feb 2023 03:51:48 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb 14 03:51:48 2022 GMT
            Not After : Feb 14 03:51:48 2023 GMT
        Subject: CN=6209d1d9-08f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:f9:0c:05:da:97:97:59:2a:30:93:44:78:
                    23:7e:0c:db:7e:05:fd:68:7e:a0:c3:da:89:d5:72:
                    57:1c:5b:27:31:b4:3a:01:59:3b:82:c1:c6:6c:37:
                    c6:ae:7a:83:d5:4b:47:b9:21:57:36:1b:bc:cb:cb:
                    02:8c:f1:49:e0:98:bb:cd:ec:43:89:a4:46:a1:bd:
                    40:54:fd:8a:46:c5:3e:39:60:bf:40:0e:e8:12:7e:
                    d1:57:6f:8c:90:16:b1:d5:74:97:fa:17:62:7d:89:
                    03:9e:2f:d7:1e:fc:ce:32:4b:8b:ee:c7:80:50:04:
                    9f:fe:fc:44:35:23:74:28:8d:18:6f:a5:28:95:43:
                    b1:dd:c4:34:d9:54:75:0d:3f:db:a7:93:47:15:08:
                    0a:c7:b2:a0:de:28:2d:6d:fb:36:7e:55:cd:32:79:
                    61:64:2e:82:cf:e8:60:07:bb:ea:d7:32:99:1d:11:
                    ad:2d:b4:ff:96:dc:99:d7:2b:f4:3d:39:a3:44:10:
                    e5:c1:b4:dc:f2:73:f5:ea:16:70:51:41:a8:0d:e3:
                    53:ad:b8:aa:85:07:81:91:19:0c:80:ee:d6:89:a1:
                    35:6b:42:53:cb:c9:96:41:18:50:c4:59:65:6f:fd:
                    df:11:c7:1e:47:f9:fb:b9:d0:fc:97:d1:10:33:0a:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:29:06:43:37:84:82:BC:CA:A5:97:15:83:0B:18:5B:66:96:EB:B6
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7206B7E28D4911ECB041E3CF5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:b5:33:a3:15:9f:ba:9b:d7:b4:b6:c8:ee:25:ad:d5:e5:eb:
         aa:40:a3:97:cd:ee:b2:8e:63:db:83:1f:ae:d1:2b:8b:47:22:
         63:27:e8:e0:9d:b2:93:d2:19:a7:45:73:bd:12:e3:4e:56:18:
         df:4f:70:7d:09:ed:05:ec:5a:33:93:43:27:10:21:8d:57:f9:
         4d:18:e1:d4:1b:b9:b4:c3:71:9a:0e:fb:de:f2:a4:37:27:3b:
         56:94:41:0d:dc:25:15:c8:66:85:fb:42:60:f2:cb:68:5b:5e:
         66:03:d8:07:8e:74:c8:3f:0c:ad:74:99:9b:81:c5:69:db:47:
         53:cd:b9:e5:c3:1e:1d:01:0b:24:c1:22:4c:43:f8:43:80:17:
         c7:30:3a:e1:f6:0e:1c:11:db:cf:c5:62:a3:8e:a4:79:47:36:
         17:fe:9d:aa:36:76:7f:d4:18:80:f4:ca:b1:93:71:d2:ec:a1:
         cb:7c:ec:1a:46:e1:d5:0d:3c:9f:70:7e:c2:e6:d3:7f:be:cc:
         a1:3f:2d:3b:1e:4d:a2:0d:85:9d:74:86:bd:2e:88:b1:c7:84:
         89:54:b2:01:0e:a1:de:cf:d0:99:4c:0c:46:b7:44:15:90:a2:
         f8:38:d1:a1:d7:3e:35:09:f7:90:a8:d6:c5:95:08:30:d6:98:
         57:45:5d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org