Route Origin Authorization

$ rpki-client -vvf k20.pp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/3135382e3232302e3134392e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          ZXusEN/AP2BP8Jt7EpAoyhY/zJ7/L5Nj5Uo0Vorw02M=
Subject key identifier:   8B:C5:02:E7:4A:AA:FC:63:5C:19:C7:A8:43:8A:5B:5B:B2:A3:87:9D
Certificate issuer:       /CN=D3E7DF1829C670B64320F4DF0B7CDFBCE6738486
Certificate serial:       1502108327B4BC6F63B8FAAF3766399CE2151C4A
Authority key identifier: D3:E7:DF:18:29:C6:70:B6:43:20:F4:DF:0B:7C:DF:BC:E6:73:84:86
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.cer
Subject info access:      rsync://k20.pp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/3135382e3232302e3134392e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:27:53 +0000
ROA not before:           Fri 22 Mar 2024 10:22:53 +0000
ROA not after:            Fri 21 Mar 2025 10:27:53 +0000
asID:                     208162
IP address blocks:        158.220.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:02:10:83:27:b4:bc:6f:63:b8:fa:af:37:66:39:9c:e2:15:1c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3E7DF1829C670B64320F4DF0B7CDFBCE6738486
        Validity
            Not Before: Mar 22 10:22:53 2024 GMT
            Not After : Mar 21 10:27:53 2025 GMT
        Subject: CN=8BC502E74AAAFC635C19C7A8438A5B5BB2A3879D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:0a:fc:95:97:04:da:12:65:67:75:ef:65:
                    62:21:52:fa:d8:71:57:b4:f5:6f:9c:e6:25:df:82:
                    49:88:94:3f:b2:47:9d:59:f2:2d:92:78:1f:81:0d:
                    03:3c:ef:59:55:26:80:69:fd:3a:75:4c:3b:8a:ad:
                    fe:2f:88:d9:ee:c1:e3:83:8b:e4:e0:8b:e7:90:03:
                    a0:59:04:94:14:da:d2:d0:02:67:a5:1b:27:5d:d4:
                    7a:12:b1:54:b4:b7:da:fa:2b:ce:cc:c1:93:24:d6:
                    38:98:89:7c:e7:08:72:59:a0:82:4d:4a:d8:1a:1e:
                    51:e2:65:44:97:59:26:4a:fb:0f:a2:2e:51:1b:71:
                    aa:50:98:dc:91:7b:d6:ac:2a:e1:6f:f4:00:36:5a:
                    a1:8b:67:00:2a:f4:5c:3f:79:32:6a:bc:1c:a7:a6:
                    66:c0:3a:87:e3:b7:ae:33:e9:e7:a3:45:5d:c9:77:
                    ef:79:87:b7:13:be:c4:af:17:db:04:f0:3a:52:c6:
                    65:bb:05:8f:75:df:e8:d7:2c:5d:c6:04:76:23:37:
                    9d:62:a3:4c:ca:6a:94:01:f4:9d:b2:9c:e5:25:63:
                    9f:58:08:b8:e8:3a:ea:e8:e9:51:c8:ea:1b:46:9c:
                    22:a0:28:4d:a3:e4:cb:8a:9e:e3:93:bc:56:64:26:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C5:02:E7:4A:AA:FC:63:5C:19:C7:A8:43:8A:5B:5B:B2:A3:87:9D
            X509v3 Authority Key Identifier:
                keyid:D3:E7:DF:18:29:C6:70:B6:43:20:F4:DF:0B:7C:DF:BC:E6:73:84:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k20.pp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/D3E7DF1829C670B64320F4DF0B7CDFBCE6738486.cer

            Subject Information Access:
                Signed Object - URI:rsync://k20.pp-rpki.athene-center.net/repo/k20-rpki-athene-center/0/3135382e3232302e3134392e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:7f:ea:36:ef:0b:19:ea:ad:4f:4e:98:91:20:e7:fa:93:93:
         f6:dc:5f:08:07:06:77:a4:c4:b8:0f:e8:cc:8a:cf:29:11:36:
         12:2a:cb:a0:a0:df:18:59:50:83:25:bb:2d:da:93:27:52:6e:
         3f:b5:f4:85:85:ed:6c:8e:76:f2:2c:da:1d:d5:75:9a:dc:f2:
         3b:38:af:02:41:13:3f:f4:ee:45:a7:ca:ed:d5:e0:15:6d:fa:
         bf:e4:51:d8:98:70:34:62:9a:c2:47:34:cd:c3:fb:0d:c5:31:
         07:b5:9a:c8:5d:2e:96:f5:54:94:8d:4c:cd:39:24:4e:20:f9:
         90:6f:18:e4:87:ef:b3:f4:42:9a:4c:16:2f:a0:4f:b5:b9:98:
         be:40:3e:f4:b2:9b:5e:8f:a0:72:da:7a:99:87:b9:2a:39:bb:
         7c:91:b8:dd:86:5d:d2:41:cd:20:6f:5c:81:9e:82:fd:2a:57:
         8e:13:1e:dd:17:a4:e5:5b:7e:79:76:4c:2c:78:88:6c:7a:18:
         10:24:fd:53:cf:40:44:f1:9a:c7:ef:14:24:97:24:7b:0b:13:
         a8:f5:16:e2:9d:67:61:6f:70:4d:14:78:8e:0e:4b:de:b5:ad:
         d9:af:94:0a:e4:73:74:97:bd:c5:e6:40:88:2a:8a:6d:76:88:
         f4:66:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 22:50:52 2024 by rpki-client on console-ams.rpki-client.org