Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/B1116974BFF611E88EA6D52CF8AEA228.roa
File:                     B1116974BFF611E88EA6D52CF8AEA228.roa (raw, json)
Hash identifier:          dfg0fcAorrpM9o4HeQqRZv1YJKvqJCIissk1rUBVn7I=
Subject key identifier:   48:DC:5B:60:52:05:CA:83:50:53:FE:30:5B:DB:DA:70:3F:D8:AF:A5
Certificate issuer:       /CN=F36940B5AF/serialNumber=2F1D6E00B08AF7123418FC56218E6A3264D3D994
Certificate serial:       81
Authority key identifier: 2F:1D:6E:00:B0:8A:F7:12:34:18:FC:56:21:8E:6A:32:64:D3:D9:94
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Lx1uALCK9xI0GPxWIY5qMmTT2ZQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/B1116974BFF611E88EA6D52CF8AEA228.roa
Signing time:             Mon 24 Sep 2018 12:38:09 +0000
ROA not before:           Mon 24 Sep 2018 12:38:03 +0000
ROA not after:            Thu 30 Sep 2027 12:38:03 +0000
asID:                     32437
IP address blocks:        41.223.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36940B5AF/serialNumber=2F1D6E00B08AF7123418FC56218E6A3264D3D994
        Validity
            Not Before: Sep 24 12:38:03 2018 GMT
            Not After : Sep 30 12:38:03 2027 GMT
        Subject: CN=5ba8dab1-3860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:2d:92:bc:ab:49:79:45:fa:98:c3:12:23:
                    68:a7:fb:d5:0c:08:f5:54:c8:67:d6:24:72:cd:48:
                    3c:47:d8:46:fb:e3:24:f3:4a:f2:ae:c8:e4:f5:4a:
                    f1:a3:67:c3:87:48:f5:f7:16:a8:35:da:2a:b2:ab:
                    47:b1:00:8e:5a:f7:11:85:af:08:32:6e:8c:d8:89:
                    a6:18:10:cf:5a:ca:54:df:bd:a4:6f:f5:24:0d:a6:
                    37:58:ef:9c:e7:df:ca:0d:d5:c4:68:3e:97:29:3f:
                    9a:f9:c3:d9:79:ca:39:aa:94:0a:90:bb:48:71:d4:
                    2b:06:42:b4:2e:34:1a:42:79:ae:24:e4:c3:e8:78:
                    06:4f:43:7b:83:c8:07:76:e4:3b:c5:68:4c:08:39:
                    b2:3c:f7:a2:18:89:ba:fc:7c:6c:27:e0:86:ff:bb:
                    06:0d:d0:6b:66:45:0c:39:16:0f:14:d3:98:0e:ed:
                    c4:3d:e2:3a:9c:78:b8:e5:25:73:05:17:5b:9d:80:
                    1b:76:2d:12:cd:ab:33:ab:27:50:bc:13:70:2d:15:
                    c7:27:74:f3:fc:bf:b4:0d:da:fa:e0:24:7a:f5:db:
                    56:14:81:c9:1d:4f:bd:54:c8:8f:c4:c3:02:9a:88:
                    e9:3e:61:26:a3:35:b7:b9:9f:9d:ce:d9:72:9c:48:
                    b1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DC:5B:60:52:05:CA:83:50:53:FE:30:5B:DB:DA:70:3F:D8:AF:A5
            X509v3 Authority Key Identifier:
                keyid:2F:1D:6E:00:B0:8A:F7:12:34:18:FC:56:21:8E:6A:32:64:D3:D9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/Lx1uALCK9xI0GPxWIY5qMmTT2ZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Lx1uALCK9xI0GPxWIY5qMmTT2ZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36940B5/41BB43F2641F11E88026CE28F8AEA228/B1116974BFF611E88EA6D52CF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  41.223.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:b8:d5:c8:64:17:21:44:2e:b9:4d:73:f1:fc:71:18:0e:5b:
         32:98:92:7b:36:f6:46:4e:6d:8c:20:fa:32:a1:b2:58:4d:00:
         6e:1f:51:99:9f:c0:07:bf:b9:e9:e3:56:2b:c9:88:e6:ef:38:
         53:6a:f5:3d:46:e7:71:1e:90:fa:e3:0e:44:c0:56:1d:f1:0b:
         74:84:79:49:96:7a:79:87:97:ad:c3:61:74:11:7d:3d:78:a7:
         0a:80:46:75:84:1a:86:77:4b:1c:d5:d8:02:42:00:d1:70:4d:
         d7:c3:63:7f:c9:9c:cd:c0:1c:43:ce:b6:4f:c6:70:b0:d3:d0:
         7e:73:50:9c:df:18:20:77:bb:95:f7:b9:0d:f9:4e:0d:4f:da:
         3d:27:2a:c9:85:d5:5d:ad:6d:95:dc:a0:1c:75:89:1f:55:c3:
         ff:bf:3b:03:07:59:2b:43:1d:c9:59:8d:f1:03:3c:6b:b4:1f:
         a6:3e:82:55:99:85:f5:94:f6:b3:d5:ae:72:6a:a8:7c:57:84:
         bd:76:bd:84:06:be:26:d3:ea:79:2b:e4:3c:42:05:4f:e2:8d:
         1f:ff:ec:7d:ba:c6:be:26:f3:f1:44:5a:d0:c0:d0:73:99:ee:
         fc:6b:45:17:47:70:8c:86:89:d0:ca:50:bb:21:03:a5:21:a5:
         18:88:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----