Route Origin Authorization

$ rpki-client -vvf k45.rrdp-rpki.athene-center.net/repo/k45-rpki-athene-center/0/3135382e3232302e3137342e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3137342e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          cEbDZ8J5sk4ZfqrjZWyDkKrtlU2E3oqgCIppttLGyP0=
Subject key identifier:   05:07:70:21:DF:8F:D3:23:31:82:45:6F:0A:71:EF:FF:4C:C7:59:07
Certificate issuer:       /CN=B236C7BF2CBA6A186371F0BC1F6469D3F5CE889C
Certificate serial:       64DF8D2BDE9ACC3592E9273783EC1554BDFF572E
Authority key identifier: B2:36:C7:BF:2C:BA:6A:18:63:71:F0:BC:1F:64:69:D3:F5:CE:88:9C
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/B236C7BF2CBA6A186371F0BC1F6469D3F5CE889C.cer
Subject info access:      rsync://k45.rrdp-rpki.athene-center.net/repo/k45-rpki-athene-center/0/3135382e3232302e3137342e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:46:11 +0000
ROA not before:           Wed 27 Mar 2024 19:41:11 +0000
ROA not after:            Wed 26 Mar 2025 19:46:11 +0000
asID:                     208162
IP address blocks:        158.220.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:df:8d:2b:de:9a:cc:35:92:e9:27:37:83:ec:15:54:bd:ff:57:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B236C7BF2CBA6A186371F0BC1F6469D3F5CE889C
        Validity
            Not Before: Mar 27 19:41:11 2024 GMT
            Not After : Mar 26 19:46:11 2025 GMT
        Subject: CN=05077021DF8FD3233182456F0A71EFFF4CC75907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:18:76:d6:3d:9e:77:e6:61:85:2d:9a:ea:
                    89:52:8b:29:cb:ee:58:5f:ec:24:0c:41:98:93:19:
                    8b:18:c0:a4:7d:c5:d2:c0:52:4b:78:e5:a8:31:52:
                    23:14:e3:00:c9:92:27:95:22:07:0c:64:6c:02:0d:
                    4a:80:6a:2e:53:dc:cb:2b:18:c0:5e:61:10:c5:44:
                    4c:76:91:42:62:6b:b0:f0:ec:31:b3:79:9f:e5:5d:
                    d7:23:21:b3:eb:d3:c2:6c:08:3f:ad:39:a0:1d:74:
                    fc:d1:ed:80:08:92:dc:2a:6b:33:9f:bd:9f:be:71:
                    ef:c5:62:9a:d5:d4:c3:bd:c0:de:9c:d4:fa:86:9a:
                    95:e0:43:58:bc:1b:34:3f:8a:3e:10:fc:70:98:82:
                    99:02:77:08:24:50:61:3d:c3:02:83:b8:0a:e4:9a:
                    a7:e0:61:86:bc:6c:c8:0c:7c:fd:3c:e7:d3:91:ff:
                    72:69:49:0d:f0:1f:b1:7c:0e:70:00:fe:2c:05:94:
                    77:67:b5:09:7a:fa:b2:ab:20:a5:0f:02:78:a5:38:
                    4e:80:3d:46:10:62:6f:8c:1a:9c:a9:f7:02:9b:f5:
                    63:de:32:85:b9:ba:22:ed:2d:13:e2:55:41:d2:dd:
                    ee:fb:82:bc:92:aa:f1:53:22:49:b8:b7:90:60:70:
                    72:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:07:70:21:DF:8F:D3:23:31:82:45:6F:0A:71:EF:FF:4C:C7:59:07
            X509v3 Authority Key Identifier:
                keyid:B2:36:C7:BF:2C:BA:6A:18:63:71:F0:BC:1F:64:69:D3:F5:CE:88:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k45.rrdp-rpki.athene-center.net/repo/k45-rpki-athene-center/0/B236C7BF2CBA6A186371F0BC1F6469D3F5CE889C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/B236C7BF2CBA6A186371F0BC1F6469D3F5CE889C.cer

            Subject Information Access:
                Signed Object - URI:rsync://k45.rrdp-rpki.athene-center.net/repo/k45-rpki-athene-center/0/3135382e3232302e3137342e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:b3:6c:42:86:57:ba:ec:b1:bd:e2:9b:4c:14:65:26:1b:92:
         b6:5b:6f:1e:c8:29:e0:97:21:e5:65:7c:73:75:05:e3:68:ed:
         b7:5c:06:c2:0d:97:6f:ef:ad:ca:a4:1a:cc:4f:b4:27:a5:d7:
         9c:22:91:22:d9:61:57:cf:a7:84:cd:d3:11:3b:1d:23:f6:48:
         5c:2a:b9:c9:29:de:cc:58:28:ef:d4:72:4f:9d:29:1b:a8:ce:
         d2:de:ba:d1:c2:d8:a1:3f:48:ec:01:3d:4b:54:67:3c:ab:9a:
         0a:0e:3e:a0:44:06:26:c7:65:ce:a7:ec:fc:ab:94:3a:6c:75:
         1e:d0:f7:9c:01:39:2e:18:64:aa:d4:0c:6f:7c:f9:13:cf:70:
         7e:33:97:44:ea:a3:f9:8c:5c:2d:cb:c4:85:15:ea:a5:55:8b:
         c7:d9:4d:ff:5a:ef:81:1b:88:b4:94:25:c0:8d:30:87:8e:fc:
         7b:5f:43:ce:dc:b5:af:47:4a:42:16:b6:82:47:c2:70:44:c5:
         da:a8:25:6f:84:e4:bf:34:74:55:d3:15:9e:6f:3f:fd:a6:44:
         64:04:3a:15:a2:6c:b4:fe:16:a5:c7:d8:c7:af:97:30:f0:1d:
         97:b4:14:19:cd:5a:c4:a0:08:34:f8:34:9e:c0:e9:da:14:c1:
         c1:75:2b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org