Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/BA3DD736897011EFA95B4C84762E951A.roa
File:                     BA3DD736897011EFA95B4C84762E951A.roa (raw, json)
Hash identifier:          dBK8389TOM+tPA/4zi/Al7hI5JK8m1TEKEn1OSlHvwY=
Subject key identifier:   CB:FF:C7:97:6F:06:BA:84:3B:38:85:FE:9F:A7:93:FA:09:75:D2:87
Certificate issuer:       /CN=F3640DFDAF/serialNumber=4E1CF64DA223F8B8A270A1DF0FA8DEC792A45CDB
Certificate serial:       09
Authority key identifier: 4E:1C:F6:4D:A2:23:F8:B8:A2:70:A1:DF:0F:A8:DE:C7:92:A4:5C:DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Thz2TaIj-LiicKHfD6jex5KkXNs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/BA3DD736897011EFA95B4C84762E951A.roa
Signing time:             Sun 13 Oct 2024 14:37:53 +0000
ROA not before:           Sun 13 Oct 2024 14:37:49 +0000
ROA not after:            Fri 31 Oct 2031 14:37:49 +0000
asID:                     33617
IP address blocks:        154.65.4.0/22 maxlen: 24
                          196.1.176.0/20 maxlen: 24
                          2c0f:f128::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF/serialNumber=4E1CF64DA223F8B8A270A1DF0FA8DEC792A45CDB
        Validity
            Not Before: Oct 13 14:37:49 2024 GMT
            Not After : Oct 31 14:37:49 2031 GMT
        Subject: CN=670bdb40-8b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:c1:7f:c2:f2:2e:49:81:03:19:ab:79:ef:
                    a2:ef:a0:7d:e5:04:fa:01:e8:31:c8:53:bf:ae:2a:
                    59:f8:07:6b:08:cc:9b:df:3c:1f:43:f5:cd:2d:a8:
                    28:2b:70:f7:6f:15:87:08:e3:ff:3e:56:13:e9:a8:
                    56:ff:22:6d:a4:e1:59:7b:6a:4b:c3:aa:44:d3:c9:
                    8e:87:e9:ee:16:c3:27:76:dc:e8:19:62:5e:de:63:
                    30:17:ee:44:e1:d7:27:c0:f8:44:52:cd:50:52:f8:
                    f9:5d:df:07:2e:fe:07:8e:e6:06:3b:d4:4b:7b:a5:
                    c1:30:28:d7:9e:a7:ed:f2:0b:ad:51:98:15:21:05:
                    3e:4e:4a:18:1f:59:d8:92:dc:56:27:da:57:20:2b:
                    b1:cf:5d:21:53:08:b1:7a:c3:ca:7d:a5:38:08:a3:
                    06:40:b3:eb:f9:28:0c:8a:f4:d9:96:10:32:5c:69:
                    67:0a:d6:d5:19:be:db:ee:d9:a0:c6:d7:94:1e:33:
                    5b:99:77:db:54:ea:06:46:e7:15:01:a0:f4:a1:0c:
                    ef:43:92:38:85:e7:51:de:ef:8b:73:97:42:10:29:
                    e8:09:b2:e4:ac:29:db:b6:66:30:93:7f:d3:5d:89:
                    9b:40:5d:51:4e:04:35:d2:65:27:06:c3:2a:08:97:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:C7:97:6F:06:BA:84:3B:38:85:FE:9F:A7:93:FA:09:75:D2:87
            X509v3 Authority Key Identifier:
                keyid:4E:1C:F6:4D:A2:23:F8:B8:A2:70:A1:DF:0F:A8:DE:C7:92:A4:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/Thz2TaIj-LiicKHfD6jex5KkXNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Thz2TaIj-LiicKHfD6jex5KkXNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/BA3DD736897011EFA95B4C84762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.65.4.0/22
                  196.1.176.0/20
                IPv6:
                  2c0f:f128::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:6c:dc:35:bc:47:28:1a:b7:e2:f7:70:2a:a2:07:37:02:
         51:31:24:b4:f1:a8:b1:63:1c:5b:92:9d:17:f4:c7:01:ba:d2:
         de:fa:57:80:15:7d:4a:43:63:74:06:b6:4c:67:bf:7b:71:a7:
         ae:a5:a2:ee:2a:2f:dc:1c:8d:9d:06:8b:52:66:ac:49:c1:ff:
         23:35:a1:32:11:db:e2:87:0d:26:77:62:a0:ba:98:6c:e2:71:
         5e:a3:2a:53:6f:73:6b:70:41:a9:87:2e:fd:9d:0d:4c:ad:10:
         0f:dc:24:24:94:48:d4:87:24:e8:13:19:95:3f:bc:52:a1:80:
         ca:ea:bc:06:a3:c1:ec:95:cd:b6:01:1d:5f:3c:51:d4:24:11:
         bf:8d:fa:ea:70:16:89:6a:cf:45:f6:24:19:2f:6c:96:9c:c1:
         f1:df:91:f6:1d:b1:0f:7b:aa:21:4f:7a:46:45:3b:25:6f:d6:
         5f:fa:0a:d1:16:97:41:40:45:3b:d1:ae:6a:ad:4d:23:75:7f:
         09:87:19:74:29:a7:bd:82:13:14:cb:93:b3:72:3c:6d:c0:ef:
         08:7a:14:a6:ea:a5:e7:85:10:e0:77:f6:5d:a8:95:35:20:ed:
         fb:b7:0d:28:2a:31:83:c4:18:0e:e2:87:94:b0:f7:b5:64:86:
         b0:fc:9d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----