Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B66A133C976911ECA7340D8B5A40D577.roa
File:                     B66A133C976911ECA7340D8B5A40D577.roa (raw, json)
Hash identifier:          HCF/x0f2vphjkpYradYgQuVM1lF+Ao3PpbP3TtlRcgA=
Subject key identifier:   60:36:92:87:9D:96:B5:C5:FE:0D:2B:B3:5E:32:45:F4:DA:E7:92:01
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       02DF
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B66A133C976911ECA7340D8B5A40D577.roa
Signing time:             Sun 27 Feb 2022 01:08:03 +0000
ROA not before:           Sun 27 Feb 2022 01:07:58 +0000
ROA not after:            Mon 27 Feb 2023 01:07:58 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Feb 27 01:07:58 2022 GMT
            Not After : Feb 27 01:07:58 2023 GMT
        Subject: CN=621acef3-85c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:e1:2e:a0:ce:fc:07:17:4d:26:35:03:aa:
                    38:39:d8:47:97:c3:02:6a:bb:34:53:fb:c6:6d:61:
                    f1:93:cc:f6:7a:c8:16:59:df:67:07:29:2c:c0:d5:
                    37:2a:71:bc:7f:72:14:e7:1e:73:17:43:5a:5d:49:
                    5e:51:92:2b:bd:b4:e5:c5:11:ba:c7:cc:75:6d:b5:
                    86:04:89:b8:2f:b7:34:7c:79:9b:e4:8a:d9:14:67:
                    55:f6:30:9b:32:2a:bd:74:2d:6a:96:9b:78:1a:f2:
                    ba:cd:ec:b4:b4:ef:65:9d:1c:0f:37:8a:20:93:8a:
                    0b:73:9e:84:54:06:71:28:80:67:80:dd:16:50:de:
                    8a:37:63:a0:c7:c8:59:55:2f:bd:5e:15:73:38:d4:
                    b6:83:6b:84:ad:27:da:1a:03:91:31:a1:e5:8f:dc:
                    79:25:fe:f2:30:fa:52:46:c0:ce:20:8a:0a:0b:8b:
                    0c:b9:cb:8d:6e:ff:e0:e0:50:a4:67:1d:d6:08:f9:
                    1d:88:48:ac:a8:6c:ad:04:b2:ae:f7:10:a1:8c:eb:
                    c7:2d:34:e5:80:2a:36:c1:d7:0f:8e:f6:b2:b8:c1:
                    d2:11:9e:a2:30:f2:cb:14:be:70:bb:cd:bf:b2:e4:
                    21:47:e8:58:ef:c3:4e:6e:15:ea:7d:f7:39:df:87:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:36:92:87:9D:96:B5:C5:FE:0D:2B:B3:5E:32:45:F4:DA:E7:92:01
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/B66A133C976911ECA7340D8B5A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:68:be:3a:7e:da:dc:09:1f:97:0d:59:fe:a1:ec:3b:1b:63:
         bd:cd:ca:c6:6c:20:e6:26:56:bd:18:39:61:41:66:72:55:ac:
         a7:f8:88:1b:dc:7e:5e:ff:ae:82:8a:42:bd:45:2b:84:c0:2a:
         8b:9f:54:6e:4a:58:77:f5:f6:d9:50:7a:5b:5f:44:b4:57:1c:
         19:b2:9e:dd:e1:e3:af:e0:1b:57:53:6a:60:dd:17:2b:bf:74:
         d4:6e:76:14:43:5c:1d:d6:8b:e0:6f:22:5b:f9:08:bb:0c:80:
         ce:6a:e0:7a:71:02:0f:68:61:c0:ac:c5:ed:2e:a9:5c:6d:3d:
         56:ed:ac:3c:4a:f2:08:a4:c4:84:cf:77:65:08:10:ab:92:a4:
         5c:ae:89:2d:82:68:f1:89:c0:0c:72:44:c6:33:e7:bb:9f:5b:
         55:29:90:90:51:1d:fe:0e:72:bf:8a:7f:9d:e8:55:b4:cc:a7:
         78:b9:64:2a:d8:8e:62:ad:f9:26:c5:71:64:f0:e1:3b:4a:15:
         99:0f:17:14:25:2a:c2:4f:25:32:cc:2c:7f:27:1a:fc:54:a1:
         67:4e:c8:2d:02:4d:b6:be:8c:ba:99:03:fc:04:b1:61:41:3e:
         64:18:5b:31:ba:12:dd:97:ec:82:68:49:7d:ab:b3:f6:7b:2d:
         6a:64:56:0b
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjAyMjcwMTA3NThaFw0yMzAyMjcwMTA3NThaMBgxFjAU
BgNVBAMMDTYyMWFjZWYzLTg1YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxmOEuoM78BxdNJjUDqjg52EeXwwJquzRT+8ZtYfGTzPZ6yBZZ32cHKSzA
1Tcqcbx/chTnHnMXQ1pdSV5Rkiu9tOXFEbrHzHVttYYEibgvtzR8eZvkitkUZ1X2
MJsyKr10LWqWm3ga8rrN7LS072WdHA83iiCTigtznoRUBnEogGeA3RZQ3oo3Y6DH
yFlVL71eFXM41LaDa4StJ9oaA5ExoeWP3Hkl/vIw+lJGwM4gigoLiwy5y41u/+Dg
UKRnHdYI+R2ISKyobK0Esq73EKGM68ctNOWAKjbB1w+O9rK4wdIRnqIw8ssUvnC7
zb+y5CFH6Fjvw05uFep99znfh23BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYDaS
h52WtcX+DSuzXjJF9NrnkgEwHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0I2NkExMzNDOTc2OTExRUNBNzM0MEQ4QjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAEVovjp+2twJH5cNWf6h7DsbY73NysZsIOYmVr0YOWFBZnJVrKf4
iBvcfl7/roKKQr1FK4TAKoufVG5KWHf19tlQeltfRLRXHBmynt3h46/gG1dTamDd
Fyu/dNRudhRDXB3Wi+BvIlv5CLsMgM5q4HpxAg9oYcCsxe0uqVxtPVbtrDxK8gik
xITPd2UIEKuSpFyuiS2CaPGJwAxyRMYz57ufW1UpkJBRHf4Ocr+Kf53oVbTMp3i5
ZCrYjmKt+SbFcWTw4TtKFZkPFxQlKsJPJTLMLH8nGvxUoWdOyC0CTba+jLqZA/wE
sWFBPmQYWzG6Et2X7IJoSX2rs/Z7LWpkVgs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-ams.rpki-client.org