Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323039303232.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323039303232.roa (raw, json)
Hash identifier:          LdwrlihxHuUZT5Jn/GOPJmFP4ISGiNvNuAaChtyOwG0=
Subject key identifier:   2F:1A:78:CA:13:D7:85:97:DB:C8:13:DA:39:39:37:3D:E5:13:59:DA
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       2A8C8552DA8A2D492896EEF18AD189DF7B9CFCD9
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323039303232.roa
Signing time:             Fri 09 Dec 2022 15:39:38 +0000
ROA not before:           Fri 09 Dec 2022 15:34:38 +0000
ROA not after:            Fri 08 Dec 2023 15:39:38 +0000
asID:                     209022
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8c:85:52:da:8a:2d:49:28:96:ee:f1:8a:d1:89:df:7b:9c:fc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:38 2022 GMT
            Not After : Dec  8 15:39:38 2023 GMT
        Subject: CN=2F1A78CA13D78597DBC813DA3939373DE51359DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:49:33:9d:0a:89:52:66:e7:07:83:6d:29:d1:
                    c7:f2:c4:36:55:3b:a4:ae:32:92:60:1e:65:6f:47:
                    10:32:65:5b:0d:ed:6f:3e:d0:a3:bb:15:ff:ce:e0:
                    59:ea:a3:48:72:e2:88:08:16:6d:87:ea:90:05:69:
                    0b:2a:77:91:2b:32:ea:95:bc:71:9b:24:49:dd:ab:
                    fb:ba:1d:81:a2:c1:20:9e:3f:16:29:28:63:b3:e1:
                    25:99:78:31:cd:78:cc:89:12:f4:f4:d2:3e:c4:26:
                    0c:29:4f:14:1c:f5:5d:99:8a:55:92:c6:3c:94:49:
                    de:c8:b9:86:dc:39:21:94:4d:1c:bd:4a:a2:8b:3b:
                    e0:52:14:0b:af:36:a4:2d:9f:6c:e7:bc:a3:84:09:
                    15:6d:aa:be:e2:ec:f5:6c:64:55:c0:e0:b1:ca:5c:
                    48:07:87:9a:ad:fc:98:7f:4d:8b:bd:96:4e:bf:24:
                    2a:9e:d9:70:f9:c6:f0:14:01:2f:f3:ec:fe:ea:08:
                    06:b5:c4:10:8c:5e:3b:38:03:6b:7e:79:70:33:7f:
                    5b:5f:a6:49:1e:5a:e1:8c:7a:fd:ca:b3:58:eb:87:
                    43:bc:79:5d:4c:f2:e9:86:d8:99:22:2b:b7:eb:c0:
                    2f:18:6c:6e:bc:9b:7a:22:04:4c:15:b5:1e:e2:6d:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1A:78:CA:13:D7:85:97:DB:C8:13:DA:39:39:37:3D:E5:13:59:DA
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323039303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:4d:90:af:b3:ba:b4:04:5b:13:f1:32:2a:82:3e:88:68:9b:
         f5:c2:a4:e6:87:dd:2d:81:48:b5:88:3e:9e:bb:6d:7f:89:4f:
         5f:ca:3e:dc:6d:d7:76:59:0e:1e:6f:41:a9:1c:16:6a:f8:82:
         5e:4a:a7:63:8d:f7:a8:c8:ae:fc:81:b7:7c:f3:67:b1:28:33:
         c3:ce:6b:14:0f:e6:8e:fb:4c:e7:0e:41:47:03:5a:ae:b6:8c:
         d1:cd:b3:6c:70:05:b9:b0:45:9f:d1:61:65:11:f9:7c:d0:0c:
         44:59:a8:9a:05:09:88:51:32:61:95:0d:e9:69:19:c5:bb:00:
         a4:10:23:0d:16:e5:e2:27:ad:1b:12:e6:45:6a:d2:23:e4:b8:
         7b:8b:fb:f8:fb:62:fb:0f:43:5f:b2:15:c1:b9:55:1e:f5:d4:
         38:69:47:51:e8:c6:b3:3a:ca:f0:eb:5d:fb:7d:9f:e1:c0:8b:
         4b:6a:64:70:c7:4a:81:33:3e:8c:e8:30:dc:a3:a0:90:fa:61:
         69:55:2a:40:50:c4:d0:2a:90:45:31:8d:0c:ee:40:a2:17:24:
         d8:10:62:66:60:81:f0:6b:16:75:90:fd:b6:79:74:ff:fd:20:
         ad:b3:65:f7:4c:94:0e:56:0c:4a:f2:0d:8f:c6:2d:b2:dc:5d:
         62:ff:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----