Route Origin Authorization

$ rpki-client -vvf k32.rrdp-rpki.athene-center.net/repo/k32-rpki-athene-center/0/3135382e3232302e3136312e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3136312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          I8KwH3XZKUATPgzLxoDhTuz5KSntCrbSQ167FIs2LYk=
Subject key identifier:   1D:1D:93:2E:C1:E1:F4:D2:24:71:ED:A0:61:7D:83:62:C0:2F:17:0D
Certificate issuer:       /CN=C9B961A9833E715D721B69A72DB9A0F90B8EC98D
Certificate serial:       65E6C34CE54E9F3FC9E4FCE87AE5831A0F717737
Authority key identifier: C9:B9:61:A9:83:3E:71:5D:72:1B:69:A7:2D:B9:A0:F9:0B:8E:C9:8D
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/C9B961A9833E715D721B69A72DB9A0F90B8EC98D.cer
Subject info access:      rsync://k32.rrdp-rpki.athene-center.net/repo/k32-rpki-athene-center/0/3135382e3232302e3136312e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:43:44 +0000
ROA not before:           Wed 27 Mar 2024 19:38:44 +0000
ROA not after:            Wed 26 Mar 2025 19:43:44 +0000
asID:                     208162
IP address blocks:        158.220.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e6:c3:4c:e5:4e:9f:3f:c9:e4:fc:e8:7a:e5:83:1a:0f:71:77:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B961A9833E715D721B69A72DB9A0F90B8EC98D
        Validity
            Not Before: Mar 27 19:38:44 2024 GMT
            Not After : Mar 26 19:43:44 2025 GMT
        Subject: CN=1D1D932EC1E1F4D22471EDA0617D8362C02F170D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:46:f5:c5:07:11:63:22:65:94:a1:93:5a:
                    6c:c5:4c:6b:5d:b6:9e:63:7f:a5:b7:e9:af:a0:b2:
                    89:fb:75:c1:51:92:24:50:f6:1a:f1:b9:ab:c4:91:
                    5a:e9:e8:e5:ff:ff:b4:ab:67:fd:24:fb:52:b1:56:
                    da:99:ed:ad:b6:3b:2a:f0:db:a4:cd:e9:98:99:4c:
                    8b:ef:fe:be:b7:b9:34:1c:e3:94:3a:95:ba:30:fb:
                    56:30:44:57:06:43:db:e4:28:3c:fd:d4:43:fd:55:
                    55:fb:1c:71:8e:b8:ee:8e:47:fb:1d:a7:dc:0c:67:
                    14:fe:47:ad:af:b3:f8:22:c6:19:00:29:38:b8:3d:
                    8b:94:42:68:20:60:40:4c:53:c4:48:ad:4a:c6:a5:
                    88:27:1f:a1:02:c6:c2:1f:24:65:b0:d6:20:1a:cc:
                    68:29:11:99:44:60:6d:c3:0b:38:8c:fb:1d:ff:02:
                    5f:3e:42:55:7d:6a:8e:86:19:af:69:24:b5:45:0e:
                    24:48:28:d9:ce:3a:84:14:dd:d0:ae:d7:eb:5c:cc:
                    9d:a0:99:79:3b:71:36:f4:3b:a9:44:e8:91:68:7e:
                    c9:ce:3a:02:d8:6c:4a:00:0d:6f:25:29:eb:f7:cd:
                    74:d4:8e:e5:37:90:76:e5:37:52:ee:75:8c:48:39:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1D:93:2E:C1:E1:F4:D2:24:71:ED:A0:61:7D:83:62:C0:2F:17:0D
            X509v3 Authority Key Identifier:
                keyid:C9:B9:61:A9:83:3E:71:5D:72:1B:69:A7:2D:B9:A0:F9:0B:8E:C9:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k32.rrdp-rpki.athene-center.net/repo/k32-rpki-athene-center/0/C9B961A9833E715D721B69A72DB9A0F90B8EC98D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/C9B961A9833E715D721B69A72DB9A0F90B8EC98D.cer

            Subject Information Access:
                Signed Object - URI:rsync://k32.rrdp-rpki.athene-center.net/repo/k32-rpki-athene-center/0/3135382e3232302e3136312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f8:a5:8c:59:67:4c:fb:a2:89:77:e3:41:38:5c:10:94:06:
         2e:7d:36:49:fd:55:81:3e:b7:38:67:69:ec:f6:cc:a6:01:3a:
         a3:18:eb:b0:92:2f:8f:2c:31:36:61:e9:b1:ce:da:ab:d7:ec:
         8b:6b:51:be:ea:f8:39:b6:3f:91:c9:2d:ee:d1:0b:45:87:bf:
         28:e3:0e:60:e4:ab:60:a5:24:6c:0c:2b:43:35:09:c3:a3:5b:
         7a:3c:47:5a:74:2a:93:09:c2:20:0e:bc:45:2b:f6:2c:09:41:
         43:ce:14:9b:7c:48:92:6d:0e:a3:da:f2:f5:6f:f2:3b:6d:be:
         18:a2:6d:c0:5d:54:36:d7:d8:b7:fc:4d:5c:ce:44:91:6f:63:
         3c:ed:01:76:27:6e:e9:be:05:f4:fb:11:d2:84:6e:85:3c:66:
         f9:e5:6f:0d:a0:fb:01:a1:8a:cf:a2:0f:1c:36:89:08:41:06:
         c7:1f:8f:47:72:7c:71:cf:4f:89:a7:86:2c:bc:a9:20:99:be:
         e2:3e:cc:8d:4f:61:8b:ad:19:be:ee:cc:14:5f:c8:d4:8e:38:
         13:78:2e:2a:fb:cd:74:af:7a:98:af:34:b6:63:85:70:4c:94:
         35:c3:a9:e4:04:21:44:dc:cb:62:5c:5e:8d:c9:5f:31:d8:93:
         e5:92:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org