Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7F578980F1CB11ECB6DC1E85F1222468.roa
File:                     7F578980F1CB11ECB6DC1E85F1222468.roa (raw, json)
Hash identifier:          O3XIYcR01ecICV3ksG3Q2hGSY6zVsdgzjwSl8ibVD8c=
Subject key identifier:   E3:D9:1E:21:F4:A0:B5:DF:6F:B0:C3:08:0F:99:F5:18:89:B5:E9:14
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       059D
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7F578980F1CB11ECB6DC1E85F1222468.roa
Signing time:             Wed 22 Jun 2022 01:34:46 +0000
ROA not before:           Wed 22 Jun 2022 01:34:41 +0000
ROA not after:            Thu 22 Jun 2023 01:34:41 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 22 01:34:41 2022 GMT
            Not After : Jun 22 01:34:41 2023 GMT
        Subject: CN=62b271b6-2811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:60:ff:4c:d4:be:f3:67:99:cc:d8:86:04:
                    cc:0e:fc:49:78:f7:e3:33:4d:fe:26:1e:02:a8:ed:
                    cb:c6:06:a0:4a:02:1a:13:08:57:69:f6:00:51:01:
                    13:f4:32:9f:bd:7a:d0:db:35:a0:9b:42:78:ed:85:
                    f7:f9:68:83:f5:78:ec:77:85:03:7c:77:f7:d2:3c:
                    72:71:07:13:39:4b:05:fb:07:e0:a9:fe:9c:0d:a1:
                    d3:8b:db:91:ee:33:9a:eb:c7:f1:a4:54:92:eb:5b:
                    c1:71:44:af:9f:f0:b3:29:0c:bd:ba:dd:be:1c:9f:
                    31:46:7d:67:a8:44:ec:a3:f8:a3:cd:8b:5b:77:2a:
                    a1:03:ab:dd:ea:94:f5:ec:b7:23:d2:68:bb:41:e6:
                    ec:35:10:e0:e9:68:6e:22:ac:29:52:7c:8b:f4:f0:
                    7b:c7:b2:d3:ae:d5:da:56:8a:f6:c9:56:44:72:da:
                    0a:19:2f:c0:e9:45:c9:68:1d:80:31:72:ca:af:4e:
                    44:ad:c5:86:d0:3e:5a:ff:24:1a:d9:0a:c6:8c:98:
                    82:58:1f:cc:aa:94:32:fb:f9:8b:ea:3d:30:61:72:
                    2a:c4:7a:aa:9b:6b:72:de:79:f4:b5:36:33:23:8d:
                    93:9d:8f:23:03:ec:20:4e:89:17:b3:ad:f1:61:fc:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D9:1E:21:F4:A0:B5:DF:6F:B0:C3:08:0F:99:F5:18:89:B5:E9:14
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/7F578980F1CB11ECB6DC1E85F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:1a:51:70:b7:c3:b9:6f:01:ed:0b:49:8e:4b:c1:6f:7a:c1:
         d9:96:f5:b9:5e:c3:99:d5:4c:f1:d8:31:87:3b:3f:6e:0d:2b:
         59:4b:4e:13:8b:75:7c:65:12:60:37:d0:93:05:6f:fc:35:53:
         b1:89:51:fe:94:c1:d8:ee:fc:9b:7c:02:09:52:83:f2:55:21:
         1b:e7:c4:16:e2:8b:7a:03:d0:16:0c:dc:04:a5:92:82:26:39:
         0f:9c:44:e3:be:18:2b:f1:8c:92:6e:39:51:3d:c5:b2:d6:22:
         f4:51:af:19:b7:e3:e6:a6:95:be:ef:19:2a:53:d3:30:d9:db:
         ff:5d:df:ad:f6:23:f3:ec:d9:a9:ea:cd:70:f5:19:7a:24:1b:
         b4:57:e0:b0:48:78:e6:dc:c5:4f:b0:5f:66:a8:d1:9a:6c:e4:
         36:99:80:f2:b0:bd:88:af:48:ae:2e:b9:5b:ea:04:ca:3b:f4:
         8b:b6:79:76:5b:20:c0:5e:1d:d1:5b:9d:fb:5e:87:94:87:86:
         00:ee:de:3c:04:c2:b7:36:69:6a:21:cd:7d:04:a9:d4:d1:3e:
         7a:e9:0e:82:ab:1d:95:28:b0:84:46:fe:a4:f9:b7:59:67:74:
         54:ab:90:1f:a0:d8:32:55:9b:4b:12:53:cd:83:c8:d9:91:eb:
         71:f0:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org