Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8A3B604AAFD811ECBBAD1CD65A40D577.roa
File:                     8A3B604AAFD811ECBBAD1CD65A40D577.roa (raw, json)
Hash identifier:          yBVXUaYMYsJREmii5qHUkJn6mukyFl7N2KBG6xKN1Ts=
Subject key identifier:   CC:E6:5E:FC:CA:07:35:72:E9:FD:91:AF:F8:06:46:F1:B8:D4:0E:63
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       036B
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8A3B604AAFD811ECBBAD1CD65A40D577.roa
Signing time:             Wed 30 Mar 2022 03:21:51 +0000
ROA not before:           Wed 30 Mar 2022 03:21:47 +0000
ROA not after:            Thu 30 Mar 2023 03:21:47 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Mar 30 03:21:47 2022 GMT
            Not After : Mar 30 03:21:47 2023 GMT
        Subject: CN=6243cccf-1a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e0:c8:46:27:64:76:8c:5d:50:df:3b:a0:6b:
                    1c:ff:e4:04:2a:37:28:dd:95:ed:8c:35:7d:78:c9:
                    bb:bc:de:69:b6:37:91:54:35:37:17:f3:c0:c6:04:
                    3e:8a:37:f2:b3:a8:e0:54:03:55:94:7a:0f:fc:44:
                    5e:98:92:b2:f6:b5:4f:f6:32:28:a7:cd:e5:98:e6:
                    da:f4:a8:cd:1a:5b:00:50:8e:d9:33:ad:87:b5:b5:
                    4e:b0:06:3d:dc:81:43:e2:a5:c8:3a:5d:ab:1f:db:
                    72:2b:43:3b:3f:85:d0:47:e6:10:0c:24:aa:a8:01:
                    41:1c:1c:01:6d:20:91:ed:25:2b:ea:d3:4a:4a:ef:
                    96:2b:b7:25:61:ab:4e:4c:fe:ad:d8:3f:63:1a:56:
                    c0:22:4b:04:4e:ae:69:7b:48:72:48:28:af:93:9e:
                    99:74:1d:aa:c8:4f:61:a6:cc:5b:47:b0:3b:66:14:
                    7c:62:d9:77:be:ce:4a:6a:ce:07:f7:b3:16:4d:ea:
                    d6:cc:12:85:b9:63:d5:a4:5f:c9:ec:3a:82:10:ac:
                    ec:de:b9:9c:54:53:e2:b8:f4:71:9c:cd:a1:cc:43:
                    a8:a6:0a:9d:7c:52:86:ee:07:4e:b3:19:8a:a6:68:
                    9e:72:2e:51:bd:38:6d:86:18:42:e4:fe:0e:59:54:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E6:5E:FC:CA:07:35:72:E9:FD:91:AF:F8:06:46:F1:B8:D4:0E:63
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/8A3B604AAFD811ECBBAD1CD65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:ce:6b:95:8f:4a:a3:94:76:f1:7a:3a:f4:98:dd:50:09:
         41:b2:b7:e5:07:30:75:1c:c1:e4:39:9c:db:41:43:c2:1b:63:
         4a:c8:8e:72:92:92:8e:a4:ac:65:9f:cb:48:5a:17:03:9b:af:
         35:66:de:3c:ef:de:31:01:84:f2:42:97:de:27:6d:02:de:22:
         d7:f5:84:0d:26:ec:42:31:9a:02:42:49:4d:38:21:13:fa:48:
         fe:ba:22:6c:83:3d:98:d9:eb:be:92:77:2f:1d:55:3a:91:c2:
         37:e3:01:b1:ee:cb:97:64:78:a0:99:e9:2e:54:82:05:f6:3b:
         b6:60:cf:97:0c:24:76:2e:8f:ec:d8:05:6b:57:41:01:b7:d3:
         cd:3b:53:3b:83:45:47:af:c2:75:31:91:27:56:e3:50:04:24:
         39:3f:2a:15:d9:47:dc:3f:72:a3:31:fa:50:db:db:3e:56:1d:
         85:ee:70:aa:8d:ec:15:5d:d2:5d:78:2c:b3:02:84:b5:bc:90:
         55:f6:14:86:bf:4a:fa:4e:c1:40:d2:ad:cf:a3:cc:a6:b5:82:
         34:65:35:81:88:aa:4f:9b:30:28:3b:9e:80:6e:f3:3a:d4:f1:
         a0:95:56:a6:da:08:d0:14:78:90:da:f1:de:73:90:78:8d:3e:
         b2:c9:b7:ae
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA2swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAzMzAwMzIxNDdaFw0yMzAzMzAwMzIxNDdaMBgxFjAU
BgNVBAMMDTYyNDNjY2NmLTFhMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDg4MhGJ2R2jF1Q3zugaxz/5AQqNyjdle2MNX14ybu83mm2N5FUNTcX88DG
BD6KN/KzqOBUA1WUeg/8RF6YkrL2tU/2MiinzeWY5tr0qM0aWwBQjtkzrYe1tU6w
Bj3cgUPipcg6Xasf23IrQzs/hdBH5hAMJKqoAUEcHAFtIJHtJSvq00pK75YrtyVh
q05M/q3YP2MaVsAiSwROrml7SHJIKK+Tnpl0HarIT2GmzFtHsDtmFHxi2Xe+zkpq
zgf3sxZN6tbMEoW5Y9WkX8nsOoIQrOzeuZxUU+K49HGczaHMQ6imCp18UobuB06z
GYqmaJ5yLlG9OG2GGELk/g5ZVG6lAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUzOZe
/MoHNXLp/ZGv+AZG8bjUDmMwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzhBM0I2MDRBQUZEODExRUNCQkFEMUNENjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBAK0jzmuVj0qjlHbxejr0mN1QCUGyt+UHMHUcweQ5nNtBQ8IbY0rIjnKS
ko6krGWfy0haFwObrzVm3jzv3jEBhPJCl94nbQLeItf1hA0m7EIxmgJCSU04IRP6
SP66ImyDPZjZ676Sdy8dVTqRwjfjAbHuy5dkeKCZ6S5UggX2O7Zgz5cMJHYuj+zY
BWtXQQG30807UzuDRUevwnUxkSdW41AEJDk/KhXZR9w/cqMx+lDb2z5WHYXucKqN
7BVd0l14LLMChLW8kFX2FIa/SvpOwUDSrc+jzKa1gjRlNYGIqk+bMCg7noBu8zrU
8aCVVqbaCNAUeJDa8d5zkHiNPrLJt64=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org