Route Origin Authorization

$ rpki-client -vvf k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/3135382e3232302e3136322e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3136322e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          03qz6+Sr0vWZZEuZ2iMxKyuPyOr6SeBCyO8KEB2eckg=
Subject key identifier:   8C:3B:36:56:E5:4B:AB:FC:88:17:91:B5:D9:5B:88:3C:41:0B:96:3C
Certificate issuer:       /CN=3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F
Certificate serial:       73167979A64FCAF666C466E85F784CA1DB30CE5B
Authority key identifier: 3B:FA:6E:79:84:FC:DB:AA:BE:BE:AA:23:DC:06:E0:20:58:A5:F8:8F
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.cer
Subject info access:      rsync://k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/3135382e3232302e3136322e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:43:55 +0000
ROA not before:           Wed 27 Mar 2024 19:38:55 +0000
ROA not after:            Wed 26 Mar 2025 19:43:55 +0000
asID:                     208162
IP address blocks:        158.220.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:16:79:79:a6:4f:ca:f6:66:c4:66:e8:5f:78:4c:a1:db:30:ce:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F
        Validity
            Not Before: Mar 27 19:38:55 2024 GMT
            Not After : Mar 26 19:43:55 2025 GMT
        Subject: CN=8C3B3656E54BABFC881791B5D95B883C410B963C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:eb:93:91:7e:0b:b3:05:5a:17:e9:61:36:12:
                    29:72:f7:c4:e5:a3:a9:ac:d7:61:6d:e8:18:ce:91:
                    c8:af:3c:61:3b:03:af:96:9e:d5:a8:cf:ce:73:69:
                    c6:52:5a:cc:b5:58:3a:b6:d3:1e:12:c8:5b:14:ec:
                    5e:e9:99:92:f3:ba:ae:78:38:ae:c1:d8:e9:0b:ad:
                    bb:05:9a:e9:7e:7f:8a:c5:b6:39:79:9a:f1:1c:07:
                    e8:ef:df:8e:f2:6f:7d:59:4e:cf:fa:8d:99:21:14:
                    25:a4:03:20:54:fd:a8:22:2b:6b:45:f8:20:9d:bf:
                    74:c7:40:62:c9:b2:74:c7:80:f1:53:ff:90:9f:31:
                    18:cd:59:9a:e3:98:cc:66:b4:37:aa:2d:e6:16:72:
                    d3:91:fd:30:d8:91:6b:d2:00:47:b9:45:3b:22:77:
                    7b:d5:b3:2e:73:f5:44:22:5f:45:14:08:86:b2:02:
                    f4:5a:ea:9a:3e:95:de:b7:c0:7f:01:7a:b7:74:e2:
                    60:4b:1a:e2:21:b9:28:1c:a9:ba:2d:25:b3:ce:dc:
                    d2:45:9f:c1:98:4d:ee:79:58:d5:99:93:70:b4:fc:
                    30:3a:54:e5:f6:f6:a3:d4:de:d4:66:61:43:e0:59:
                    1f:5c:07:7c:64:10:bd:ed:07:fa:03:97:f9:3b:0d:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3B:36:56:E5:4B:AB:FC:88:17:91:B5:D9:5B:88:3C:41:0B:96:3C
            X509v3 Authority Key Identifier:
                keyid:3B:FA:6E:79:84:FC:DB:AA:BE:BE:AA:23:DC:06:E0:20:58:A5:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3BFA6E7984FCDBAABEBEAA23DC06E02058A5F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://k33.rrdp-rpki.athene-center.net/repo/k33-rpki-athene-center/0/3135382e3232302e3136322e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c2:84:ab:6a:f1:85:b0:58:df:ea:db:03:6b:9c:f6:72:f9:
         58:65:69:75:f2:26:83:01:d8:90:9f:ee:bd:46:71:eb:4a:59:
         a9:6a:7f:90:f9:aa:2a:8d:1e:ad:13:b8:61:c7:1d:ac:2e:67:
         af:69:64:c3:2e:22:3a:2a:38:da:74:f0:d5:c8:38:47:1e:6b:
         93:1a:00:6c:ad:d5:64:d9:ee:e4:eb:e3:a1:7d:86:ff:18:a4:
         28:ad:94:81:66:83:9c:04:77:fc:4b:1b:4f:54:b3:16:7b:4d:
         99:ce:2a:8b:52:df:f9:40:a8:81:10:7e:d7:6e:4f:2b:47:61:
         ff:fe:51:30:e0:ec:4d:48:de:fb:31:e8:24:f6:04:fc:44:b2:
         1f:18:95:aa:d9:72:ba:72:57:11:51:6c:d6:a5:d6:9e:72:77:
         9a:72:83:f7:75:ca:d1:1a:67:29:27:b8:75:aa:2d:c5:a0:f7:
         b9:38:72:8c:9b:0d:29:72:f5:de:1e:c9:23:8a:01:77:96:8a:
         12:37:f4:08:dc:01:b8:d8:38:e4:bc:91:e1:cd:22:22:9f:69:
         d8:ba:c4:25:0a:90:e9:04:a7:68:10:e2:fd:d3:e1:f6:24:d7:
         76:84:97:9c:09:27:90:bb:0a:b8:c9:83:be:14:46:41:c8:86:
         53:b5:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org