Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/2A95002031A611ECBD6EEE2AD8A014CE.roa
File:                     2A95002031A611ECBD6EEE2AD8A014CE.roa (raw, json)
Hash identifier:          GQ0uFz9GGcoQrvK3dOf11j4lRNdLxakphQpiW0dvWow=
Subject key identifier:   93:37:40:DC:BC:18:E7:C6:5E:A9:D7:DF:9E:1C:C0:E1:AC:E7:82:A5
Certificate issuer:       /CN=F3646C24AF/serialNumber=550409453622ED9E5E1B7D52F65768706D227D88
Certificate serial:       0A
Authority key identifier: 55:04:09:45:36:22:ED:9E:5E:1B:7D:52:F6:57:68:70:6D:22:7D:88
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VQQJRTYi7Z5eG31S9ldocG0ifYg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/2A95002031A611ECBD6EEE2AD8A014CE.roa
Signing time:             Wed 20 Oct 2021 13:03:49 +0000
ROA not before:           Wed 20 Oct 2021 13:03:45 +0000
ROA not after:            Thu 31 Dec 2026 13:03:45 +0000
asID:                     327811
IP address blocks:        196.13.106.0/24 maxlen: 24
                          196.43.250.0/24 maxlen: 24
                          2001:43fd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646C24AF/serialNumber=550409453622ED9E5E1B7D52F65768706D227D88
        Validity
            Not Before: Oct 20 13:03:45 2021 GMT
            Not After : Dec 31 13:03:45 2026 GMT
        Subject: CN=617013b5-1cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:fd:c7:3c:f2:eb:f7:dd:5b:81:1f:f8:de:
                    37:7f:ba:5d:10:f8:59:d3:bc:7a:85:c5:16:e7:86:
                    cd:b5:5c:75:35:d2:ee:f1:31:0c:1f:ab:86:5a:60:
                    75:98:2f:a6:2b:18:26:b9:13:e1:b7:3a:84:df:e6:
                    bc:a7:77:ea:35:e2:ee:3a:13:d0:c2:06:b5:e9:ce:
                    0b:47:72:32:11:98:90:8d:ea:c3:b3:20:19:b1:79:
                    8c:72:51:d0:be:85:18:0f:73:30:8e:46:a8:b4:54:
                    30:51:3f:64:fb:9e:60:1a:ec:2e:47:a2:56:cb:b0:
                    1c:c3:c9:31:ef:91:b8:2b:e0:68:65:f2:31:5e:6b:
                    39:0e:b8:cc:37:db:5b:1d:0f:94:72:9c:41:de:13:
                    a6:6b:a8:1c:d1:ca:7b:d0:bc:d6:8b:77:41:35:91:
                    8a:02:05:b5:a9:fe:3f:e5:0b:cb:93:90:13:26:90:
                    e8:ad:e3:ed:f1:50:0d:cd:42:1f:04:d7:e8:c8:ac:
                    d6:e8:8e:4f:12:51:59:b4:b4:48:a9:df:38:b9:0b:
                    ba:92:95:ff:21:2b:94:1f:dc:fd:c7:f2:83:47:5c:
                    57:d6:cb:ae:ef:7b:c8:d1:e9:77:54:fe:02:78:e7:
                    3a:40:6b:4c:1e:fe:04:23:c4:13:ae:d5:e6:b5:a8:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:37:40:DC:BC:18:E7:C6:5E:A9:D7:DF:9E:1C:C0:E1:AC:E7:82:A5
            X509v3 Authority Key Identifier:
                keyid:55:04:09:45:36:22:ED:9E:5E:1B:7D:52:F6:57:68:70:6D:22:7D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/VQQJRTYi7Z5eG31S9ldocG0ifYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VQQJRTYi7Z5eG31S9ldocG0ifYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/2A95002031A611ECBD6EEE2AD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.13.106.0/24
