Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C80AB7C0F50D11EC827540E3F1222468.roa
File:                     C80AB7C0F50D11EC827540E3F1222468.roa (raw, json)
Hash identifier:          eth2hFtuEitbf0OvoS30D6gZWEpBOsKsKteaefDNE5Y=
Subject key identifier:   D7:6D:3E:BD:A8:07:84:47:EA:D4:DB:C4:F8:0E:49:31:58:73:9B:7D
Certificate issuer:       /CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
Certificate serial:       05BB
Authority key identifier: 42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C80AB7C0F50D11EC827540E3F1222468.roa
Signing time:             Sun 26 Jun 2022 05:06:48 +0000
ROA not before:           Sun 26 Jun 2022 05:06:43 +0000
ROA not after:            Mon 26 Jun 2023 05:06:43 +0000
asID:                     3970
IP address blocks:        2001:43f8:df1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1467 (0x5bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FC0BAF/serialNumber=42EC90AAB030ED0AC999CB0B535F7CF21BEDA16C
        Validity
            Not Before: Jun 26 05:06:43 2022 GMT
            Not After : Jun 26 05:06:43 2023 GMT
        Subject: CN=62b7e968-415d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:7a:fb:c6:70:3a:dd:48:33:ca:0f:34:c2:
                    38:b4:aa:0b:34:e3:0e:6d:ac:60:1c:73:31:a6:ea:
                    83:a4:3e:f3:7a:6f:f7:67:78:b2:c0:75:71:7c:7c:
                    08:a0:d0:b3:a9:7e:44:9a:10:2e:fc:1b:54:4d:2e:
                    23:3c:7f:f8:ee:38:c7:7c:4f:a0:02:49:6a:05:ab:
                    1e:ed:f9:f1:b8:d3:a2:ee:5e:a4:44:9a:e9:83:d4:
                    b1:5a:e9:31:a2:df:3a:f3:db:5d:4b:54:7c:be:37:
                    b6:27:33:cd:38:8d:82:d1:e3:1d:5d:9a:8e:16:5f:
                    c9:5f:35:bc:ba:df:bb:99:a3:60:44:9f:bf:6d:90:
                    bd:68:9d:9f:c5:f8:f7:f9:2b:00:e1:0b:6a:63:1d:
                    3c:4f:ca:4c:6c:dc:7c:be:fa:48:ce:47:7d:03:b4:
                    a0:93:d4:29:05:58:99:0b:9d:46:29:11:e6:a1:fd:
                    64:ba:c8:27:63:ee:9a:0c:8a:8f:d7:e1:12:d3:f0:
                    9d:bf:ee:9f:80:0e:f4:b4:5a:26:66:c8:d7:7b:cb:
                    14:b1:4b:e4:2e:3f:bf:d8:92:21:f6:88:73:6e:10:
                    4c:03:ce:e8:b4:c7:5a:28:46:b5:19:84:3b:f0:7e:
                    f1:e7:90:0a:76:68:09:26:f9:fb:5e:a0:31:a7:75:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6D:3E:BD:A8:07:84:47:EA:D4:DB:C4:F8:0E:49:31:58:73:9B:7D
            X509v3 Authority Key Identifier:
                keyid:42:EC:90:AA:B0:30:ED:0A:C9:99:CB:0B:53:5F:7C:F2:1B:ED:A1:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/QuyQqrAw7QrJmcsLU1988hvtoWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QuyQqrAw7QrJmcsLU1988hvtoWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FC0B/97F3543019E311ECB7BBB859D8A014CE/C80AB7C0F50D11EC827540E3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:43f8:df1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:64:00:9c:86:7d:d0:02:c1:f9:a9:61:77:53:60:f2:ee:
