Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323132313233.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323132313233.roa (raw, json)
Hash identifier:          Xr6jpXBiph3wd6D91M8+p1rbIGVyBxWZ1DOir388T6g=
Subject key identifier:   30:7F:D4:58:96:03:64:18:58:84:D8:A3:4F:55:D4:A4:F8:E2:8E:04
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       3F6ACC69491CE1F4E43DD830883F38E5C33932C1
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323132313233.roa
Signing time:             Fri 09 Dec 2022 15:39:32 +0000
ROA not before:           Fri 09 Dec 2022 15:34:32 +0000
ROA not after:            Fri 08 Dec 2023 15:39:32 +0000
asID:                     212123
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6a:cc:69:49:1c:e1:f4:e4:3d:d8:30:88:3f:38:e5:c3:39:32:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:32 2022 GMT
            Not After : Dec  8 15:39:32 2023 GMT
        Subject: CN=307FD458960364185884D8A34F55D4A4F8E28E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:c0:ff:91:9d:2d:9f:0a:5e:2e:13:1e:ec:
                    b5:41:b9:f0:11:e2:97:3e:bc:9b:4e:ea:f9:e0:3c:
                    69:68:c6:e1:75:66:01:5f:b6:bc:d0:ac:d6:40:aa:
                    08:d0:7c:4c:24:38:df:2b:9b:8e:2e:ba:e1:c7:92:
                    e8:4f:af:51:76:b0:e4:9f:3c:c2:c7:8f:21:e9:07:
                    c0:e7:17:b7:26:a5:ed:f0:ed:32:d1:f7:32:b5:49:
                    cd:4d:ae:ab:ff:89:4c:52:34:81:77:52:cf:e0:43:
                    b0:7d:10:bc:00:26:1f:9d:05:93:ee:0b:fd:e3:6d:
                    ba:dc:e2:d1:02:8a:d6:68:be:bb:9d:20:dc:7b:70:
                    0e:b6:01:a2:ea:38:79:93:e0:85:7d:10:e1:f0:8a:
                    c4:37:0a:91:88:76:d8:48:0a:8a:f7:78:42:d7:18:
                    0a:d7:4b:4b:cd:34:0e:d3:97:12:09:d5:74:18:7a:
                    d3:9f:a1:77:0a:92:56:fd:a5:7c:1b:54:d3:d7:69:
                    96:cf:3e:f4:0a:e1:98:52:7c:75:00:03:6c:f8:f5:
                    c6:45:c8:6e:d6:cc:8a:6f:7d:56:f4:0e:0c:fa:cf:
                    6d:40:66:93:9d:a8:58:d1:25:d4:77:3f:c6:6d:9f:
                    17:f9:36:c0:3e:76:12:02:80:6a:87:57:1a:33:31:
                    c6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7F:D4:58:96:03:64:18:58:84:D8:A3:4F:55:D4:A4:F8:E2:8E:04
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323132313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:87:35:60:a1:52:30:50:d1:eb:35:a1:ec:3c:36:96:87:f5:
         e7:9d:07:d2:1a:b7:48:8a:68:2e:a8:f4:90:75:1c:84:78:cc:
         3e:ba:22:44:39:b8:af:2a:4f:f6:38:a3:cb:fb:52:56:84:9c:
         0a:af:67:3c:39:81:a1:d5:81:16:23:76:55:4f:09:bb:68:9f:
         ce:98:bb:7a:63:73:22:74:e9:94:e0:47:8d:30:ca:22:8c:2e:
         ab:fe:17:53:7c:11:36:79:eb:69:62:23:b5:54:c9:8d:c1:f5:
         ee:96:99:d1:c7:ac:3f:f7:4b:b9:d4:08:fb:f0:86:17:23:ff:
         f8:6a:af:37:f0:a3:13:75:da:cc:46:8d:7f:e0:1a:12:8b:e1:
         65:24:c6:d6:bb:93:dc:93:ec:b8:12:06:f5:7d:4a:e3:49:5f:
         b7:39:30:5c:e3:78:10:6a:9f:62:b2:69:cf:63:3c:9c:13:93:
         36:ce:30:df:d3:9b:08:b0:60:bf:db:ff:09:41:4f:da:c1:e2:
         03:93:3f:37:25:2b:e3:e7:7d:31:e7:e4:4d:e6:87:19:e6:7e:
         a9:bc:d2:3b:32:dc:2d:d5:55:50:e5:ee:13:b5:99:c4:5e:bb:
         08:e0:e0:a2:ce:d7:05:be:b5:4a:9e:10:5f:b4:52:e8:49:5f:
         0d:77:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----