Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323133303435.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323133303435.roa (raw, json)
Hash identifier:          N4ICcYCOKaJ6RSjgrcfqB6QlnmVzo1FybcWiBZDlnkw=
Subject key identifier:   DC:E9:CE:AA:0D:DD:0E:2C:A6:AC:B0:18:1F:57:91:5A:97:C1:2B:DC
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       0B57A7455799C01A4B627608C49999C683992CD0
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323133303435.roa
Signing time:             Fri 09 Dec 2022 23:44:57 +0000
ROA not before:           Fri 09 Dec 2022 23:39:57 +0000
ROA not after:            Fri 08 Dec 2023 23:44:57 +0000
asID:                     213045
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:57:a7:45:57:99:c0:1a:4b:62:76:08:c4:99:99:c6:83:99:2c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 23:39:57 2022 GMT
            Not After : Dec  8 23:44:57 2023 GMT
        Subject: CN=DCE9CEAA0DDD0E2CA6ACB0181F57915A97C12BDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:30:9f:46:b1:ac:ec:f4:c8:00:13:ad:40:
                    cb:d8:d5:c3:9f:c9:f0:5d:f4:e6:e5:c6:fb:91:dc:
                    e4:95:13:70:11:4c:64:da:5c:8d:81:7d:d8:ce:fb:
                    d0:03:91:12:6e:13:6c:99:19:4c:e8:9a:dc:b7:f3:
                    08:a7:42:44:b5:da:ee:ce:06:0b:f8:12:f0:64:af:
                    df:26:b7:a7:aa:c1:dc:de:94:bd:3a:ee:3c:5e:8e:
                    4a:b7:f2:40:8e:85:f8:99:6f:b8:f6:69:10:6a:d2:
                    f3:0b:6a:f0:30:70:91:4e:18:09:40:2f:93:08:74:
                    9b:66:be:73:e8:37:6c:88:be:98:a9:82:8e:9b:33:
                    00:29:23:f4:cd:7a:67:42:27:a9:63:a9:0b:b6:cc:
                    ca:6c:4a:5b:c2:c6:19:3a:6e:ff:6d:74:05:40:8d:
                    ca:5d:33:b6:bc:5e:48:fe:01:2d:7a:c7:cb:93:34:
                    f9:10:27:ad:c5:bf:99:73:5d:eb:18:63:d1:81:26:
                    a2:ad:7d:4e:7b:ee:1a:e9:81:40:c8:a7:31:87:29:
                    42:f1:23:0b:f5:a3:ef:e0:ca:ba:86:b2:8b:6f:ec:
                    18:9a:87:9c:d9:27:43:41:d7:5d:3b:6b:9f:32:06:
                    da:d4:b8:50:e0:d4:5b:26:ab:2b:44:50:c2:b8:c8:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E9:CE:AA:0D:DD:0E:2C:A6:AC:B0:18:1F:57:91:5A:97:C1:2B:DC
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323133303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:88:85:77:9a:de:3d:e2:96:91:40:fb:9b:bf:f3:c5:d3:a3:
         d9:6b:68:59:c0:81:4b:4e:6d:ab:16:16:14:b7:68:cd:d5:0d:
         79:ed:b9:87:82:75:66:23:8d:10:06:3b:3d:e0:f8:05:99:1f:
         d7:f2:a8:0f:40:d2:72:48:0d:b8:c4:aa:1c:73:9b:61:6e:51:
         07:fc:5b:e8:7d:b7:18:12:2d:40:43:51:3e:af:39:ee:5a:ef:
         1c:0d:0a:cd:b6:dc:ab:0b:1f:47:0c:81:b5:1b:f2:59:10:c7:
         d6:72:f1:f8:0f:88:cb:56:04:42:fc:59:53:61:dd:83:1f:f0:
         a6:ec:c0:3c:83:6a:c1:0a:83:3b:01:b3:03:d9:6a:11:7a:95:
         9f:31:36:cb:89:9b:3a:ad:66:02:66:c8:f6:43:70:0e:6f:2a:
         35:5c:6a:ca:9d:ad:f1:65:67:ee:6c:26:70:d0:82:98:6a:8a:
         b8:ad:c0:3a:20:17:d8:af:63:c0:b3:8e:7a:aa:96:e5:a0:cb:
         d6:33:e4:bb:33:9d:d5:64:06:46:57:87:0d:31:df:7b:a9:c2:
         8c:36:07:29:32:a6:2e:d6:68:00:55:65:7d:6f:7c:90:10:97:
         03:4e:53:df:5e:42:89:3d:52:3c:18:93:31:71:b5:5b:d6:79:
         a4:88:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----