Route Origin Authorization

$ rpki-client -vvf k47.rrdp-rpki.athene-center.net/repo/k47-rpki-athene-center/0/3135382e3232302e3137362e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3137362e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          WeZ9w0t/uxZsHzh+zcFylbzuGUYN0nTUGoqaFZlVh5k=
Subject key identifier:   CB:98:66:EB:FF:8E:D3:EA:CA:39:12:55:7D:1F:22:17:58:CF:DA:27
Certificate issuer:       /CN=DF640BB513F1249B27154A5A892A8C4E6579C966
Certificate serial:       4246C077DDCDCF393172C2AEEFA2ADDD3A8D88
Authority key identifier: DF:64:0B:B5:13:F1:24:9B:27:15:4A:5A:89:2A:8C:4E:65:79:C9:66
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/DF640BB513F1249B27154A5A892A8C4E6579C966.cer
Subject info access:      rsync://k47.rrdp-rpki.athene-center.net/repo/k47-rpki-athene-center/0/3135382e3232302e3137362e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:46:33 +0000
ROA not before:           Wed 27 Mar 2024 19:41:33 +0000
ROA not after:            Wed 26 Mar 2025 19:46:33 +0000
asID:                     208162
IP address blocks:        158.220.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:46:c0:77:dd:cd:cf:39:31:72:c2:ae:ef:a2:ad:dd:3a:8d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF640BB513F1249B27154A5A892A8C4E6579C966
        Validity
            Not Before: Mar 27 19:41:33 2024 GMT
            Not After : Mar 26 19:46:33 2025 GMT
        Subject: CN=CB9866EBFF8ED3EACA3912557D1F221758CFDA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:e4:da:57:fe:ca:78:d5:e9:10:7c:ab:be:
                    cd:b0:50:61:1d:62:87:70:3a:be:22:2f:a3:dc:27:
                    aa:c6:42:1f:4b:76:50:b0:33:59:84:07:f5:c2:6e:
                    c1:7e:97:33:e3:b3:24:98:f4:e7:2c:d2:80:ac:5b:
                    9f:7e:54:66:6a:7c:d9:39:22:3d:2a:0d:0f:54:0a:
                    40:22:27:81:04:54:2d:e9:a0:f0:f5:f5:23:a4:82:
                    77:ff:d5:2d:d1:fc:28:07:1f:4b:1e:c6:25:b1:00:
                    55:2c:e4:06:73:6e:b6:fd:15:4e:fe:66:c9:23:cc:
                    79:2b:85:58:71:2f:79:fa:82:cf:92:6b:e9:85:64:
                    1d:17:0a:62:f7:97:ba:fc:d4:62:2c:0e:fc:99:5b:
                    10:03:7f:21:82:65:21:1c:88:c3:6e:9b:d3:a0:68:
                    ee:7c:d5:3c:12:32:39:28:10:01:c9:5f:6c:1a:14:
                    37:9b:ea:a9:08:3c:2a:b0:62:fe:59:6b:e9:e6:0f:
                    cb:d7:29:aa:ef:3b:3a:3b:5e:f8:37:90:27:6d:e3:
                    14:95:90:48:3e:6e:38:75:da:f2:5f:ae:30:3d:f3:
                    43:04:f3:00:15:78:c5:15:14:a3:9b:97:b9:76:11:
                    62:79:50:d4:45:6f:a2:3f:de:2e:21:6c:90:d5:16:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:98:66:EB:FF:8E:D3:EA:CA:39:12:55:7D:1F:22:17:58:CF:DA:27
            X509v3 Authority Key Identifier:
                keyid:DF:64:0B:B5:13:F1:24:9B:27:15:4A:5A:89:2A:8C:4E:65:79:C9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k47.rrdp-rpki.athene-center.net/repo/k47-rpki-athene-center/0/DF640BB513F1249B27154A5A892A8C4E6579C966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/DF640BB513F1249B27154A5A892A8C4E6579C966.cer

            Subject Information Access:
                Signed Object - URI:rsync://k47.rrdp-rpki.athene-center.net/repo/k47-rpki-athene-center/0/3135382e3232302e3137362e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:07:39:12:3b:a3:e7:ab:cd:d3:ee:ce:66:48:2e:72:67:ba:
         f3:62:b2:48:89:f6:6e:d5:64:05:9e:cd:d3:81:73:b6:83:60:
         14:70:c4:ba:90:e6:9e:39:68:72:b2:2d:08:8f:7d:42:4d:86:
         64:fe:8e:12:ad:ea:cf:59:0c:dd:7c:16:bc:f1:dc:6d:bd:5c:
         54:f9:ba:e2:fa:32:88:d7:e7:de:a2:9d:03:0b:fe:2a:05:aa:
         ac:65:b0:c1:b4:c4:bc:af:88:40:6e:fa:9d:03:76:67:ee:08:
         85:f7:77:9a:9a:26:6e:89:4b:ea:59:df:f2:2a:23:c6:32:48:
         0c:d3:c3:0e:9c:9e:0c:fd:b0:f2:bf:a3:f7:c5:82:b2:0e:89:
         4f:de:24:53:61:3c:14:6b:83:56:84:8d:ed:e3:a0:6c:91:b4:
         18:f5:c3:c2:f5:3f:5c:11:04:ff:f9:e1:3e:60:d0:3d:9d:fe:
         72:c3:ab:bd:fb:e0:73:ed:d6:72:ac:3f:34:7b:bc:86:51:99:
         03:be:1f:0b:a0:7f:3d:09:f8:04:67:c4:99:d1:d5:66:97:98:
         28:a8:68:94:ab:d7:84:a4:1d:6d:7b:1e:b5:6f:23:ab:cf:b2:
         85:bb:88:b3:2b:ca:20:f5:aa:d6:43:d3:88:e8:9a:55:2f:7f:
         13:b3:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 02:11:39 2024 by rpki-client on console-ams.rpki-client.org