Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323034333735.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323034333735.roa (raw, json)
Hash identifier:          Z1YrGbjpIxKvlcqclh557EKgYX8oDsgdpaCxTa5nUqo=
Subject key identifier:   50:AB:F9:BC:87:06:B6:E9:94:C2:18:AE:AF:6E:FC:3C:DE:F6:F3:ED
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       3B0FA423F4456EC2FF8661A50A8F073B56AEA2AF
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323034333735.roa
Signing time:             Fri 09 Dec 2022 15:39:30 +0000
ROA not before:           Fri 09 Dec 2022 15:34:30 +0000
ROA not after:            Fri 08 Dec 2023 15:39:30 +0000
asID:                     204375
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0f:a4:23:f4:45:6e:c2:ff:86:61:a5:0a:8f:07:3b:56:ae:a2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:30 2022 GMT
            Not After : Dec  8 15:39:30 2023 GMT
        Subject: CN=50ABF9BC8706B6E994C218AEAF6EFC3CDEF6F3ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:bd:6c:d3:91:5d:97:91:06:d8:1a:12:ad:
                    60:dd:ae:d9:4b:74:c2:69:6f:d7:cf:0f:2b:d9:6c:
                    3b:70:4f:08:ba:7a:e1:2f:2f:dc:74:46:c0:c5:a2:
                    21:26:cd:56:79:66:a8:06:17:f6:6e:48:4d:5b:16:
                    45:c4:66:05:84:bd:d4:0f:00:f0:10:e4:6f:96:f2:
                    41:59:5a:bd:18:11:dd:bc:c9:fe:8a:a6:ef:19:bb:
                    03:7c:4c:71:d0:3f:ce:41:d7:d3:ac:67:af:e3:47:
                    c6:18:52:23:19:d5:24:ac:a0:61:da:96:4d:ba:df:
                    b9:b2:f9:11:56:2f:d5:85:41:97:60:8f:1b:c4:98:
                    af:fc:90:ca:a1:1e:a3:c6:e5:c5:a3:a9:a4:2b:b7:
                    2a:85:3c:38:48:c3:23:f1:7f:01:c8:83:4f:bd:dc:
                    ba:c1:93:b2:0e:e4:06:9c:ae:86:60:35:38:86:ec:
                    5e:85:28:fb:b6:23:80:72:cf:7e:ae:91:e0:35:ed:
                    ba:da:a9:96:e4:da:6d:f6:98:c9:cd:37:7e:2b:bb:
                    0f:fb:ac:43:6a:d4:d8:a2:c8:a4:b7:87:da:8d:58:
                    18:44:aa:9e:6f:0e:58:04:cc:6c:38:4a:3b:47:5a:
                    a0:98:ab:36:fc:ce:a8:c9:1e:36:81:05:cd:63:cd:
                    c4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AB:F9:BC:87:06:B6:E9:94:C2:18:AE:AF:6E:FC:3C:DE:F6:F3:ED
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323034333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:f4:c0:8c:99:5b:ae:84:eb:d5:a6:76:52:9c:e4:b1:7b:f9:
         f8:98:ec:ab:1a:5b:52:1b:03:8f:c7:a3:20:db:10:79:a5:21:
         0e:50:de:55:0f:61:cc:ba:bb:c2:b3:77:8a:c3:1e:e9:85:fd:
         2d:1c:42:1c:6c:8f:de:fe:30:2b:76:4a:8e:83:cb:87:9c:5d:
         d4:e2:92:69:7a:1f:ff:f7:a7:60:35:7c:70:1a:7d:f9:ea:be:
         8e:a0:77:1d:4f:a7:ac:33:7a:1d:e5:99:fe:36:3f:c2:39:e5:
         44:8d:e6:fe:56:f2:7a:fc:07:da:33:af:1b:b5:0e:2f:2e:bb:
         29:69:fa:07:e9:60:db:70:23:cd:e7:23:a3:1c:d6:4a:c5:63:
         67:29:6c:1a:fc:c2:98:fa:df:6a:29:d9:25:17:a7:92:8f:ca:
         67:d6:85:34:17:7e:44:90:f3:80:e4:8c:ec:c9:33:b7:b0:4f:
         8c:b8:62:c3:2a:94:3c:d8:77:88:0d:64:e9:46:7e:fc:a7:c1:
         06:08:9a:3d:a0:cf:0c:14:0b:f5:da:81:7b:4c:b7:aa:29:64:
         dd:bf:d1:6b:8a:f1:b1:27:23:3d:36:5b:94:06:a3:e8:96:92:
         e4:49:7e:f4:c5:bc:6c:b2:4b:cd:65:f1:0b:44:47:92:ad:4d:
         c9:86:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----