Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323039323633.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323039323633.roa (raw, json)
Hash identifier:          gm9viMrwm9wfoiGWgQd1Gf01xAUDjVXh+D0ylZDqtuA=
Subject key identifier:   22:01:62:36:C2:82:B0:C9:C5:94:D8:86:DE:C9:AE:B4:A7:EC:44:01
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       6CF1F530E27162AA92CE13B3CAA54BAB0FB44426
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323039323633.roa
Signing time:             Fri 09 Dec 2022 15:39:31 +0000
ROA not before:           Fri 09 Dec 2022 15:34:31 +0000
ROA not after:            Fri 08 Dec 2023 15:39:31 +0000
asID:                     209263
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f1:f5:30:e2:71:62:aa:92:ce:13:b3:ca:a5:4b:ab:0f:b4:44:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:31 2022 GMT
            Not After : Dec  8 15:39:31 2023 GMT
        Subject: CN=22016236C282B0C9C594D886DEC9AEB4A7EC4401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cd:d8:23:46:33:4f:9c:3d:08:1b:0d:b9:59:
                    db:26:04:e8:ac:49:2b:00:d0:ca:98:c2:c3:fd:97:
                    71:2e:da:68:6e:42:6f:67:83:c0:12:eb:f8:45:3f:
                    7b:c5:87:5f:66:73:86:93:da:46:08:57:27:1c:5a:
                    21:76:b4:16:38:03:37:87:e8:6e:0c:48:f1:c6:fd:
                    af:c3:02:ef:ca:8e:94:6f:48:26:7b:66:56:c9:5e:
                    63:88:cb:b5:bf:b4:da:91:b2:77:0c:03:65:42:36:
                    2e:03:ae:d1:77:a8:6e:e0:52:44:da:32:70:28:12:
                    9e:a5:03:91:ea:1b:eb:22:bd:6d:2b:60:a7:0d:2a:
                    7d:0b:e3:77:58:f5:05:24:e3:3d:aa:43:70:03:cd:
                    0e:74:69:99:a2:f5:1e:86:4e:f8:3d:18:8e:35:f3:
                    18:a2:fd:63:a7:57:94:6e:4d:18:bd:57:74:38:32:
                    7e:fb:c4:12:88:4e:82:42:78:09:ba:6c:6b:02:79:
                    52:c9:52:0c:bc:a7:84:49:ac:d9:65:5d:42:f8:3d:
                    27:c7:af:0c:62:0b:fc:82:b1:f3:27:e8:0a:13:1b:
                    4a:9c:7e:53:48:3e:e0:94:be:60:6f:0d:fe:8f:57:
                    b9:e9:70:ff:c0:cd:a4:50:8e:f6:bc:30:93:b4:f2:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:01:62:36:C2:82:B0:C9:C5:94:D8:86:DE:C9:AE:B4:A7:EC:44:01
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323039323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:bf:92:0c:0d:50:f4:0d:0a:7d:e1:96:fd:97:56:a3:b1:97:
         d4:35:fb:16:99:ac:e8:45:7f:c0:11:4b:c7:12:44:9f:0d:25:
         44:89:44:14:57:78:3a:1f:ca:45:e7:91:33:ed:ae:cb:15:0c:
         67:c6:a6:ae:20:af:41:04:57:ba:26:cc:0c:92:87:4f:19:8b:
         d7:b5:1e:63:e8:d9:67:29:34:a2:97:f9:c8:8e:e9:e8:75:97:
         21:a6:f2:f2:f3:af:46:3f:fd:1d:e5:53:4b:a4:b5:9c:d7:69:
         58:f3:58:10:66:29:8d:bd:78:b2:3f:7f:25:c2:d1:f9:e6:71:
         e5:85:fb:d2:21:93:d7:46:1c:36:c6:c5:23:c2:a3:61:af:57:
         94:1a:01:c6:56:f9:22:27:8f:de:6e:c5:03:23:0a:5c:ef:ea:
         d6:e1:97:c5:8c:76:b2:2c:4e:5a:65:5f:d6:ce:05:e2:79:a1:
         58:85:d7:6a:9b:3f:ed:4e:60:6c:f1:73:10:41:aa:79:ea:b8:
         53:99:76:b2:3b:79:33:76:a4:ce:cd:f2:7f:93:b8:69:61:0d:
         da:40:56:fc:98:ac:fb:23:54:8f:02:bd:0a:b0:cb:db:6e:b7:
         00:f0:f1:ab:ee:53:35:30:0e:89:3e:65:af:da:34:e3:fe:af:
         2b:4f:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----