Route Origin Authorization

$ rpki-client -vvf k35.rrdp-rpki.athene-center.net/repo/k35-rpki-athene-center/0/3135382e3232302e3136342e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3136342e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          rjmAcVBvQGmFp9POR8jdy9flwl6J6km3eCvgF9GX1qs=
Subject key identifier:   4D:0F:15:F6:2C:8E:C5:FF:56:90:A8:7A:97:F0:A9:B8:02:70:8B:AC
Certificate issuer:       /CN=E69461FAB6F61C1E4796E588A042C6F95AAF4C87
Certificate serial:       5F675682D47EAB2A00F2F43908F32F6B76D464D4
Authority key identifier: E6:94:61:FA:B6:F6:1C:1E:47:96:E5:88:A0:42:C6:F9:5A:AF:4C:87
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E69461FAB6F61C1E4796E588A042C6F95AAF4C87.cer
Subject info access:      rsync://k35.rrdp-rpki.athene-center.net/repo/k35-rpki-athene-center/0/3135382e3232302e3136342e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:44:18 +0000
ROA not before:           Wed 27 Mar 2024 19:39:18 +0000
ROA not after:            Wed 26 Mar 2025 19:44:18 +0000
asID:                     208162
IP address blocks:        158.220.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:67:56:82:d4:7e:ab:2a:00:f2:f4:39:08:f3:2f:6b:76:d4:64:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69461FAB6F61C1E4796E588A042C6F95AAF4C87
        Validity
            Not Before: Mar 27 19:39:18 2024 GMT
            Not After : Mar 26 19:44:18 2025 GMT
        Subject: CN=4D0F15F62C8EC5FF5690A87A97F0A9B802708BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:37:19:1f:6c:13:e6:d5:75:95:31:24:df:
                    91:9e:2e:38:e3:3b:72:96:89:02:ee:83:61:86:72:
                    56:0f:66:99:f2:b9:c6:e3:be:72:a7:b9:1b:5e:31:
                    73:3b:8d:af:56:98:32:91:aa:3d:d6:69:8f:46:53:
                    48:ef:99:7d:4d:90:eb:73:7e:ec:63:d6:a7:30:22:
                    72:3b:58:96:2f:30:45:e9:55:24:7c:ab:bc:fb:55:
                    a2:e8:d2:4c:d1:b3:bf:a9:79:a5:b3:2d:90:55:cc:
                    3f:f1:00:d9:a8:88:2e:fb:48:04:15:dd:b4:2c:3b:
                    3a:5e:fc:e7:5d:f9:ee:31:90:3a:dc:64:b0:ff:e6:
                    9c:b1:a1:11:29:c7:22:b2:97:44:d2:ec:61:e0:21:
                    08:28:93:0f:c1:7e:f6:c1:29:6e:b7:0e:f8:61:cd:
                    90:63:90:40:e0:82:5b:a3:30:0f:61:4b:00:35:16:
                    1c:3b:2e:ba:8e:dd:fa:d3:c5:79:0e:69:c9:63:a7:
                    f6:6e:d9:45:c8:fe:4f:92:bc:9f:15:a6:25:d6:7c:
                    05:46:c0:76:6d:57:3b:a0:96:7b:22:59:dd:6e:08:
                    b9:62:89:59:97:f3:de:d5:ed:66:d8:5e:86:9b:02:
                    19:ed:89:bc:5c:e0:8e:55:ae:e6:d7:39:28:47:d8:
                    48:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0F:15:F6:2C:8E:C5:FF:56:90:A8:7A:97:F0:A9:B8:02:70:8B:AC
            X509v3 Authority Key Identifier:
                keyid:E6:94:61:FA:B6:F6:1C:1E:47:96:E5:88:A0:42:C6:F9:5A:AF:4C:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k35.rrdp-rpki.athene-center.net/repo/k35-rpki-athene-center/0/E69461FAB6F61C1E4796E588A042C6F95AAF4C87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E69461FAB6F61C1E4796E588A042C6F95AAF4C87.cer

            Subject Information Access:
                Signed Object - URI:rsync://k35.rrdp-rpki.athene-center.net/repo/k35-rpki-athene-center/0/3135382e3232302e3136342e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:f5:4a:57:6f:85:22:0f:f5:cc:57:5f:4d:7f:ba:47:17:7e:
         39:22:91:c0:fe:8a:78:f6:25:e8:7b:52:f8:08:76:36:04:3d:
         07:aa:3b:54:bc:03:4c:a2:6a:13:53:af:f7:41:76:83:b8:d0:
         ae:23:89:5e:b6:c9:ec:40:60:f8:3a:63:e9:29:17:0e:85:4c:
         33:94:ff:0a:57:df:dc:d4:eb:d6:21:c1:ad:88:ad:24:3b:03:
         4c:23:7a:d7:7f:a1:36:1d:38:df:ff:40:d8:46:b5:5d:9a:ad:
         6e:f7:1e:e4:4d:0f:dc:c0:9f:8b:3c:07:e0:32:bd:2f:c5:57:
         73:77:23:97:9f:b4:22:45:a4:45:75:37:cb:34:cc:02:47:e2:
         6d:5e:e5:31:70:27:40:84:ba:94:b2:4f:51:6d:f8:e5:76:35:
         e0:9a:12:b9:33:2e:fb:87:de:c5:3b:78:4c:65:39:5f:9b:74:
         7e:a7:ab:18:05:39:24:09:dc:aa:14:7b:a7:13:dc:a2:5c:46:
         c8:c4:d5:31:99:0c:87:ab:44:da:d0:d1:4a:90:4f:a2:fc:49:
         bd:7e:68:6c:03:e9:ac:d9:3c:03:c5:c1:a1:3f:b2:5c:65:63:
         99:2e:c2:94:82:74:a2:76:44:f4:6e:61:be:00:06:ae:53:d8:
         96:9f:7a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org