Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033363335.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          9hki3pcbYbqx2eY0Fo+Zpi1o5my9JZI/4yk+8oSKgb4=
Subject key identifier:   6E:CA:9D:F6:36:28:8B:36:8B:B7:E5:11:E7:69:5A:0E:34:BB:DE:22
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       34185A8AFFF2DBF3DD0E5461A9E6A61664BF9A3F
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033363335.roa
Signing time:             Fri 09 Dec 2022 15:39:42 +0000
ROA not before:           Fri 09 Dec 2022 15:34:42 +0000
ROA not after:            Fri 08 Dec 2023 15:39:42 +0000
asID:                     203635
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:18:5a:8a:ff:f2:db:f3:dd:0e:54:61:a9:e6:a6:16:64:bf:9a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:42 2022 GMT
            Not After : Dec  8 15:39:42 2023 GMT
        Subject: CN=6ECA9DF636288B368BB7E511E7695A0E34BBDE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:b6:c7:b9:da:5e:1e:54:58:56:33:5a:7b:
                    30:35:7f:60:77:3f:15:98:ec:7a:53:9b:d6:fa:bd:
                    88:7a:ca:9a:cf:e2:92:bc:11:6d:30:c0:48:4b:e2:
                    02:65:b7:32:67:8e:e1:f5:7c:0c:3f:0d:23:e5:2d:
                    fc:bc:de:7a:68:8b:3c:b4:68:cc:61:b6:5b:02:40:
                    7e:be:ff:6d:8e:8b:c4:58:4b:fb:ae:9d:d3:ec:75:
                    ee:47:6a:eb:a6:9b:8c:fe:c0:85:49:2b:6f:d0:fa:
                    97:a6:c5:fa:dd:88:42:36:df:02:51:dd:45:b9:67:
                    54:b4:5d:0c:9b:9f:d0:34:c5:a3:29:7a:ed:27:d5:
                    58:b2:e0:4e:7d:f7:a4:b0:bc:57:be:b1:f9:ce:7b:
                    48:64:de:ad:01:b4:97:c1:13:55:54:0c:b4:1b:de:
                    9d:b2:d3:ff:cf:ba:41:e2:3b:cd:f6:02:58:ce:3f:
                    58:b1:46:36:cd:a0:63:c9:95:a8:ba:74:4f:cc:fb:
                    7a:8d:ba:01:04:b4:41:91:ed:3e:df:4b:88:16:3f:
                    98:0f:d3:a2:0c:af:0d:01:36:11:7a:61:c1:e9:bb:
                    9b:05:8a:f3:38:89:18:40:12:91:d3:41:f2:15:16:
                    37:7b:03:65:28:5e:74:31:f3:d2:8a:51:5d:0e:d0:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CA:9D:F6:36:28:8B:36:8B:B7:E5:11:E7:69:5A:0E:34:BB:DE:22
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:06:ae:14:6e:42:a6:a8:27:c4:d2:2b:3e:83:9b:3b:76:
         37:e3:df:3e:f3:7f:cc:b2:a8:fc:d6:fe:c9:9f:29:f1:72:c6:
         2b:9b:82:d5:92:9d:b9:20:4b:75:ae:8e:0e:53:52:03:3f:22:
         b7:05:57:76:b1:bf:ec:8b:96:1c:3d:ce:1b:7f:ed:2a:29:39:
         e8:b4:73:0c:a2:58:94:f0:c7:14:16:4a:ac:3c:c2:3d:10:99:
         2c:86:fd:19:ea:c3:3a:c8:1c:26:bc:73:b7:52:2b:fe:7d:57:
         64:df:d4:8f:aa:6a:ff:cb:37:9f:0f:6b:9b:3a:53:24:ef:1e:
         e3:c3:8d:1c:d7:3a:f3:1d:d5:04:3e:f2:86:35:dd:f7:59:73:
         ac:ee:b5:c2:3d:22:8a:c2:02:e0:31:bd:9f:74:67:9b:91:6a:
         50:59:1c:8a:ba:b5:b3:9f:16:21:81:fc:77:3c:48:01:ee:2d:
         33:9c:7f:d3:43:ac:b0:16:47:50:66:14:03:b4:f8:0e:4e:1d:
         93:a2:1a:61:96:ea:b9:f2:99:93:10:84:2b:e7:49:1b:da:ee:
         83:03:d5:59:9a:15:0a:97:97:a3:bd:98:e9:dd:a9:d7:67:35:
         1e:45:31:bf:58:f3:e7:7d:bc:be:de:5f:9c:4d:9b:51:33:a8:
         55:5b:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----