Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a313735303a3a2f34382d3438203d3e20323131353632.roa
File:                     326130373a353463343a313735303a3a2f34382d3438203d3e20323131353632.roa (raw, json)
Hash identifier:          TY8vIdVb9u5vAnBmm982r6p/uxtSJr4Rxc6/fxNz99A=
Subject key identifier:   4C:60:1A:55:CF:8B:CF:ED:9F:D6:94:B7:AC:7E:FB:11:41:84:0D:BB
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       10D72201605CED4965CB84EA33DD09206A1CAC2F
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a313735303a3a2f34382d3438203d3e20323131353632.roa
Signing time:             Wed 22 Feb 2023 00:58:03 +0000
ROA not before:           Wed 22 Feb 2023 00:53:03 +0000
ROA not after:            Wed 21 Feb 2024 00:58:03 +0000
asID:                     211562
IP address blocks:        2a07:54c4:1750::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d7:22:01:60:5c:ed:49:65:cb:84:ea:33:dd:09:20:6a:1c:ac:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 22 00:53:03 2023 GMT
            Not After : Feb 21 00:58:03 2024 GMT
        Subject: CN=4C601A55CF8BCFED9FD694B7AC7EFB1141840DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:73:ce:b5:c1:bd:cf:bd:14:0c:52:7a:b4:
                    3a:2e:45:e5:5e:03:7c:d7:1f:ee:a6:fc:5e:aa:f7:
                    2a:64:d5:dd:85:87:37:3e:9f:d2:2a:78:df:4a:7d:
                    85:5b:3b:57:0a:0f:e8:7b:f9:25:b5:f6:a4:70:30:
                    84:c2:c0:c7:00:d6:49:0b:9a:7b:4c:28:6c:8a:db:
                    42:c7:ae:6c:a4:3a:6f:67:84:f4:28:12:c9:c8:52:
                    a7:cc:a7:3b:f1:47:12:13:7f:07:41:01:10:0c:5b:
                    98:a0:0b:66:d2:7c:84:6a:83:da:d8:89:a0:e9:61:
                    2c:90:84:93:9f:fd:76:63:81:a1:0a:c5:2c:2e:53:
                    22:e0:8b:f1:82:53:72:64:74:d9:16:8d:eb:0e:42:
                    0a:32:e8:12:44:22:ae:df:a8:55:f3:ce:ab:d6:b0:
                    73:db:7d:fb:4c:87:9a:30:91:7d:fb:54:61:23:8e:
                    f5:8a:67:bb:37:35:59:10:ab:d5:67:80:2c:0a:99:
                    db:54:48:ba:9e:bd:19:e4:23:3f:83:29:2f:66:e2:
                    07:e3:ae:44:1e:58:07:76:54:12:37:92:1b:1d:a8:
                    ba:f9:ef:11:ce:34:1d:56:a8:fa:5a:f6:e0:67:27:
                    75:3c:45:e5:e1:50:2a:7a:96:b0:2a:dd:d8:60:87:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:60:1A:55:CF:8B:CF:ED:9F:D6:94:B7:AC:7E:FB:11:41:84:0D:BB
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a313735303a3a2f34382d3438203d3e20323131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:1750::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:4c:7b:4c:26:64:bc:d2:97:d0:11:52:81:c8:bf:a6:cf:
         19:ce:ff:39:c8:19:c8:41:3a:20:9c:42:b5:56:38:f7:0e:08:
         09:79:45:51:0d:18:b4:2b:12:75:00:2d:c2:0a:69:a0:7e:de:
         84:18:2c:0b:8b:d5:dd:21:0c:ac:0a:e0:83:19:cc:8f:df:28:
         63:9a:32:7a:84:74:39:13:12:b7:64:9b:1a:7f:c5:9f:81:f2:
         6e:68:57:28:ea:9d:da:3e:0d:a3:ba:4a:f7:98:8f:48:10:81:
         cc:e9:4b:9d:86:21:44:fb:d9:49:1d:cd:71:c8:b7:b2:a4:1d:
         62:02:47:3d:89:ce:f2:de:fa:23:77:70:a0:a9:56:4b:27:6b:
         c3:1a:d6:e0:eb:a7:42:3c:47:06:63:13:69:94:9c:e3:8a:df:
         1e:c1:56:94:94:33:d6:8d:7b:0b:84:61:d1:7e:a0:0f:b5:41:
         43:cf:9f:b2:bf:ae:f3:96:42:fc:49:d2:9b:6b:0e:bf:e9:f9:
         5e:08:48:32:bc:c0:f9:31:f9:ae:7d:d4:5f:72:80:dc:d2:71:
         66:91:db:72:38:ff:57:a2:96:ec:2a:2e:8f:14:a5:e1:f2:8a:
         80:8b:c4:77:d4:b8:00:67:e9:3f:d7:11:e9:1e:2c:3a:05:d7:
         10:28:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----