Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463313a393830303a3a2f33382d3438203d3e20323038353438.roa
File:                     326130373a353463313a393830303a3a2f33382d3438203d3e20323038353438.roa (raw, json)
Hash identifier:          GzL3TAtxYduUxj0QjAJmHxuRcVLqn16i09/o1GRaVaw=
Subject key identifier:   8D:E3:AC:85:7D:C4:D9:C3:C2:F2:7A:F4:33:5F:5E:EC:3E:AD:59:74
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       4D9FAD996F5EE681EDD55679C23F775846A035B2
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463313a393830303a3a2f33382d3438203d3e20323038353438.roa
Signing time:             Fri 09 Dec 2022 15:39:39 +0000
ROA not before:           Fri 09 Dec 2022 15:34:39 +0000
ROA not after:            Fri 08 Dec 2023 15:39:39 +0000
asID:                     208548
IP address blocks:        2a07:54c1:9800::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9f:ad:99:6f:5e:e6:81:ed:d5:56:79:c2:3f:77:58:46:a0:35:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:39 2022 GMT
            Not After : Dec  8 15:39:39 2023 GMT
        Subject: CN=8DE3AC857DC4D9C3C2F27AF4335F5EEC3EAD5974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:42:f5:59:e2:e1:30:9a:e6:91:2c:e3:9b:
                    90:15:b5:ea:9c:f9:85:98:69:fd:7e:f3:8f:cc:85:
                    af:a0:56:9c:1c:d9:12:83:66:af:d4:3a:8f:c1:d3:
                    ec:b3:38:2b:48:e7:de:c3:a9:24:56:46:66:94:85:
                    8d:25:43:6f:d8:60:56:b7:eb:45:5f:49:7f:64:d7:
                    21:52:ae:86:20:38:a9:9b:66:24:7b:07:1b:8a:15:
                    be:6f:cc:5b:90:8c:6d:0d:02:69:5c:4b:ad:99:77:
                    57:46:ef:05:37:b3:e4:fe:a7:59:d5:fb:d1:aa:13:
                    c2:18:28:5a:86:6d:88:29:05:de:cd:5e:c9:57:c0:
                    5e:2a:40:c3:76:7d:37:9b:c3:3f:c1:f7:86:5c:dc:
                    62:23:7e:bf:ab:1b:de:f1:a3:39:4c:ba:2c:32:c0:
                    54:c7:09:bf:22:39:b6:72:8c:c6:66:64:9f:e8:6c:
                    d8:f7:bf:a5:e9:c4:92:78:d0:44:9f:35:b8:f8:e3:
                    ea:56:7d:09:60:1d:43:75:76:93:cd:9b:1e:1a:c0:
                    19:24:c4:d8:16:cb:8f:aa:4f:ac:6f:03:5b:89:52:
                    2b:52:4e:e9:80:91:32:ac:f9:04:ec:6b:43:51:52:
                    29:61:92:15:a5:60:bd:3b:21:35:8e:ca:09:97:57:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E3:AC:85:7D:C4:D9:C3:C2:F2:7A:F4:33:5F:5E:EC:3E:AD:59:74
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463313a393830303a3a2f33382d3438203d3e20323038353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:9800::/38

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:f8:15:76:97:bb:9a:25:0c:d6:7a:89:d5:2a:10:21:19:
         c1:fe:ef:68:9d:ee:f9:2b:7a:ab:8e:36:d3:39:29:f8:12:44:
         12:ea:92:f5:82:c5:4d:1d:81:03:5c:85:58:54:8d:8a:4e:be:
         9a:a1:9b:b8:c7:32:e4:43:73:b4:9f:f5:01:d9:ff:8d:c6:16:
         8c:51:91:4a:db:c0:97:63:5d:d0:e3:19:31:60:de:d5:a7:45:
         5e:67:5a:11:6f:15:5b:f6:25:a6:68:28:6e:49:2a:8b:1c:82:
         b4:35:74:16:1b:fa:e0:e6:11:12:e1:7d:fb:88:c5:42:6e:26:
         b1:ed:52:ec:f8:9d:24:a5:ac:06:25:0b:26:5b:41:20:21:40:
         8c:0e:63:51:f2:a6:fb:b3:74:fd:5d:5f:20:38:61:e8:b4:cc:
         dd:c8:81:da:e7:0f:45:a0:f8:f8:b3:c9:48:69:f0:df:fe:c1:
         8c:c3:25:72:2b:0f:b8:38:fb:e9:19:15:b8:c4:01:e1:a0:fb:
         89:98:10:bd:51:f0:79:31:41:c5:79:d2:5d:67:46:0a:42:2c:
         6a:a1:a3:f2:01:58:47:4b:a6:0c:49:a6:60:61:09:b1:05:bb:
         d2:a7:47:2d:e8:9f:54:e5:c0:da:9f:29:2e:e6:c3:5c:9c:8d:
         ab:b0:9e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----