Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/90578B808E2111EC930E9DC95A40D577.roa
File:                     90578B808E2111EC930E9DC95A40D577.roa (raw, json)
Hash identifier:          eK+6bElX5aRunzaqjsvlQBR09+dJDFpTFVNAlKsB14I=
Subject key identifier:   21:0A:8F:CE:D2:53:BB:94:96:11:CF:C5:E2:E9:4D:B3:DE:E2:18:1B
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       028F
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/90578B808E2111EC930E9DC95A40D577.roa
Signing time:             Tue 15 Feb 2022 05:38:55 +0000
ROA not before:           Tue 15 Feb 2022 05:38:46 +0000
ROA not after:            Wed 15 Feb 2023 05:38:46 +0000
asID:                     3970
IP address blocks:        102.218.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb 15 05:38:46 2022 GMT
            Not After : Feb 15 05:38:46 2023 GMT
        Subject: CN=620b3c6f-dc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dd:9d:51:93:5b:7e:6b:f3:ff:f2:30:dc:b9:
                    71:2d:e4:89:de:b5:f3:21:ce:46:23:5d:b1:bc:51:
                    f3:13:e2:08:09:98:a8:79:5d:8a:2e:60:95:b9:59:
                    a5:05:0c:d1:c4:cc:3b:ed:16:09:45:60:da:51:78:
                    f9:68:a6:15:8b:15:70:08:73:66:c4:5b:0b:6a:84:
                    74:cd:0f:23:ae:a8:bd:af:e6:0c:fc:47:9c:de:12:
                    f8:cb:8a:16:0e:aa:4b:12:87:e5:c9:56:c9:b5:80:
                    18:fa:be:d0:79:36:e7:d3:82:c2:50:c5:aa:1d:41:
                    10:4a:fa:aa:60:77:8e:1e:f2:a9:4f:04:54:42:72:
                    e1:6c:0a:ec:d6:a7:2c:1e:bc:69:9a:69:70:e6:0f:
                    20:17:1c:c2:03:e4:97:6c:d4:25:4d:04:af:a8:0b:
                    6e:95:35:8e:0b:be:a0:7b:4a:ff:75:ab:ee:44:6d:
                    a3:4a:8f:cb:8e:3a:d1:27:1f:54:66:38:60:f8:f5:
                    c1:70:eb:5a:2f:a0:c1:fa:69:6a:04:07:35:7c:aa:
                    cf:bd:ee:e0:fb:10:1e:57:16:ef:84:56:21:e5:7c:
                    bb:e7:d0:b7:77:95:0f:25:25:47:07:bb:41:6c:eb:
                    5d:ff:da:40:0c:6f:b1:29:f1:11:bf:f3:5b:c2:ac:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0A:8F:CE:D2:53:BB:94:96:11:CF:C5:E2:E9:4D:B3:DE:E2:18:1B
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/90578B808E2111EC930E9DC95A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.218.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:55:87:6f:93:7e:c9:d7:7a:18:a3:93:cb:b0:c6:fa:8f:67:
         20:02:ba:11:2b:16:ae:b2:fe:04:57:f3:7f:b1:e2:47:3d:f0:
         d8:77:12:8b:fd:95:3b:55:38:0c:b5:50:cd:1b:33:95:48:e0:
         74:ba:17:6e:14:42:54:93:51:50:65:cb:d5:35:53:a1:12:9a:
         73:ad:12:6e:4c:55:36:df:3c:1f:8b:4d:db:12:fb:c6:b5:ef:
         91:63:d4:9c:e9:3f:c7:09:3d:9e:a7:ac:7f:e4:a4:61:a2:f5:
         df:0e:52:39:d3:21:30:fe:88:2c:2b:d5:cd:d4:e2:26:4c:95:
         9d:41:72:71:f7:9b:8d:1f:9f:2d:b4:68:87:52:ef:96:fa:d5:
         ba:5a:66:b8:a7:76:90:dd:e5:0e:80:de:80:1a:40:58:b7:34:
         c4:06:1a:21:3d:49:26:27:9e:bf:ba:5d:c2:1a:52:fe:7a:c0:
         58:4e:37:6d:9f:f2:c5:83:51:9c:1c:86:83:61:3a:8e:5e:53:
         80:01:15:a7:0a:2a:ab:b1:3b:10:77:22:1d:60:7b:b0:96:9d:
         f3:c3:14:b3:b2:55:25:91:0b:78:f9:56:b0:b5:8b:20:96:87:
         c7:d4:98:6f:57:77:d6:8b:07:d3:4e:bb:04:5d:06:55:e6:62:
         5d:b9:2a:8c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAyMTUwNTM4NDZaFw0yMzAyMTUwNTM4NDZaMBgxFjAU
BgNVBAMMDTYyMGIzYzZmLWRjNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDi3Z1Rk1t+a/P/8jDcuXEt5InetfMhzkYjXbG8UfMT4ggJmKh5XYouYJW5
WaUFDNHEzDvtFglFYNpRePlophWLFXAIc2bEWwtqhHTNDyOuqL2v5gz8R5zeEvjL
ihYOqksSh+XJVsm1gBj6vtB5NufTgsJQxaodQRBK+qpgd44e8qlPBFRCcuFsCuzW
pywevGmaaXDmDyAXHMID5Jds1CVNBK+oC26VNY4LvqB7Sv91q+5EbaNKj8uOOtEn
H1RmOGD49cFw61ovoMH6aWoEBzV8qs+97uD7EB5XFu+EViHlfLvn0Ld3lQ8lJUcH
u0Fs613/2kAMb7Ep8RG/81vCrJo9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUIQqP
ztJTu5SWEc/F4ulNs97iGBswHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFLzkwNTc4QjgwOEUyMTExRUM5MzBFOURDOTVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABm2mEwDQYJKoZIhvcNAQEL
BQADggEBAIBVh2+TfsnXehijk8uwxvqPZyACuhErFq6y/gRX83+x4kc98Nh3Eov9
lTtVOAy1UM0bM5VI4HS6F24UQlSTUVBly9U1U6ESmnOtEm5MVTbfPB+LTdsS+8a1
75Fj1JzpP8cJPZ6nrH/kpGGi9d8OUjnTITD+iCwr1c3U4iZMlZ1BcnH3m40fny20
aIdS75b61bpaZrindpDd5Q6A3oAaQFi3NMQGGiE9SSYnnr+6XcIaUv56wFhON22f
8sWDUZwchoNhOo5eU4ABFacKKquxOxB3Ih1ge7CWnfPDFLOyVSWRC3j5VrC1iyCW
h8fUmG9Xd9aLB9NOuwRdBlXmYl25Kow=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org