Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a363a3a2f34382d3438203d3e20323131333530.roa
File:                     326130373a353463343a363a3a2f34382d3438203d3e20323131333530.roa (raw, json)
Hash identifier:          gPKNGR/THGQrltPlNiYSaeorSKgyUTH8OUD2aKzg/w4=
Subject key identifier:   93:51:7C:26:A1:C1:4A:4D:88:9D:0A:2B:59:7E:8D:F1:3C:EB:50:8E
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       11F6CF286EC57DC2D6906B30AFE93C3D915AA640
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a363a3a2f34382d3438203d3e20323131333530.roa
Signing time:             Fri 09 Dec 2022 15:39:43 +0000
ROA not before:           Fri 09 Dec 2022 15:34:43 +0000
ROA not after:            Fri 08 Dec 2023 15:39:43 +0000
asID:                     211350
IP address blocks:        2a07:54c4:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:cf:28:6e:c5:7d:c2:d6:90:6b:30:af:e9:3c:3d:91:5a:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:43 2022 GMT
            Not After : Dec  8 15:39:43 2023 GMT
        Subject: CN=93517C26A1C14A4D889D0A2B597E8DF13CEB508E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:02:ad:ea:59:3b:cf:1f:c5:65:7b:76:74:
                    ea:fb:77:1b:48:e2:b5:20:d7:90:55:3d:0f:0b:9d:
                    34:c7:0f:5c:71:5d:e4:36:ba:75:19:82:3f:87:bc:
                    20:70:bf:45:fd:2c:09:80:53:ea:23:ec:c0:67:11:
                    7f:70:00:87:4e:64:de:b4:0c:70:99:25:b6:df:47:
                    96:00:e0:2c:b1:f0:0f:21:4a:e7:41:fb:41:0f:fe:
                    8c:b0:06:a9:34:57:68:80:d8:45:cf:29:9d:95:72:
                    68:5d:f5:4a:f7:7f:1b:48:19:91:10:42:b4:e5:54:
                    81:88:f4:ff:21:9f:9f:cb:9a:f9:5e:e7:e7:ec:c6:
                    65:02:41:00:e6:eb:87:3a:4f:98:1d:0b:ee:8c:4d:
                    cf:c5:30:36:1c:07:ab:a0:6e:53:eb:4e:24:5c:a4:
                    4b:fd:4d:31:f7:e8:75:2f:80:a7:89:6f:85:c6:7b:
                    75:61:52:8f:20:19:35:4a:9f:f1:dd:a5:27:5b:9d:
                    3f:eb:60:a5:43:74:d5:d5:7d:6f:13:cb:cf:e7:2b:
                    b5:26:8a:9f:6f:47:5d:d3:e0:a4:66:38:a3:fa:3b:
                    dc:57:bb:3e:d9:fa:87:b5:58:ce:fc:46:a8:6c:8f:
                    c6:1b:fe:73:97:5a:11:44:87:e7:b5:43:f0:9a:57:
                    26:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:51:7C:26:A1:C1:4A:4D:88:9D:0A:2B:59:7E:8D:F1:3C:EB:50:8E
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a363a3a2f34382d3438203d3e20323131333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:8e:51:30:1b:1a:5b:ec:bd:da:b0:aa:e8:90:67:a3:81:
         2d:b0:80:19:29:10:06:1f:ab:8c:57:1e:ba:78:d5:3f:bc:55:
         d9:42:f4:17:bc:3b:f1:0b:41:5c:51:54:72:4d:63:d8:da:52:
         35:47:a4:ea:ee:78:18:9d:67:dc:2a:a8:4c:f9:5e:19:53:7b:
         f0:d9:9a:39:05:6a:5b:89:b8:8d:ad:8a:16:bd:23:87:c3:45:
         7c:0e:e6:55:4c:26:64:3f:a3:0c:1d:76:49:28:65:36:8a:a1:
         60:49:b8:e7:52:b5:fe:56:89:2e:d0:79:73:b0:e7:3e:e0:c4:
         c6:e8:14:9b:cf:52:0e:87:b9:3a:b2:81:2b:55:6e:8d:5a:b4:
         a0:17:46:e1:bd:64:c5:eb:2b:86:1a:b7:5c:e5:af:0c:d2:3a:
         6b:0a:80:d7:05:f4:d8:2d:2d:25:03:4c:95:26:36:04:aa:ec:
         e2:c2:0b:6b:fe:e0:52:0b:ee:7d:86:62:41:07:04:2b:a1:82:
         96:e3:74:c8:91:dd:e3:8a:e6:21:5f:23:6e:ad:ae:6a:1c:66:
         a3:d7:ff:c1:f2:3e:ce:10:87:1a:25:5c:e6:74:8d:b8:e2:35:
         ff:97:b5:20:20:de:07:4d:fd:a5:fb:8d:81:db:30:5c:8f:70:
         4e:65:e1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----