Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a626565663a3a2f34382d3438203d3e203438373137.roa
File:                     326130373a353463353a626565663a3a2f34382d3438203d3e203438373137.roa (raw, json)
Hash identifier:          MwxSNNT8X3mI0yyciwxoa/kBoUGxnskL414rm9NT/fk=
Subject key identifier:   B5:4E:D0:55:79:7B:E3:18:AA:1A:90:E6:C0:F0:03:AF:B1:D7:C1:94
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       0F12DF3599AC809732880DC931FB4054785F68ED
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a626565663a3a2f34382d3438203d3e203438373137.roa
Signing time:             Mon 18 Sep 2023 15:32:58 +0000
ROA not before:           Mon 18 Sep 2023 15:27:58 +0000
ROA not after:            Mon 16 Sep 2024 15:32:58 +0000
asID:                     48717
IP address blocks:        2a07:54c5:beef::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:12:df:35:99:ac:80:97:32:88:0d:c9:31:fb:40:54:78:5f:68:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 18 15:27:58 2023 GMT
            Not After : Sep 16 15:32:58 2024 GMT
        Subject: CN=B54ED055797BE318AA1A90E6C0F003AFB1D7C194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:8d:8d:b7:69:81:fc:03:93:9e:b4:85:11:
                    43:1d:57:1f:5a:4f:ac:83:a6:b9:53:5c:9b:09:55:
                    02:a0:07:7d:52:7d:c7:32:5c:e1:0d:5e:58:ec:01:
                    ea:75:0e:9a:46:f3:73:b6:af:3d:45:cc:3b:63:99:
                    12:2a:ef:f5:0b:66:c4:8d:94:86:0b:6a:d9:44:e3:
                    74:4f:01:8a:c4:61:83:8e:ed:2f:45:42:df:c3:0f:
                    c7:dd:a8:94:53:af:d3:00:ce:b1:14:24:c4:50:69:
                    2b:96:b2:36:6c:05:4c:e8:d1:ff:31:52:a8:bc:a4:
                    46:39:c0:a8:33:02:39:7d:7e:b2:ae:4d:25:72:8a:
                    cd:b6:cf:2c:5a:8b:2e:12:3d:85:d0:1a:8d:84:eb:
                    c4:2c:14:be:d6:c4:ae:a3:29:04:2a:54:1c:94:5b:
                    c6:0d:63:5b:f0:14:94:c5:ba:bd:01:56:d0:52:04:
                    be:9d:2f:ba:76:a0:9b:c5:a8:21:50:21:b9:60:f0:
                    3a:3e:db:ed:27:32:46:c6:38:f4:57:d0:62:5f:2d:
                    a0:cd:69:51:ff:9d:eb:f3:97:ba:74:38:81:03:2f:
                    bb:32:e2:dd:71:24:c1:c3:b1:d3:e8:ce:8c:34:34:
                    47:28:9a:0a:21:30:13:ed:bd:6a:22:58:61:4e:50:
                    a6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4E:D0:55:79:7B:E3:18:AA:1A:90:E6:C0:F0:03:AF:B1:D7:C1:94
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a626565663a3a2f34382d3438203d3e203438373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:beef::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:58:78:f9:6a:1d:72:41:f0:f7:7c:a8:a4:f6:84:22:66:b8:
         d5:77:47:fa:fa:2a:ee:22:a3:5f:44:04:9b:a5:d8:86:47:af:
         05:27:a4:6f:c3:f4:0c:68:73:a0:cb:99:ed:44:c6:10:eb:25:
         88:b0:18:af:af:09:db:14:17:32:95:4c:b6:93:bf:e1:2a:50:
         a8:84:e7:16:de:3a:c8:96:20:23:29:e2:6e:24:d1:bd:35:18:
         be:11:c8:ca:7d:2f:ef:ac:1f:9e:3b:6e:24:17:62:45:92:af:
         f2:3d:01:05:e7:59:24:f4:57:63:16:75:3c:12:1b:32:c1:1c:
         de:20:9f:fc:8e:67:a7:01:90:46:1b:62:31:54:11:09:a9:95:
         a4:88:5d:64:45:f6:67:6b:ba:88:94:d8:87:a0:90:92:56:2b:
         75:58:c5:29:7f:6c:ec:91:ee:6d:08:d0:39:62:1d:e5:1d:07:
         74:b8:96:61:02:e3:ee:53:db:a5:e6:56:c5:29:89:b7:53:46:
         6b:e9:d1:94:7f:ae:68:82:ca:08:0f:83:ad:75:8b:3c:4f:1e:
         db:1e:25:e9:fc:ae:0b:9f:fa:44:ea:a7:81:2e:e7:30:eb:04:
         d5:1c:18:23:e5:5d:e0:f0:07:6c:2a:a0:87:48:be:f4:7f:6b:
         af:5b:3e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----