Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323032383238.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323032383238.roa (raw, json)
Hash identifier:          rzI1wMC9F8M8GthAIPslVHV+TnxVJkeTSqHUnWlTTkg=
Subject key identifier:   55:3B:12:AC:B8:CF:40:85:6F:B5:CD:A1:75:17:5E:DA:F3:BB:1C:81
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       7AA7BE459FCEDF063B4BFB85C83C0BAF01D7C4A6
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323032383238.roa
Signing time:             Fri 09 Dec 2022 15:39:34 +0000
ROA not before:           Fri 09 Dec 2022 15:34:34 +0000
ROA not after:            Fri 08 Dec 2023 15:39:34 +0000
asID:                     202828
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a7:be:45:9f:ce:df:06:3b:4b:fb:85:c8:3c:0b:af:01:d7:c4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:34 2022 GMT
            Not After : Dec  8 15:39:34 2023 GMT
        Subject: CN=553B12ACB8CF40856FB5CDA175175EDAF3BB1C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0e:de:ff:72:4c:64:5e:6f:85:0f:7a:18:b6:
                    b7:cc:42:98:aa:3a:f7:ad:57:33:d3:65:ee:50:65:
                    92:be:c0:ba:d9:3e:39:92:ed:36:db:03:48:98:ed:
                    c8:9c:e2:15:96:d6:37:c0:46:e6:5a:9c:26:1b:8f:
                    e3:37:67:15:63:4a:e3:4e:c7:eb:aa:a2:78:51:af:
                    ce:25:6f:b8:9d:7c:d0:8e:4b:b6:61:55:90:84:d0:
                    07:4d:eb:46:36:7e:67:1c:a4:f7:9d:40:17:84:f8:
                    23:c4:ce:a1:c9:9d:8a:24:b3:e8:a6:7e:92:89:ef:
                    47:8e:9d:bf:d9:bc:62:c8:13:04:f6:5c:2e:37:02:
                    6e:01:7d:68:17:fb:7e:a7:24:92:b1:52:8c:06:47:
                    ab:93:b4:c7:31:e2:6e:24:b8:7e:ac:63:a7:30:60:
                    33:cc:7c:e0:0e:f2:48:47:ce:63:4d:d6:f3:62:3c:
                    8e:cb:2c:eb:5f:68:4d:05:af:45:37:6a:e2:18:12:
                    2e:68:f5:d5:71:06:3f:e0:db:61:db:88:ca:42:09:
                    15:01:6f:7a:77:ff:6b:cd:a9:1b:da:9f:87:11:d2:
                    2c:f5:95:2a:6d:33:d0:c0:a9:de:49:84:1c:24:d5:
                    07:50:a3:03:22:ea:47:d9:35:4a:b3:c6:7f:d5:5a:
                    00:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3B:12:AC:B8:CF:40:85:6F:B5:CD:A1:75:17:5E:DA:F3:BB:1C:81
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323032383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:62:59:94:9c:7c:23:e8:94:5c:84:6b:4c:bc:3e:a2:eb:cd:
         e4:09:49:aa:22:f7:48:25:a6:e5:67:35:50:8a:cd:21:39:d3:
         49:15:36:74:f6:ab:16:8e:c9:c5:f8:d3:1a:3c:f7:95:e3:4b:
         29:73:12:3e:bd:f3:69:1d:bf:31:a5:38:92:db:21:b2:d0:74:
         f6:d8:91:87:4c:03:76:26:f3:9d:34:7c:1a:e4:13:2f:73:74:
         e3:2a:29:13:55:3a:a7:1e:2d:2e:cf:54:27:fc:c8:d5:98:63:
         b7:72:24:bc:67:af:1f:a6:0a:10:61:59:74:10:3f:5c:b7:39:
         3e:e4:04:20:65:dc:c9:1c:ec:14:5e:c8:1c:b6:32:d7:25:c7:
         48:20:5d:30:84:d1:3e:2e:58:e1:cd:8f:7c:de:53:a3:f0:1d:
         bf:43:04:10:b1:df:1b:3f:8b:42:0d:83:c9:2e:c7:fa:7e:87:
         e1:0d:fe:7c:88:9b:f5:93:16:8a:ba:e8:20:6a:5f:5f:86:ac:
         fd:ea:8e:16:d7:22:b5:1b:1c:a3:b6:3a:5d:2a:7b:99:78:5b:
         5d:cd:e6:5b:83:57:db:2c:69:20:67:d4:19:ed:8d:28:67:7a:
         40:9d:d1:07:a6:17:f9:e0:ac:55:1e:be:d8:aa:10:01:ee:fe:
         97:ef:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----