Route Origin Authorization

$ rpki-client -vvf k56.rrdp-rpki.athene-center.net/repo/k56-rpki-athene-center/0/3135382e3232302e3138352e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3138352e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          7GjPs9cdUjIcop6POWUkbjZIgFRxuEh2w6JHkLL5Jnk=
Subject key identifier:   CE:05:D7:99:BB:7E:46:6C:59:78:B4:19:2F:A0:95:7B:39:B0:54:E0
Certificate issuer:       /CN=1E3FC45137EE6484DE75E23E83FE1389CA24351C
Certificate serial:       20C33493BC091EC2A048C0F335776BA012C1E8B1
Authority key identifier: 1E:3F:C4:51:37:EE:64:84:DE:75:E2:3E:83:FE:13:89:CA:24:35:1C
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1E3FC45137EE6484DE75E23E83FE1389CA24351C.cer
Subject info access:      rsync://k56.rrdp-rpki.athene-center.net/repo/k56-rpki-athene-center/0/3135382e3232302e3138352e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:48:15 +0000
ROA not before:           Wed 27 Mar 2024 19:43:15 +0000
ROA not after:            Wed 26 Mar 2025 19:48:15 +0000
asID:                     208162
IP address blocks:        158.220.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c3:34:93:bc:09:1e:c2:a0:48:c0:f3:35:77:6b:a0:12:c1:e8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3FC45137EE6484DE75E23E83FE1389CA24351C
        Validity
            Not Before: Mar 27 19:43:15 2024 GMT
            Not After : Mar 26 19:48:15 2025 GMT
        Subject: CN=CE05D799BB7E466C5978B4192FA0957B39B054E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:95:30:e6:3b:3d:50:c2:f2:de:61:61:19:
                    37:f8:0c:2c:47:25:8e:de:e1:e6:4b:93:c4:11:d6:
                    eb:73:99:b9:8d:74:05:df:c2:65:f8:eb:e0:e3:42:
                    6a:f8:48:c6:ca:2f:3a:54:37:03:73:02:05:f6:c5:
                    2b:0d:cd:64:28:5b:eb:7f:5f:15:b7:cb:2c:78:68:
                    f9:1c:be:b7:46:92:c5:2a:0f:6f:06:2e:a6:2b:d5:
                    6a:b5:76:8b:f5:3a:c4:da:f3:d2:db:74:04:a9:7f:
                    42:cf:6a:48:2f:74:89:98:23:4d:b4:b3:fa:61:b9:
                    3e:67:17:05:a5:53:cf:51:83:1a:b0:83:14:21:0f:
                    b8:f0:69:c3:f5:43:46:27:5a:96:b0:38:43:06:60:
                    8f:11:4a:ec:52:74:1c:a4:d4:f9:81:a5:e4:6f:50:
                    bd:f8:b3:4b:5b:2b:89:77:37:5c:95:a8:84:e1:14:
                    90:39:ca:d2:78:96:2a:09:bb:71:a6:d5:0e:b2:b4:
                    af:2c:59:49:f2:47:b4:f3:61:3d:06:4a:76:4f:7f:
                    d3:4d:07:40:76:86:45:ec:f8:3c:7c:54:46:e7:25:
                    99:59:52:3a:93:d8:bf:5b:1b:22:9b:4f:80:72:76:
                    60:99:6d:e4:a0:f7:a7:18:6e:07:4c:fd:43:9c:9a:
                    53:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:05:D7:99:BB:7E:46:6C:59:78:B4:19:2F:A0:95:7B:39:B0:54:E0
            X509v3 Authority Key Identifier:
                keyid:1E:3F:C4:51:37:EE:64:84:DE:75:E2:3E:83:FE:13:89:CA:24:35:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k56.rrdp-rpki.athene-center.net/repo/k56-rpki-athene-center/0/1E3FC45137EE6484DE75E23E83FE1389CA24351C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1E3FC45137EE6484DE75E23E83FE1389CA24351C.cer

