Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323036343434.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323036343434.roa (raw, json)
Hash identifier:          0NU2vqxl/7BNS9pDSsVrkHw/9mRBKOmIMd+HZMQRD0w=
Subject key identifier:   3E:D7:7B:BE:1B:E0:CC:97:74:2C:D5:C2:58:87:57:3D:D8:3B:41:A4
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       3F3E98D26D5526436C8DDADF6E7AE4827902F6BC
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323036343434.roa
Signing time:             Fri 09 Dec 2022 15:39:47 +0000
ROA not before:           Fri 09 Dec 2022 15:34:47 +0000
ROA not after:            Fri 08 Dec 2023 15:39:47 +0000
asID:                     206444
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3e:98:d2:6d:55:26:43:6c:8d:da:df:6e:7a:e4:82:79:02:f6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:47 2022 GMT
            Not After : Dec  8 15:39:47 2023 GMT
        Subject: CN=3ED77BBE1BE0CC97742CD5C25887573DD83B41A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:37:63:bd:1a:4b:11:ae:00:bb:e2:27:3d:
                    02:fd:99:46:c3:8d:dd:aa:ce:7c:f4:37:16:0c:4e:
                    d3:56:a2:4d:2c:1a:73:96:d0:97:13:c2:19:3e:da:
                    a9:32:c3:05:c4:fb:87:bb:61:25:fe:f3:f2:fa:8b:
                    d1:69:99:60:b2:73:e4:cc:14:ac:ba:f6:b4:50:6d:
                    2d:54:c3:74:e8:b4:5a:fd:af:df:e4:a2:7b:c7:2c:
                    19:a1:26:ee:66:6f:8e:64:dd:12:a4:4a:0d:3f:62:
                    ae:49:b0:c2:16:29:75:37:09:1d:d1:a2:ba:60:4f:
                    c2:a1:6c:e7:c4:f4:17:70:69:05:10:d0:35:d7:c7:
                    9b:24:0b:4a:d4:97:5f:5b:32:8d:5d:e6:49:20:f2:
                    cf:4b:43:ea:c9:a0:93:3c:b9:a3:29:5c:e9:40:9f:
                    05:36:0d:ef:54:3d:ca:ed:60:ae:ff:e8:0a:c4:28:
                    18:df:27:16:db:a4:b4:70:53:90:64:01:13:cb:ff:
                    04:df:83:da:e6:41:4b:45:8b:24:e4:68:97:d0:31:
                    4f:3e:f1:8c:a4:8c:34:7b:a1:d4:4e:b4:fa:c8:d2:
                    dc:db:71:1d:0a:89:09:52:91:8a:35:50:75:7f:40:
                    cd:c3:29:44:b6:e2:c6:ca:92:ef:26:99:b6:a7:d9:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D7:7B:BE:1B:E0:CC:97:74:2C:D5:C2:58:87:57:3D:D8:3B:41:A4
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323036343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:cc:61:12:a6:4f:6c:16:f6:e3:66:5a:c1:35:d3:36:5c:74:
         19:da:2d:0d:c7:d4:59:79:12:17:04:b5:23:d4:2c:fe:43:b4:
         54:d7:1b:3f:7c:83:b4:5b:5d:91:4d:2e:a0:7b:d1:50:1a:7a:
         0b:93:ec:e4:9f:2c:d8:2f:e9:4c:74:06:e8:23:4a:50:ea:83:
         82:10:57:71:71:3e:85:50:4c:67:07:c7:39:71:65:9c:84:7c:
         f4:79:89:01:7c:9a:55:9d:e9:a8:b8:75:12:32:0e:f5:f3:1d:
         23:4b:71:24:8a:6d:24:3f:0a:01:94:02:e4:86:3c:68:09:11:
         57:7f:c8:16:cc:d3:c6:39:6e:9d:25:68:07:e5:cf:66:00:a1:
         7c:32:4e:eb:8c:c1:82:6a:eb:93:c1:df:36:4d:bb:77:fd:17:
         2b:95:9a:ae:e1:79:84:6c:9a:f8:81:a1:e0:25:86:ae:a3:9b:
         e2:eb:6f:c7:89:2a:67:c3:ce:97:46:c5:4b:13:80:f2:32:4d:
         fe:aa:71:b7:50:9f:37:20:01:0a:41:60:51:49:ff:f5:56:f6:
         53:11:40:7a:9e:65:3e:a4:9d:fd:45:15:88:ad:f2:df:a6:e2:
         40:a9:2f:77:5e:24:7d:af:ce:79:3a:f8:22:24:45:8c:3c:46:
         ce:66:d6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----