Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323036303136.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323036303136.roa (raw, json)
Hash identifier:          jYY7HSuYmtxBCC4lvuMCBxCkowkeuZOlHuYD5ukiPlg=
Subject key identifier:   28:FD:38:D6:61:9B:EF:92:C4:72:8A:CE:45:7B:A4:2A:C2:3B:23:34
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       08D0A71329A26065EB0C0A641AA8F78DA22DB7A5
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323036303136.roa
Signing time:             Fri 09 Dec 2022 15:39:37 +0000
ROA not before:           Fri 09 Dec 2022 15:34:37 +0000
ROA not after:            Fri 08 Dec 2023 15:39:37 +0000
asID:                     206016
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d0:a7:13:29:a2:60:65:eb:0c:0a:64:1a:a8:f7:8d:a2:2d:b7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:37 2022 GMT
            Not After : Dec  8 15:39:37 2023 GMT
        Subject: CN=28FD38D6619BEF92C4728ACE457BA42AC23B2334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:4e:35:60:25:e9:6e:b2:25:19:43:eb:2b:
                    6f:03:f7:b8:ff:c1:e3:3a:26:d3:1a:0c:45:54:30:
                    0b:91:b5:39:a5:c5:4d:52:b3:9a:ad:a6:09:fa:96:
                    af:46:06:bb:0d:8c:cb:ea:79:30:5b:66:67:5b:ba:
                    ec:3a:f2:9f:da:5f:02:07:65:21:39:a3:59:e5:85:
                    a9:0c:39:f5:c3:76:d1:d7:7c:5b:c8:ee:10:c8:e0:
                    73:36:7c:d7:ed:e5:5b:89:5d:7c:5e:4c:f1:92:95:
                    1a:3a:bf:63:f7:92:65:1c:ff:41:96:c8:7f:e4:ef:
                    be:75:11:61:af:7c:d7:48:5e:a7:2a:97:a4:2a:f7:
                    c7:2d:05:ff:15:61:79:2e:4e:bc:26:65:d8:24:0a:
                    3d:dd:31:fe:d2:cd:4a:e5:13:f5:ec:a3:be:5b:c7:
                    6f:9d:b8:21:3b:44:73:2e:1c:16:00:3e:0f:b3:56:
                    39:ba:4c:e4:1c:cf:b2:58:94:61:90:c2:d0:0d:bf:
                    26:00:f9:06:12:b7:df:34:68:b7:84:51:8a:3c:07:
                    64:ba:88:e4:86:bf:fe:70:6d:e3:14:4a:a1:df:21:
                    02:75:e3:ae:43:f2:14:5b:d5:3a:8f:44:2f:43:13:
                    1c:aa:90:06:99:38:c3:2e:0c:a4:4d:f9:8e:64:3a:
                    93:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FD:38:D6:61:9B:EF:92:C4:72:8A:CE:45:7B:A4:2A:C2:3B:23:34
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323036303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:bc:70:91:1b:08:ef:9a:b2:c4:07:fa:e6:fc:f3:ba:4d:
         d5:39:ea:41:8d:6f:37:13:a9:37:b7:2e:e4:05:53:6c:64:3b:
         d4:1e:d4:f1:35:b0:f8:92:38:36:1f:f1:51:b2:af:52:30:e3:
         e7:f0:bd:16:f4:83:8c:d4:46:8f:74:29:c5:26:85:fa:3c:96:
         59:cf:88:27:83:17:4d:9b:6a:5a:2a:b3:69:a0:af:bb:95:62:
         cb:52:dc:63:c0:2d:93:2a:10:29:62:63:6b:a3:6e:d6:5e:ff:
         4c:0f:6e:f6:7c:6b:60:4a:68:d1:97:31:07:0d:22:e5:6b:83:
         fd:ac:6a:3b:eb:5f:06:bd:6d:ea:b5:bd:f5:7e:1b:8d:9c:61:
         0a:c7:59:0f:1a:ee:b1:83:f4:1f:03:79:00:e2:d4:fd:6d:ef:
         9f:0e:aa:cb:a2:9d:dc:7d:47:71:e9:2c:27:19:78:19:bc:a3:
         d6:c6:81:f7:46:da:2e:8e:6b:5c:06:71:0b:2a:1b:79:18:7f:
         0c:49:b6:37:57:99:af:d2:1c:4a:33:ab:83:13:86:cc:59:3a:
         43:32:ea:49:fa:3b:20:26:ef:1b:8c:b8:ef:4f:d9:68:38:7d:
         18:0a:c1:25:0f:2d:db:f5:19:da:4c:69:a7:2c:57:5a:42:f9:
         f4:5d:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----