Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a313734623a3a2f34382d3438203d3e203532323130.roa
File:                     326130373a353463343a313734623a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          vv94xTgXRgOmbEJs22aIuGk0osEcXURNVk7T0o98O2U=
Subject key identifier:   C3:F7:A3:CE:13:74:61:3E:EB:8C:B2:6D:36:14:59:A5:B6:C1:32:99
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       6C5040B91E93E7D60FD52EBF1D41FE2082351FA0
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a313734623a3a2f34382d3438203d3e203532323130.roa
Signing time:             Tue 21 Feb 2023 00:26:27 +0000
ROA not before:           Tue 21 Feb 2023 00:21:27 +0000
ROA not after:            Tue 20 Feb 2024 00:26:27 +0000
asID:                     52210
IP address blocks:        2a07:54c4:174b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:50:40:b9:1e:93:e7:d6:0f:d5:2e:bf:1d:41:fe:20:82:35:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 21 00:21:27 2023 GMT
            Not After : Feb 20 00:26:27 2024 GMT
        Subject: CN=C3F7A3CE1374613EEB8CB26D361459A5B6C13299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:ae:67:b8:51:8a:fe:3c:94:db:61:30:24:
                    17:8c:19:75:17:33:98:8e:a0:28:96:99:56:32:d7:
                    0e:fe:a3:fe:1b:31:b7:aa:0c:40:ee:66:06:19:96:
                    e1:59:a5:55:c0:16:6c:25:44:ba:6e:29:47:6c:a0:
                    c2:99:88:b5:95:b6:3c:a6:a1:8d:ea:60:99:10:fd:
                    22:eb:8f:16:7b:4d:07:32:f1:46:37:45:8e:f2:1d:
                    36:9d:76:bf:70:6b:7e:68:1c:9e:42:cc:99:60:1d:
                    96:f9:7a:d1:39:99:c4:1e:50:f3:29:54:5f:d2:18:
                    67:5d:b5:fe:06:23:82:ed:76:5b:85:9c:6f:e8:36:
                    1f:3f:84:91:37:1a:aa:2f:da:95:40:cb:67:4a:bc:
                    8b:e1:96:4a:da:a2:29:77:d2:a5:c1:fe:a8:09:fc:
                    07:de:ce:af:96:63:a3:0a:87:b8:e8:99:b5:f3:79:
                    2f:60:61:4e:28:23:00:52:6f:49:0c:96:61:b0:e8:
                    38:b4:36:b4:ee:5c:7c:aa:f5:18:cb:c8:b1:46:0b:
                    e9:17:53:90:25:76:44:3d:c1:57:f2:27:14:97:15:
                    3f:f3:62:ed:2f:c3:31:11:ca:95:a4:a0:b0:f9:ca:
                    b0:0b:33:be:25:ae:db:cb:d3:dc:aa:9b:e1:66:f7:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F7:A3:CE:13:74:61:3E:EB:8C:B2:6D:36:14:59:A5:B6:C1:32:99
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a313734623a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:174b::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:cb:fa:25:a4:97:6b:5f:78:0e:e5:17:fb:b0:17:fe:0d:67:
         3c:ef:69:05:94:dd:3f:94:6a:30:0d:a6:99:83:ff:f4:8f:b9:
         27:b2:cd:aa:9d:0f:2b:02:82:f3:28:bf:45:25:e5:d9:31:da:
         66:76:58:9f:73:c7:a2:e1:dd:f9:7c:74:8b:d1:07:62:13:3a:
         fa:88:6f:cb:e7:e3:47:9a:b7:92:57:01:8b:39:0b:82:88:af:
         01:dc:e2:06:9a:c1:3a:8f:bb:5b:f5:96:21:7d:91:d8:e9:0b:
         2d:06:3e:ef:a9:01:a5:bd:b1:b8:41:49:48:c0:6b:c2:f8:21:
         21:14:4d:b4:89:b2:1a:f9:42:1b:ed:c8:b6:92:b4:ee:87:7f:
         45:e2:ad:2b:0b:25:2c:36:6f:c8:29:ac:c2:92:20:6e:0d:36:
         82:a9:2d:71:da:5a:61:e9:c7:53:9c:2c:e1:07:1b:9d:18:8f:
         b5:44:27:20:b6:7f:f0:49:07:be:9d:9a:d4:8a:c2:e3:b2:96:
         1e:22:31:be:4c:68:0f:63:9f:66:7a:0d:f3:1c:a2:20:ec:49:
         ea:9a:6f:f2:da:fe:13:68:53:cf:c1:09:0d:67:e0:68:b3:0c:
         ce:b4:ca:f1:2e:79:00:24:16:58:5d:6c:e8:b6:2c:f9:ab:b4:
         bd:28:53:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----