Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033343538.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323033343538.roa (raw, json)
Hash identifier:          NgYdhngMkN4vbZ3WMyBOgsAdM1q6zEvfhOauZfPu3vg=
Subject key identifier:   1E:9B:8D:95:D1:87:E0:C2:C1:E1:43:AD:84:FA:1F:BA:54:41:7E:7C
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       7B85C13A953CCEA57B63561D1139044403FC835D
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033343538.roa
Signing time:             Fri 09 Dec 2022 15:39:30 +0000
ROA not before:           Fri 09 Dec 2022 15:34:30 +0000
ROA not after:            Fri 08 Dec 2023 15:39:30 +0000
asID:                     203458
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:85:c1:3a:95:3c:ce:a5:7b:63:56:1d:11:39:04:44:03:fc:83:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:30 2022 GMT
            Not After : Dec  8 15:39:30 2023 GMT
        Subject: CN=1E9B8D95D187E0C2C1E143AD84FA1FBA54417E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:36:be:c4:b8:79:bd:5b:89:40:57:1e:c6:
                    75:2f:f0:eb:80:0d:07:ec:a7:1d:ec:14:71:d0:61:
                    e3:34:71:72:f5:93:f1:3b:2f:a4:1a:2b:7f:b6:0a:
                    2a:fa:ad:7b:6c:20:56:0f:a5:48:f1:23:f0:d3:b5:
                    13:60:9b:78:f2:49:33:58:dd:6e:c7:0d:10:b3:20:
                    c0:98:f4:dc:2b:c4:1f:56:70:a8:c1:fe:19:4f:f0:
                    b7:94:db:9f:dd:df:51:94:60:90:ee:63:42:88:f2:
                    9b:55:f2:b7:35:16:da:3c:c3:40:d5:28:00:43:d6:
                    77:34:11:97:16:93:fe:9b:b4:96:fe:f7:a3:eb:60:
                    ee:9e:b7:7e:16:ca:d6:aa:c4:67:bd:be:0f:51:6d:
                    c0:aa:a5:62:b7:7b:99:3d:1f:48:a1:cc:6c:49:f9:
                    41:42:99:8f:0c:62:88:83:56:0f:f4:c0:6c:a5:f5:
                    ca:d3:c9:53:4f:a3:68:fe:e0:32:28:81:ec:45:f2:
                    63:e5:aa:10:df:f9:68:3b:0a:79:50:a4:d6:aa:01:
                    5a:4d:e4:fb:ed:6c:33:a7:9e:6e:3b:40:7c:7b:21:
                    c3:2d:6f:36:b4:e6:ff:25:9d:2a:97:09:ee:25:4e:
                    65:64:1c:20:3c:3d:35:ff:93:c3:f8:48:77:7c:04:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9B:8D:95:D1:87:E0:C2:C1:E1:43:AD:84:FA:1F:BA:54:41:7E:7C
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:91:c8:78:c0:18:8a:e0:b3:59:5d:4b:8e:45:6d:b5:bc:c6:
         9e:0c:d4:61:12:a4:5a:2d:aa:d1:46:85:b4:a7:b2:68:5c:71:
         e2:10:c3:f6:92:ba:cd:ef:c1:0a:23:d7:7f:14:dc:33:a8:70:
         fd:2a:67:a0:f1:b2:20:3d:39:2b:ec:51:78:3a:05:96:57:96:
         dd:8b:fd:41:98:0d:27:65:af:ba:db:47:87:30:a6:8d:70:5d:
         d1:a9:5a:69:d8:89:b9:71:ac:f2:d7:66:10:ef:6d:dd:24:91:
         35:bb:03:91:93:7b:c4:d8:18:15:25:6c:97:8e:8c:0b:6e:a7:
         b4:fd:0f:6c:89:93:aa:ad:4e:14:7e:97:a9:2b:3f:cb:dd:57:
         2d:0c:8a:82:27:d9:50:bc:a2:39:76:fa:59:1e:13:3f:79:b9:
         af:bc:5a:86:ef:3d:5f:ac:ca:49:0d:49:7a:e2:09:93:a3:2c:
         6c:a8:f1:60:aa:9d:d5:9d:fa:d6:df:1b:e7:2b:f2:f9:81:10:
         1e:16:0c:ea:3c:9f:5b:a8:1c:a1:7b:cb:fe:13:1f:cf:72:1a:
         3b:d6:9f:5b:1c:55:7d:5a:f9:57:b1:b2:5f:c4:de:8a:fb:e3:
         df:5b:8e:df:bc:e0:fb:ab:5c:95:2e:d3:69:bd:f3:86:bd:e4:
         6a:32:a5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----