Route Origin Authorization

$ rpki-client -vvf k62.rrdp-rpki.athene-center.net/repo/k62-rpki-athene-center/0/3135382e3232302e3139312e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3139312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          xzaevFnqNAgZoFnWl7eF1aJqb31WVpXdMgSUwZzGLhc=
Subject key identifier:   55:D9:BC:1B:BE:F2:B0:24:83:EA:31:87:21:58:E2:4D:21:1F:A0:A8
Certificate issuer:       /CN=904D77574A51CD23245D50D57DE7633809D21DD2
Certificate serial:       6698C7C4B3F422686893DC7BC4EB847F2CCB737B
Authority key identifier: 90:4D:77:57:4A:51:CD:23:24:5D:50:D5:7D:E7:63:38:09:D2:1D:D2
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/904D77574A51CD23245D50D57DE7633809D21DD2.cer
Subject info access:      rsync://k62.rrdp-rpki.athene-center.net/repo/k62-rpki-athene-center/0/3135382e3232302e3139312e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:49:23 +0000
ROA not before:           Wed 27 Mar 2024 19:44:23 +0000
ROA not after:            Wed 26 Mar 2025 19:49:23 +0000
asID:                     208162
IP address blocks:        158.220.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:98:c7:c4:b3:f4:22:68:68:93:dc:7b:c4:eb:84:7f:2c:cb:73:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904D77574A51CD23245D50D57DE7633809D21DD2
        Validity
            Not Before: Mar 27 19:44:23 2024 GMT
            Not After : Mar 26 19:49:23 2025 GMT
        Subject: CN=55D9BC1BBEF2B02483EA31872158E24D211FA0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:9d:b4:dd:9c:ce:27:a0:3c:5e:a5:d6:ca:
                    5d:b0:e6:95:17:41:3b:f3:97:1c:56:ff:f4:fa:fe:
                    db:90:aa:6e:75:29:0e:34:6f:07:2c:e7:f0:d2:fe:
                    02:e3:41:48:96:8e:79:98:1a:49:a9:0a:b7:d6:c9:
                    ad:dd:b9:e1:38:74:37:71:3c:4c:30:1b:f0:b3:c2:
                    c1:77:38:6d:ce:2e:30:cd:87:3b:86:a4:66:3a:59:
                    4d:a5:ab:8a:29:35:ec:5a:34:5b:16:a8:a8:92:e5:
                    ed:ed:3e:9f:e8:c2:ec:97:97:4f:c7:9f:65:02:2b:
                    a2:4c:a2:f2:9b:f6:19:81:9d:5e:ac:26:cf:79:b0:
                    6f:43:8a:74:af:0f:9a:68:e9:1c:53:48:e0:49:b5:
                    7f:fa:28:a6:6a:6d:8b:c0:b1:ba:bf:1b:df:3e:d6:
                    53:56:9c:06:85:cb:21:1f:6a:98:b9:4b:50:d0:ee:
                    e6:12:78:eb:2d:86:fe:ad:db:5e:03:3d:12:13:1c:
                    a3:c6:74:1f:b4:b3:5d:52:1b:aa:1c:56:e7:c7:3d:
                    58:be:45:a1:95:68:02:a2:b8:44:82:47:88:dd:2d:
                    51:10:87:97:73:cb:15:d0:1d:19:1c:69:f6:c9:1a:
                    94:48:51:a5:54:d6:ba:4b:d6:a8:e4:3e:d2:f9:9c:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D9:BC:1B:BE:F2:B0:24:83:EA:31:87:21:58:E2:4D:21:1F:A0:A8
            X509v3 Authority Key Identifier:
                keyid:90:4D:77:57:4A:51:CD:23:24:5D:50:D5:7D:E7:63:38:09:D2:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k62.rrdp-rpki.athene-center.net/repo/k62-rpki-athene-center/0/904D77574A51CD23245D50D57DE7633809D21DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/904D77574A51CD23245D50D57DE7633809D21DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://k62.rrdp-rpki.athene-center.net/repo/k62-rpki-athene-center/0/3135382e3232302e3139312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c6:a0:59:53:3c:84:76:5e:84:8c:99:7b:31:eb:03:a3:2b:
         7b:2a:a0:52:fe:c8:d7:c4:d7:f8:f1:77:86:0d:2b:fa:cc:96:
         be:fb:c7:b7:76:87:2c:a9:e1:59:c8:1a:f2:5d:c6:f0:01:5e:
         d4:00:20:c6:73:b3:09:b4:eb:a4:2d:90:32:44:2a:b8:e1:80:
         d7:01:14:07:e2:2f:7a:ad:53:69:c0:90:2c:83:99:93:80:d7:
         3b:04:a5:ba:f0:13:5c:bb:bc:02:d2:be:08:d8:be:c9:a8:e8:
         3d:e5:d8:96:3f:f8:f8:da:73:7f:89:d4:26:d0:5e:7a:0a:64:
         47:22:09:69:1d:5d:b8:d9:ed:05:fb:8f:59:91:b8:bf:8f:56:
         a6:63:a6:43:35:e3:36:d7:68:67:06:69:93:ea:f9:72:36:7a:
         ff:f8:25:ff:28:39:58:a8:04:1a:25:d9:68:8c:b9:0d:dc:f5:
         af:6b:49:09:54:2d:e2:38:df:df:d3:32:c5:16:29:b4:3c:11:
         3f:54:1f:74:6c:e0:16:ef:81:ad:68:0b:a5:68:10:c6:8f:32:
         26:a0:bc:ff:f2:ec:22:f0:44:b3:83:e9:31:88:f6:80:67:84:
         5d:9c:ef:f3:cc:30:98:fd:79:9a:6a:5f:d9:f6:a1:d8:2c:0a:
         60:fd:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org