            Subject Information Access:
                Signed Object - URI:rsync://k56.rrdp-rpki.athene-center.net/repo/k56-rpki-athene-center/0/3135382e3232302e3138352e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c2:9a:bd:d8:f9:74:b0:f2:c2:ed:3e:ac:ed:2b:ab:86:f1:
         c6:ed:cd:18:8c:b6:15:81:50:9b:20:a8:c0:b1:e2:99:14:5e:
         33:bb:86:39:c8:1d:a4:e3:c9:7b:7b:ae:96:88:94:35:a6:8a:
         9a:b3:f5:3b:c4:d2:71:68:d3:2c:ea:11:f8:1d:07:22:63:c8:
         a1:ae:c1:4f:95:76:be:d0:1a:99:41:e4:c0:fa:ba:5a:41:1e:
         07:49:8f:ed:a0:e2:1e:4f:59:79:2f:3c:54:08:5d:fa:b7:d0:
         f6:8d:b5:82:0a:6f:b6:42:05:58:1e:f6:45:3b:58:b3:d5:de:
         dd:3b:35:fb:98:d8:05:21:79:28:17:13:08:b0:e4:a0:45:c2:
         50:e7:4a:35:50:55:ba:ab:fc:a8:37:77:f9:a4:ae:e7:f9:fc:
         d4:a4:29:1b:1c:34:54:c1:f0:7b:f8:9c:23:98:0e:a4:43:8e:
         31:c4:95:fc:18:43:08:f1:ac:c4:ea:a5:75:d2:a4:e2:f8:43:
         c4:78:ad:9d:a1:ea:a5:43:23:03:e1:4a:f4:4f:69:ae:2b:7a:
         68:2b:1f:b6:c6:68:b9:35:6b:b8:a9:b1:85:5e:81:73:ec:6b:
         da:fa:a4:67:16:37:35:b1:ed:6a:b3:6a:65:ec:c8:2a:8f:19:
         6d:b6:54:5d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIMM0k7wJHsKgSMDzNXdroBLB6LEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUzRkM0NTEzN0VFNjQ4NERFNzVFMjNFODNGRTEzODlD
QTI0MzUxQzAeFw0yNDAzMjcxOTQzMTVaFw0yNTAzMjYxOTQ4MTVaMDMxMTAvBgNV
BAMTKENFMDVENzk5QkI3RTQ2NkM1OTc4QjQxOTJGQTA5NTdCMzlCMDU0RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgJUw5js9UMLy3mFhGTf4DCxH
JY7e4eZLk8QR1utzmbmNdAXfwmX46+DjQmr4SMbKLzpUNwNzAgX2xSsNzWQoW+t/
XxW3yyx4aPkcvrdGksUqD28GLqYr1Wq1dov1OsTa89LbdASpf0LPakgvdImYI020
s/phuT5nFwWlU89RgxqwgxQhD7jwacP1Q0YnWpawOEMGYI8RSuxSdByk1PmBpeRv
UL34s0tbK4l3N1yVqIThFJA5ytJ4lioJu3Gm1Q6ytK8sWUnyR7TzYT0GSnZPf9NN
B0B2hkXs+Dx8VEbnJZlZUjqT2L9bGyKbT4BydmCZbeSg96cYbgdM/UOcmlOzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzgXXmbt+RmxZeLQZL6CVezmwVOAwHwYDVR0j
BBgwFoAUHj/EUTfuZITedeI+g/4TicokNRwwDgYDVR0PAQH/BAQDAgeAMIGDBgNV
HR8EfDB6MHigdqB0hnJyc3luYzovL2s1Ni5ycmRwLXJwa2kuYXRoZW5lLWNlbnRl
ci5uZXQvcmVwby9rNTYtcnBraS1hdGhlbmUtY2VudGVyLzAvMUUzRkM0NTEzN0VF
NjQ4NERFNzVFMjNFODNGRTEzODlDQTI0MzUxQy5jcmwwgZAGCCsGAQUFBwEBBIGD
MIGAMH4GCCsGAQUFBzAChnJyc3luYzovL2swMC5ycmRwLXJwa2kuYXRoZW5lLWNl
bnRlci5uZXQvcmVwby9rMDAtcnBraS1hdGhlbmUtY2VudGVyLzAvMUUzRkM0NTEz
N0VFNjQ4NERFNzVFMjNFODNGRTEzODlDQTI0MzUxQy5jZXIwgaQGCCsGAQUFBwEL
BIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vazU2LnJyZHAtcnBraS5hdGhl
bmUtY2VudGVyLm5ldC9yZXBvL2s1Ni1ycGtpLWF0aGVuZS1jZW50ZXIvMC8zMTM1
MzgyZTMyMzIzMDJlMzEzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4
MzEzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAnty5MA0GCSqGSIb3DQEBCwUAA4IBAQAEwpq92Pl0
sPLC7T6s7SurhvHG7c0YjLYVgVCbIKjAseKZFF4zu4Y5yB2k48l7e66WiJQ1poqa
s/U7xNJxaNMs6hH4HQciY8ihrsFPlXa+0BqZQeTA+rpaQR4HSY/toOIeT1l5LzxU
CF36t9D2jbWCCm+2QgVYHvZFO1iz1d7dOzX7mNgFIXkoFxMIsOSgRcJQ50o1UFW6
q/yoN3f5pK7n+fzUpCkbHDRUwfB7+JwjmA6kQ44xxJX8GEMI8azE6qV10qTi+EPE
eK2doeqlQyMD4Ur0T2muK3poKx+2xmi5NWu4qbGFXoFz7Gva+qRnFjc1se1qs2pl
7MgqjxlttlRd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org