Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          Sjem7AgAoRnZgJbD0dfbFemsJEKmGDPd5H8qP7qPi4Q=
Subject key identifier:   0D:DA:C2:D5:C9:81:66:8C:AC:F0:C2:03:A1:38:9C:2E:6B:DE:4A:BE
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       68DEC10CC59C9309C6C1014BAB3259A1EBDEF896
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Mon 09 Jan 2023 07:29:07 +0000
ROA not before:           Mon 09 Jan 2023 07:24:07 +0000
ROA not after:            Mon 08 Jan 2024 07:29:07 +0000
asID:                     212149
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:de:c1:0c:c5:9c:93:09:c6:c1:01:4b:ab:32:59:a1:eb:de:f8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Jan  9 07:24:07 2023 GMT
            Not After : Jan  8 07:29:07 2024 GMT
        Subject: CN=0DDAC2D5C981668CACF0C203A1389C2E6BDE4ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:c8:3e:82:00:50:50:a8:65:da:7c:1b:25:
                    58:be:c7:52:96:b7:ac:bf:08:72:e2:b3:24:3d:19:
                    ec:6c:1a:5a:29:33:60:d8:6b:7a:b4:0c:75:08:e2:
                    93:4e:60:d7:a6:a1:6b:80:1b:c5:2c:f7:69:d3:49:
                    13:14:2d:61:4a:f0:3d:af:55:68:42:51:9f:14:39:
                    4a:6a:28:d3:1b:dd:19:59:77:2d:06:ef:f0:e9:29:
                    26:d3:78:d8:70:a4:f6:8e:86:d0:38:fd:39:2b:48:
                    77:83:66:87:37:32:40:c1:dc:2a:5c:29:69:54:a7:
                    0e:7c:5d:af:0d:43:54:bb:3c:27:91:ef:9b:ed:23:
                    b3:22:7d:30:e2:87:c5:cb:a2:e0:ba:c7:96:56:8e:
                    e8:15:f6:3b:39:4f:cf:f9:11:7f:28:2a:23:cf:c4:
                    9a:9f:15:20:55:05:fc:e9:58:d5:ad:19:74:8a:42:
                    0a:fc:8e:60:79:59:0e:a3:68:26:49:54:dc:69:ac:
                    94:b9:55:ea:c8:5a:cf:e3:ac:36:0f:56:1a:39:7a:
                    26:bd:e7:b8:9c:7d:7a:7b:f3:be:9e:b2:63:b6:23:
                    32:de:25:45:18:65:be:21:cd:49:b1:26:c4:56:c9:
                    63:be:1c:e5:91:c9:86:7a:c4:14:98:22:04:be:25:
                    4e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DA:C2:D5:C9:81:66:8C:AC:F0:C2:03:A1:38:9C:2E:6B:DE:4A:BE
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:9a:4b:08:40:85:2e:5b:c6:1d:7c:84:03:5c:69:a9:d6:e3:
         72:ac:b1:35:3c:02:7d:1a:52:e3:1a:c0:df:ea:fb:30:d5:b7:
         0e:41:49:74:c0:17:3f:cf:5e:87:6e:1a:94:a9:45:7f:3c:a9:
         15:6b:e6:f6:e5:9d:a5:ea:d1:25:0a:03:45:b1:fa:eb:c9:ba:
         63:e7:aa:85:1f:2b:d2:e8:ab:4d:7f:fe:06:2b:a7:4d:7a:d3:
         73:a6:dc:16:0b:b2:51:92:ce:1e:11:b1:83:42:88:54:81:c9:
         63:47:b3:03:05:c1:53:4d:7a:81:19:d2:db:21:16:dd:22:92:
         d1:f7:36:05:ac:b2:c3:36:dc:4a:48:4c:5a:88:37:60:13:3f:
         f8:f1:94:a5:be:b8:47:d5:7c:ea:e7:8c:72:24:07:b3:4c:b8:
         44:99:cc:b3:a4:24:71:62:d1:9a:43:11:75:04:fb:7b:9e:22:
         b6:c0:b7:8d:2d:15:60:79:ca:43:cc:cd:f4:b5:f4:e9:c2:73:
         b0:74:57:98:6d:06:69:2a:f1:d5:4b:19:d6:54:c4:8a:d2:29:
         66:ac:a1:6e:cd:9f:2c:e5:6f:a2:ae:18:94:f7:23:42:ee:2a:
         27:11:75:37:7f:83:63:1f:54:30:39:b0:dc:08:08:f1:18:90:
         f7:28:26:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----