Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/97FD60E6642011E8B8A9BD2AF8AEA228.roa
File:                     97FD60E6642011E8B8A9BD2AF8AEA228.roa (raw, json)
Hash identifier:          vXg/zlRdHmjrWBf29YSBNGtKjmGvWfWlk6rxJijjIYM=
Subject key identifier:   DC:35:26:F8:AB:46:40:07:16:BA:32:45:3F:E4:E7:31:E8:8F:5B:C2
Certificate issuer:       /CN=F36940B5AF/serialNumber=2F1D6E00B08AF7123418FC56218E6A3264D3D994
Certificate serial:       02
Authority key identifier: 2F:1D:6E:00:B0:8A:F7:12:34:18:FC:56:21:8E:6A:32:64:D3:D9:94
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Lx1uALCK9xI0GPxWIY5qMmTT2ZQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/97FD60E6642011E8B8A9BD2AF8AEA228.roa
Signing time:             Wed 30 May 2018 15:46:19 +0000
ROA not before:           Wed 30 May 2018 15:46:11 +0000
ROA not after:            Tue 30 May 2028 15:46:11 +0000
asID:                     32437
IP address blocks:        102.176.224.0/20 maxlen: 24
                          2c0f:f178::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36940B5AF/serialNumber=2F1D6E00B08AF7123418FC56218E6A3264D3D994
        Validity
            Not Before: May 30 15:46:11 2018 GMT
            Not After : May 30 15:46:11 2028 GMT
        Subject: CN=5b0ec74b-7532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:c2:88:d5:08:9b:ac:bc:8c:8b:1a:b4:37:
                    6a:6c:fe:26:eb:89:3d:4d:1b:d0:1c:db:72:cf:25:
                    30:5e:77:96:ce:2c:d8:f2:06:34:58:5c:f1:63:38:
                    69:34:64:4a:3d:3a:f4:60:ea:97:8d:85:f8:bd:ed:
                    ad:6d:23:90:50:25:f5:62:df:38:1c:ac:ca:b2:a1:
                    a0:94:1d:78:e8:39:36:64:e6:fe:b3:11:8d:fe:a6:
                    a7:4b:36:2e:8e:81:df:99:b7:c6:29:c7:89:20:94:
                    c3:5a:d7:8b:ff:74:eb:f2:cc:d7:c7:25:2c:d5:1d:
                    ed:a7:fe:ee:0d:9b:0a:1f:2b:34:d6:ac:39:a6:c6:
                    a2:06:04:eb:9e:30:18:1c:e3:b2:14:ae:28:34:41:
                    c7:84:1c:9b:c3:5e:b4:2e:3f:e8:ab:49:68:fe:b4:
                    75:8c:37:8e:65:95:98:a4:a6:c0:30:49:93:88:98:
                    60:b9:9a:bc:f0:44:bb:2d:a8:65:8a:9a:49:d1:22:
                    3b:ee:eb:3f:8d:43:76:07:22:1c:9a:98:2e:0a:87:
                    16:d2:96:d1:65:8e:83:61:f7:f4:e8:d6:1a:6a:0e:
                    b9:76:07:64:ff:a6:a8:f3:e1:a0:70:0e:5d:b8:9c:
                    09:c1:11:64:e3:d5:c8:a0:8d:1e:0d:4e:93:cf:8e:
                    1f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:35:26:F8:AB:46:40:07:16:BA:32:45:3F:E4:E7:31:E8:8F:5B:C2
            X509v3 Authority Key Identifier:
                keyid:2F:1D:6E:00:B0:8A:F7:12:34:18:FC:56:21:8E:6A:32:64:D3:D9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/Lx1uALCK9xI0GPxWIY5qMmTT2ZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Lx1uALCK9xI0GPxWIY5qMmTT2ZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/97FD60E6642011E8B8A9BD2AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.176.224.0/20
                IPv6:
                  2c0f:f178::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:96:8c:1f:67:69:64:1a:b1:d7:1a:28:f8:b7:08:6b:19:9a:
         c3:8f:ca:1a:7b:a8:99:b9:82:05:90:d6:bb:95:a1:c5:fc:28:
         3f:b4:41:ce:91:2a:98:12:e1:b5:81:6b:77:f8:d7:8c:a1:d9:
         77:b8:ff:db:a6:75:67:9e:3e:63:0c:40:4a:7e:8e:3b:ab:3b:
         03:4a:c7:6f:32:1d:c7:14:0b:37:e3:e1:88:82:42:ca:69:dd:
         fc:ec:c7:26:15:26:89:28:86:ab:24:bc:0b:c8:c9:cf:2c:a2:
         12:d9:28:fe:a5:6c:61:11:bf:4e:92:6a:13:c4:83:f8:db:1e:
         61:67:03:3b:b8:99:3c:0d:ef:e3:d7:e1:6b:0a:ca:b7:47:3a:
         08:37:58:98:05:7b:f6:74:20:2f:f3:56:4d:2a:97:a7:8c:7c:
         6b:9f:49:2a:67:47:ea:e8:9b:cb:cf:d8:33:cf:31:23:1e:88:
         73:99:50:d1:8f:d1:da:da:a5:bd:39:9f:e3:c6:97:90:10:8d:
         75:05:83:29:e7:02:01:0c:0f:09:5b:81:b5:80:0c:cd:a7:6c:
         ad:ac:f4:f4:22:b9:19:24:d1:0a:53:99:4a:1a:c3:31:96:89:
         8c:d4:58:ce:1d:45:e8:ce:ae:56:d8:65:03:44:72:6b:c3:43:
         a7:82:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----