Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323036323731.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323036323731.roa (raw, json)
Hash identifier:          ui+2+T/ksakgohX2+uONndzypFpkLAwqmKRVS2jmOG4=
Subject key identifier:   6E:F9:4D:3A:57:6C:11:F4:6B:76:DD:D5:79:F6:85:32:DF:3C:97:0E
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       3075BD29B56967430BC9941A53FAB0C61BB5B8B4
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323036323731.roa
Signing time:             Fri 09 Dec 2022 15:39:41 +0000
ROA not before:           Fri 09 Dec 2022 15:34:41 +0000
ROA not after:            Fri 08 Dec 2023 15:39:41 +0000
asID:                     206271
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:75:bd:29:b5:69:67:43:0b:c9:94:1a:53:fa:b0:c6:1b:b5:b8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:41 2022 GMT
            Not After : Dec  8 15:39:41 2023 GMT
        Subject: CN=6EF94D3A576C11F46B76DDD579F68532DF3C970E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:36:f3:e5:ce:f7:40:bf:5b:01:31:81:91:
                    d9:79:a8:5f:9c:0a:8d:9d:f2:4b:d4:ac:58:c1:08:
                    0b:92:ff:d2:df:ba:52:30:5d:3f:20:c5:31:a6:f3:
                    0b:1e:0a:e2:4d:71:e3:a6:52:ef:3e:79:0f:a0:2b:
                    fa:36:57:53:03:06:60:3d:bf:e3:ae:a4:a3:f1:cb:
                    19:4f:ce:4c:41:90:37:7d:7d:fa:4d:54:36:4e:aa:
                    f5:af:4f:a4:1d:52:eb:11:77:ee:db:e9:b7:d0:b8:
                    6b:6d:42:90:75:4d:58:f6:9b:6f:21:9a:7c:e8:fb:
                    fe:68:bd:f9:dd:5c:40:0c:cc:81:51:31:2b:6c:6c:
                    f0:05:34:e8:82:43:e5:b0:c7:7a:2d:75:f1:54:d7:
                    94:00:1f:f2:c5:a6:60:23:42:d8:57:a3:98:24:7b:
                    c0:01:0e:37:de:71:64:a7:75:58:d5:9e:02:a6:c0:
                    d1:51:a5:78:36:be:f0:6a:08:73:77:2b:c9:66:76:
                    71:42:5f:93:d2:3c:73:67:23:65:1f:fa:cb:94:41:
                    2d:61:43:03:10:1b:9c:4f:6e:2a:ac:1f:91:43:0b:
                    d3:97:c9:dc:f3:1f:9c:1c:30:a8:90:d4:4a:b5:49:
                    ab:a2:35:b8:52:d9:72:bc:f1:df:a3:30:89:07:b1:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F9:4D:3A:57:6C:11:F4:6B:76:DD:D5:79:F6:85:32:DF:3C:97:0E
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323036323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:70:fb:1a:91:4a:5d:59:0e:c6:ca:e3:45:ad:64:34:e5:
         43:97:65:87:87:a7:aa:5d:4a:42:88:db:85:8f:55:e6:35:0b:
         73:81:47:9d:a7:21:c8:7a:0e:65:13:10:0e:92:1d:9b:7b:5b:
         42:4b:7a:cb:13:71:94:cd:49:a9:f8:16:d6:33:18:09:c0:08:
         22:63:5a:08:d7:69:78:cd:03:ac:f7:75:c8:44:aa:1d:d2:12:
         ee:bb:90:5a:24:e4:fa:a7:da:90:b1:84:91:2b:15:87:11:5f:
         62:57:f5:ca:e6:ff:74:3c:fa:59:5d:34:15:dd:d3:66:db:36:
         26:ee:40:e2:a1:f5:9f:9e:4c:69:7f:d7:28:e4:fb:13:79:db:
         44:65:d5:0c:c2:2c:4d:87:88:0e:2d:5e:b5:7d:07:9d:9c:81:
         f5:3f:c6:5c:c9:11:40:1a:46:35:7d:93:72:1c:f7:3e:03:99:
         39:bf:85:c2:25:2a:1d:74:45:6c:78:a6:c1:3b:e6:c4:fd:d5:
         af:04:a6:4a:37:cd:85:0c:7e:d6:bf:4d:dd:19:c8:30:51:1a:
         59:22:b2:04:e4:eb:a1:95:b4:17:a1:a0:7a:dd:dc:1d:dc:22:
         9f:1f:fa:1c:7f:a3:96:d1:f7:8c:9b:9f:91:92:20:9b:af:81:
         75:b2:85:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----