         6c:b3:63:61:34:bd:cb:00:7a:07:d9:6a:52:13:ba:6a:17:65:
         e0:cb:12:0c:ef:6a:85:97:11:51:e3:86:29:65:35:f8:bc:0c:
         14:33:77:b7:10:2b:69:cb:10:c8:41:53:30:09:bd:f4:f4:61:
         bc:a3:1f:66:f4:10:eb:ed:9a:b1:38:00:41:d2:36:bf:ca:9d:
         db:af:50:78:4d:5d:94:72:17:08:3e:6c:99:81:bb:9b:ed:2f:
         10:87:bf:7e:5e:ae:e7:4f:6b:bb:c7:5d:d1:47:58:f6:99:7d:
         56:8b:28:39:4a:23:e8:f2:35:70:b4:41:f4:5b:e3:17:2f:5d:
         5d:12:83:f8:77:6f:34:46:86:6a:21:ba:6c:2e:cf:26:b1:bb:
         73:fd:a2:de:4d:e2:6a:9e:b1:be:ef:d8:75:23:9f:2e:e1:57:
         a7:56:d2:35:6f:5b:1c:a2:e4:00:f7:16:fd:de:bb:63:12:30:
         b8:55:04:9f:ca:a2:fd:32:8f:8b:31:28:d4:0a:1c:37:84:19:
         ac:01:a5:53:20:fa:3e:bb:cd:21:d8:14:26:72:16:9a:96:3b:
         a6:98:25:1d:29:cc:3d:f4:28:5b:8f:09:46:d6:7b:60:ca:f7:
         4c:57:ec:2b
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBbswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MkZDMEJBRjExMC8GA1UEBRMoNDJFQzkwQUFCMDMwRUQwQUM5OTlDQjBCNTM1RjdD
RjIxQkVEQTE2QzAeFw0yMjA2MjYwNTA2NDNaFw0yMzA2MjYwNTA2NDNaMBgxFjAU
BgNVBAMMDTYyYjdlOTY4LTQxNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC90Xr7xnA63Ugzyg80wji0qgs04w5trGAcczGm6oOkPvN6b/dneLLAdXF8
fAig0LOpfkSaEC78G1RNLiM8f/juOMd8T6ACSWoFqx7t+fG406LuXqREmumD1LFa
6TGi3zrz211LVHy+N7YnM804jYLR4x1dmo4WX8lfNby637uZo2BEn79tkL1onZ/F
+Pf5KwDhC2pjHTxPykxs3Hy++kjOR30DtKCT1CkFWJkLnUYpEeah/WS6yCdj7poM
io/X4RLT8J2/7p+ADvS0WiZmyNd7yxSxS+QuP7/YkiH2iHNuEEwDzui0x1ooRrUZ
hDvwfvHnkAp2aAkm+fteoDGnddPbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU120+
vagHhEfq1NvE+A5JMVhzm30wHwYDVR0jBBgwFoAUQuyQqrAw7QrJmcsLU1988hvt
oWwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4QTAxNENFL1F1eVFx
ckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F1eVFxckF3N1FySm1jc0xVMTk4OGh2dG9Xdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJGQzBCLzk3RjM1NDMwMTlFMzExRUNCN0JCQjg1OUQ4
QTAxNENFL0M4MEFCN0MwRjUwRDExRUM4Mjc1NDBFM0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAUP4DfEwDQYJKoZIhvcN
AQELBQADggEBAH0+ZACchn3QAsH5qWF3U2Dy7myzY2E0vcsAegfZalITumoXZeDL
EgzvaoWXEVHjhillNfi8DBQzd7cQK2nLEMhBUzAJvfT0YbyjH2b0EOvtmrE4AEHS
Nr/KnduvUHhNXZRyFwg+bJmBu5vtLxCHv35erudPa7vHXdFHWPaZfVaLKDlKI+jy
NXC0QfRb4xcvXV0Sg/h3bzRGhmohumwuzyaxu3P9ot5N4mqesb7v2HUjny7hV6dW
0jVvWxyi5AD3Fv3eu2MSMLhVBJ/Kov0yj4sxKNQKHDeEGawBpVMg+j67zSHYFCZy
FpqWO6aYJR0pzD30KFuPCUbWe2DK90xX7Cs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:07 2024 by rpki-client on console-fra.rpki-client.org