Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa
File:                     326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier:          SgvQWHFGZGtOv/pmgtn+By0rWwg8U8JZJbQeyaOgidQ=
Subject key identifier:   F0:FD:81:E3:30:54:CD:80:AA:26:9B:B4:B2:2C:6C:DE:D0:41:9B:A4
Certificate issuer:       /CN=14082299D486857A824F7308B67507C731520D07
Certificate serial:       7FA4192127832C260DE48D8753BFF673BD2E5215
Authority key identifier: 14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa
Signing time:             Sat 20 Jan 2024 02:01:15 +0000
ROA not before:           Sat 20 Jan 2024 01:56:15 +0000
ROA not after:            Sat 18 Jan 2025 02:01:15 +0000
asID:                     205789
IP address blocks:        2a07:54c0:cafe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a4:19:21:27:83:2c:26:0d:e4:8d:87:53:bf:f6:73:bd:2e:52:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14082299D486857A824F7308B67507C731520D07
        Validity
            Not Before: Jan 20 01:56:15 2024 GMT
            Not After : Jan 18 02:01:15 2025 GMT
        Subject: CN=F0FD81E33054CD80AA269BB4B22C6CDED0419BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:60:43:3b:60:12:28:ee:70:2b:b5:76:f1:
                    54:39:61:20:ea:5a:4d:7f:59:65:f9:0a:3d:7d:da:
                    9b:d0:45:56:76:39:44:63:8d:57:a9:4e:cb:ed:af:
                    b9:cc:39:ac:af:9f:ef:56:b3:74:ec:02:75:1b:08:
                    bd:1d:1a:2a:ae:b1:59:04:37:20:d0:f4:97:d5:a9:
                    4f:98:55:fc:13:d8:70:92:e1:8f:00:01:90:9b:8a:
                    8a:fa:5a:54:be:82:69:6b:77:d2:4d:73:10:8c:82:
                    46:c0:19:7f:fc:e6:8b:59:03:0f:7c:4b:72:92:40:
                    73:23:6e:f3:e3:18:33:9a:40:0f:8c:7f:35:c8:a9:
                    ee:ce:90:90:a3:fc:9e:de:a7:ff:2b:47:8a:59:38:
                    12:27:a9:6c:30:85:18:a1:3b:0b:62:9e:e7:12:be:
                    bc:85:ca:8b:28:c7:68:3a:66:2d:c6:b5:75:12:bb:
                    29:ed:72:38:d5:c4:90:75:2e:f9:dd:ce:cd:e4:e7:
                    49:22:af:ef:13:21:bd:88:53:a8:09:f9:d3:31:1e:
                    59:06:64:17:23:33:4d:f1:52:31:0a:85:11:ce:ce:
                    19:1b:af:39:25:7b:ee:61:ec:69:4d:f0:07:c1:0a:
                    93:26:5d:59:7d:f1:ee:18:95:60:29:11:40:06:ac:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FD:81:E3:30:54:CD:80:AA:26:9B:B4:B2:2C:6C:DE:D0:41:9B:A4
            X509v3 Authority Key Identifier:
                keyid:14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/14082299D486857A824F7308B67507C731520D07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:cafe::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:42:f6:69:97:47:f9:cf:7b:d9:8f:08:3f:e9:e2:67:0c:2f:
         5a:b0:87:ef:df:cc:a3:e6:d7:9b:c8:6c:f6:ef:a9:03:af:5a:
         2e:c3:f1:20:7a:a2:fd:a6:31:db:8a:b5:76:7c:1e:8d:ea:98:
         f9:b6:99:32:62:24:86:dd:1e:76:5e:d4:bd:34:7b:ea:21:26:
         22:fc:8e:30:2b:8b:c1:88:a3:ab:ee:d1:d2:94:8a:31:e7:c6:
         80:b9:bd:3b:1b:ad:bc:d4:6a:a5:ff:ca:41:29:25:a3:10:2d:
         20:fd:9e:ba:0a:47:cd:25:7d:b6:cd:31:f2:08:f4:ed:ec:98:
         e9:c3:fd:5e:85:54:28:3c:b6:b6:44:16:25:51:57:c7:32:bd:
         db:70:9f:e8:ca:4c:88:f2:1c:83:76:ae:9b:75:a3:64:be:20:
         c3:15:ca:65:7a:94:72:d1:3c:9e:ee:b9:cf:ec:68:21:4a:f5:
         92:1d:a9:26:96:b4:d9:0a:c4:ee:4d:50:4f:98:28:01:fb:5e:
         1c:1e:8f:9c:9b:6a:38:ed:b9:81:b9:ee:61:2c:97:cc:ae:67:
         07:19:b6:2e:a8:98:12:c5:cd:d5:8a:4f:2f:2a:23:07:db:1d:
         3e:8b:52:85:44:94:17:51:c7:c9:f4:ad:e6:cb:98:4e:5f:fc:
         6f:ff:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----