Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a353463353a3a2f34382d3438203d3e20313939303939.roa
File:                     326130373a353463353a353463353a3a2f34382d3438203d3e20313939303939.roa (raw, json)
Hash identifier:          dsdZyh0nlbwnCsTfFAsIctgvjGA/4Rx7/EvCpY61/rE=
Subject key identifier:   99:4A:3C:6F:47:83:9C:58:7D:3C:F8:6D:3A:99:C3:F5:19:B8:1A:0B
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       648B029DD0C2CF95B4F045AD90CCD532248C7150
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a353463353a3a2f34382d3438203d3e20313939303939.roa
Signing time:             Sun 24 Sep 2023 12:21:01 +0000
ROA not before:           Sun 24 Sep 2023 12:16:01 +0000
ROA not after:            Sun 22 Sep 2024 12:21:01 +0000
asID:                     199099
IP address blocks:        2a07:54c5:54c5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8b:02:9d:d0:c2:cf:95:b4:f0:45:ad:90:cc:d5:32:24:8c:71:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 24 12:16:01 2023 GMT
            Not After : Sep 22 12:21:01 2024 GMT
        Subject: CN=994A3C6F47839C587D3CF86D3A99C3F519B81A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:f1:84:da:dd:24:f5:4d:80:e8:30:9a:1e:
                    01:30:5e:f6:4a:a2:e0:e1:86:40:42:32:77:44:06:
                    69:c4:c7:4b:aa:58:d5:88:1b:2f:8c:fa:9d:59:b3:
                    57:0f:b7:81:8a:7b:98:f3:75:72:88:e2:11:97:50:
                    ba:09:fa:22:3c:1f:57:ff:fd:0b:d6:49:f9:5f:ef:
                    5c:a4:7e:79:06:ff:ab:96:dd:98:90:fa:fa:e2:ba:
                    30:7f:28:9a:e9:89:c6:dd:85:e6:65:d9:1c:ea:0d:
                    cc:94:75:25:62:0f:3c:96:4b:e3:8d:70:f2:d8:85:
                    c4:71:c3:0b:5a:44:0a:c2:f6:64:44:24:b0:c8:1d:
                    b3:cd:b3:4a:d7:89:a0:c7:65:3e:dd:8a:46:dd:2c:
                    74:3d:4a:a0:a5:b2:dd:0c:e6:f7:9f:5b:2a:17:d6:
                    45:bb:37:f5:14:d1:d2:08:bd:69:16:85:7b:b4:5e:
                    ff:04:9c:c5:4a:6c:4c:42:24:53:1e:56:61:dc:7b:
                    5d:de:16:33:71:0e:29:c2:b8:54:33:33:a8:bb:ef:
                    f9:a6:0f:2e:a2:df:58:85:e6:2a:09:65:d2:f1:fc:
                    68:b6:59:84:49:7e:69:6b:8e:ac:62:78:89:e8:56:
                    7d:1f:4f:4d:b5:50:ee:43:bd:28:73:ce:2a:25:f0:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4A:3C:6F:47:83:9C:58:7D:3C:F8:6D:3A:99:C3:F5:19:B8:1A:0B
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a353463353a3a2f34382d3438203d3e20313939303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:54c5::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:f6:1c:97:26:38:99:ad:ef:a3:62:2e:ce:f3:f9:3e:78:
         74:a2:b3:de:82:b9:07:3d:b4:da:7d:44:0e:42:14:b4:aa:15:
         b8:c8:17:a5:17:cb:3b:6e:66:61:e7:fd:74:fd:07:c7:a8:c8:
         cd:9e:ea:ea:af:e1:cb:ba:b8:f5:51:e1:ff:18:37:6a:ee:78:
         27:ca:b1:bf:64:e7:81:ca:12:80:86:53:04:5e:d6:22:9e:a5:
         8c:91:d6:94:43:3d:d1:bc:4d:b9:1e:8e:a2:2f:cb:11:4b:54:
         9a:9a:07:f8:49:29:00:27:71:4d:8a:15:ab:8f:54:d5:e4:cc:
         84:0e:b3:b5:9f:03:4d:60:fb:e7:65:7f:a0:f4:7b:81:08:d7:
         95:fc:bf:73:36:10:14:41:cb:69:0e:b9:3c:ba:61:da:65:5b:
         8f:8e:b7:01:72:c9:29:7d:4e:84:42:5f:5d:7b:bb:71:0a:1a:
         c8:e2:3d:b2:61:34:1f:fc:6d:44:e7:1c:b4:e9:7a:7e:15:a4:
         12:34:00:5b:bf:aa:38:ca:16:93:51:fa:73:55:94:78:9f:ce:
         3e:bf:7e:05:4e:5b:63:9f:21:0b:53:88:e2:1b:30:64:4c:f5:
         c6:6b:7f:47:7c:4a:37:ee:3e:73:7f:5a:dd:48:65:3b:32:c5:
         41:d3:62:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----