                  196.43.250.0/24
                IPv6:
                  2001:43fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:bf:7d:ab:d9:6a:af:18:59:17:b5:91:15:a2:63:54:ae:20:
         4c:72:30:fe:dc:14:7f:a3:e4:d8:52:88:11:13:0e:55:ab:a2:
         a5:22:8e:f1:12:2f:38:43:b9:f1:70:68:70:50:6b:a2:36:72:
         f0:25:c3:b3:8c:71:11:a7:8f:1e:d7:ac:ab:f0:c3:7f:e9:d8:
         40:40:b3:d3:d4:22:7e:0e:87:64:7d:13:c3:e9:15:74:ad:f4:
         21:96:4f:07:77:55:97:41:49:2a:67:e7:47:61:43:02:03:45:
         da:e5:4e:94:ca:c7:93:8e:28:fe:40:65:0e:ea:f1:d5:7a:5d:
         cf:d3:ac:21:c5:1b:06:42:80:32:77:f6:57:e0:9c:32:44:ae:
         1c:49:06:36:7a:3c:df:8d:51:57:e8:2c:97:3b:b8:43:5e:08:
         9b:4f:13:b9:11:77:5c:71:76:6d:0a:84:cc:ad:0a:8b:67:58:
         f3:17:9c:a4:16:b4:31:37:88:55:ce:89:1c:69:a2:07:59:bb:
         23:55:03:d6:aa:70:c8:50:0b:88:45:3c:64:0d:ce:87:82:d1:
         0e:e1:fd:8a:b4:78:a5:bc:2c:ce:07:ce:55:20:f5:d4:c3:b3:
         fe:a2:da:51:35:4b:fe:03:8b:e4:7b:2f:11:89:33:14:2a:cc:
         37:7a:76:73
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY0
NkMyNEFGMTEwLwYDVQQFEyg1NTA0MDk0NTM2MjJFRDlFNUUxQjdENTJGNjU3Njg3
MDZEMjI3RDg4MB4XDTIxMTAyMDEzMDM0NVoXDTI2MTIzMTEzMDM0NVowGDEWMBQG
A1UEAwwNNjE3MDEzYjUtMWNmYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMQM/cc88uv33VuBH/jeN3+6XRD4WdO8eoXFFueGzbVcdTXS7vExDB+rhlpg
dZgvpisYJrkT4bc6hN/mvKd36jXi7joT0MIGtenOC0dyMhGYkI3qw7MgGbF5jHJR
0L6FGA9zMI5GqLRUMFE/ZPueYBrsLkeiVsuwHMPJMe+RuCvgaGXyMV5rOQ64zDfb
Wx0PlHKcQd4TpmuoHNHKe9C81ot3QTWRigIFtan+P+ULy5OQEyaQ6K3j7fFQDc1C
HwTX6Mis1uiOTxJRWbS0SKnfOLkLupKV/yErlB/c/cfyg0dcV9bLru97yNHpd1T+
AnjnOkBrTB7+BCPEE67V5rWodj8CAwEAAaOCArwwggK4MB0GA1UdDgQWBBSTN0Dc
vBjnxl6p19+eHMDhrOeCpTAfBgNVHSMEGDAWgBRVBAlFNiLtnl4bfVL2V2hwbSJ9
iDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDZDMjQvMUM4NkI3ODYyQjVCMTFFQzhFQkVGNTQwRDhBMDE0Q0UvVlFRSlJU
WWk3WjVlRzMxUzlsZG9jRzBpZllnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVlFRSlJUWWk3WjVlRzMxUzlsZG9jRzBpZllnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDZDMjQvMUM4NkI3ODYyQjVCMTFFQzhFQkVGNTQwRDhB
MDE0Q0UvMkE5NTAwMjAzMUE2MTFFQ0JENkVFRTJBRDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAMQNagMEAMQr+jAPBAIAAjAJ
AwcAIAFD/QAAMA0GCSqGSIb3DQEBCwUAA4IBAQCGv32r2WqvGFkXtZEVomNUriBM
cjD+3BR/o+TYUogREw5Vq6KlIo7xEi84Q7nxcGhwUGuiNnLwJcOzjHERp48e16yr
8MN/6dhAQLPT1CJ+DodkfRPD6RV0rfQhlk8Hd1WXQUkqZ+dHYUMCA0Xa5U6UyseT
jij+QGUO6vHVel3P06whxRsGQoAyd/ZX4JwyRK4cSQY2ejzfjVFX6CyXO7hDXgib
TxO5EXdccXZtCoTMrQqLZ1jzF5ykFrQxN4hVzokcaaIHWbsjVQPWqnDIUAuIRTxk
Dc6HgtEO4f2KtHilvCzOB85VIPXUw7P+otpRNUv+A4vkey8RiTMUKsw3enZz
-----END CERTIFICATE-----