Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/326130373a353463313a646561643a3a2f34382d3438203d3e20323030333531.roa
File:                     326130373a353463313a646561643a3a2f34382d3438203d3e20323030333531.roa (raw, json)
Hash identifier:          u9fAMFBnO6yawqpW/8Hu+prylE/nipT9UBdu+ecUd5s=
Subject key identifier:   71:93:19:73:D2:E6:D9:FC:41:22:22:CC:B6:6D:F8:19:ED:1B:C2:64
Certificate issuer:       /CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
Certificate serial:       2C4CFC2D4DE239A641CF97533FBAD6FEDD296C00
Authority key identifier: 84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/326130373a353463313a646561643a3a2f34382d3438203d3e20323030333531.roa
Signing time:             Mon 18 Sep 2023 23:52:26 +0000
ROA not before:           Mon 18 Sep 2023 23:47:26 +0000
ROA not after:            Mon 16 Sep 2024 23:52:26 +0000
asID:                     200351
IP address blocks:        2a07:54c1:dead::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4c:fc:2d:4d:e2:39:a6:41:cf:97:53:3f:ba:d6:fe:dd:29:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
        Validity
            Not Before: Sep 18 23:47:26 2023 GMT
            Not After : Sep 16 23:52:26 2024 GMT
        Subject: CN=71931973D2E6D9FC412222CCB66DF819ED1BC264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:66:30:34:95:4b:ba:9a:a1:cc:38:fc:01:
                    c7:95:12:1b:c7:e1:e7:52:ee:5c:5a:26:90:a7:be:
                    58:ff:50:b9:64:df:2d:0b:85:51:11:ea:00:21:7b:
                    2b:29:83:4a:ba:f3:eb:ff:3a:0d:91:fb:37:af:ba:
                    05:71:b8:a7:3c:9b:32:06:fd:88:d2:99:8b:76:77:
                    e8:a1:19:90:6f:75:f9:f3:6f:8f:63:42:23:ad:86:
                    71:e5:04:3d:de:1f:31:f8:f0:01:d9:b7:ed:70:41:
                    83:89:10:ec:a9:87:4d:54:6f:55:53:c7:70:53:19:
                    9e:f7:bc:cc:79:80:8f:b7:15:76:20:38:ad:dc:33:
                    75:99:c6:1d:32:a9:14:d6:e0:d2:e8:79:9b:f5:0a:
                    8b:c9:40:75:9d:34:5d:e1:50:e5:7e:31:f3:4f:23:
                    13:a1:5a:c2:b2:dc:39:17:57:b4:63:b6:ac:82:69:
                    d6:93:3d:41:06:99:12:1a:92:4d:12:0a:f7:ad:a5:
                    78:54:1b:4b:5e:09:d5:e5:a4:62:d8:97:d3:8b:3c:
                    3e:14:6a:d8:0c:3e:70:f1:ff:ec:3e:18:86:f7:9a:
                    09:30:20:1b:3a:93:92:04:c7:02:19:51:ec:68:f2:
                    30:2c:a8:81:96:c5:34:d4:27:18:bd:39:d4:14:99:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:93:19:73:D2:E6:D9:FC:41:22:22:CC:B6:6D:F8:19:ED:1B:C2:64
            X509v3 Authority Key Identifier:
                keyid:84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/326130373a353463313a646561643a3a2f34382d3438203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:fe:2d:53:77:b3:8a:f5:39:f4:6a:3e:52:41:64:df:c9:db:
         c2:26:01:3a:3e:8c:f0:75:45:29:85:98:e8:15:74:04:27:5f:
         b6:f3:87:7e:3d:23:73:f2:9d:c0:af:f7:66:87:f3:94:00:5c:
         dd:29:5e:e6:09:3c:fc:60:04:32:fa:2c:a0:ab:fa:8c:8d:e3:
         83:f3:12:8a:34:5a:35:8a:ac:04:e6:6f:0a:0c:64:35:b4:ff:
         2e:40:aa:27:f1:92:dc:42:2a:fc:e4:d8:dc:75:2e:a2:6e:94:
         59:a1:70:12:61:37:f0:c6:23:b5:d1:c7:12:a4:a8:da:97:68:
         02:06:e6:09:d3:81:be:08:bc:e6:bf:14:df:8f:c0:82:52:24:
         f6:00:33:4d:04:6f:84:66:24:b3:80:2b:23:92:f2:25:cf:8a:
         97:cc:1c:1e:26:9f:32:79:78:0e:71:b8:7b:b6:8f:5e:04:be:
         ca:ea:03:c2:34:39:15:79:d7:61:23:f6:5c:95:2b:e3:36:66:
         bc:cb:e2:cf:36:75:7d:29:e5:70:79:15:2b:eb:3f:60:02:4a:
         e5:e4:85:2d:2c:90:c2:bc:91:eb:90:80:64:70:4e:64:78:05:
         3e:e9:ce:0d:0e:f0:75:0d:be:91:ad:9f:c4:9f:6e:01:fe:f2:
         2f:f9:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----