Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a383a3a2f34382d3438203d3e20323037353938.roa
File:                     326130373a353463343a383a3a2f34382d3438203d3e20323037353938.roa (raw, json)
Hash identifier:          /wVzCONlXAeY7BSQIE5pSybMDyiCsZXv63VI7LMuY/s=
Subject key identifier:   73:0E:9B:8E:2A:B5:31:A1:8B:3D:71:DF:ED:B8:EA:0F:C4:45:51:DF
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       2D385D92DC1939EB2344F316E3030E663E9A6786
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a383a3a2f34382d3438203d3e20323037353938.roa
Signing time:             Fri 09 Dec 2022 15:39:38 +0000
ROA not before:           Fri 09 Dec 2022 15:34:38 +0000
ROA not after:            Fri 08 Dec 2023 15:39:38 +0000
asID:                     207598
IP address blocks:        2a07:54c4:8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:38:5d:92:dc:19:39:eb:23:44:f3:16:e3:03:0e:66:3e:9a:67:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:38 2022 GMT
            Not After : Dec  8 15:39:38 2023 GMT
        Subject: CN=730E9B8E2AB531A18B3D71DFEDB8EA0FC44551DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:5f:6f:b8:7c:f4:cd:7c:85:18:83:11:c0:
                    d3:cf:f5:b5:ca:3f:7b:d3:7c:d0:73:4e:40:30:47:
                    4f:6b:3e:66:c5:a2:4c:64:2f:10:b9:ab:93:72:d0:
                    5b:90:04:e4:11:13:2f:9e:74:bf:1b:77:36:ec:22:
                    c0:c8:72:bf:92:9b:68:4e:83:ec:5d:80:37:62:71:
                    ac:ac:b7:8e:57:0a:e1:e5:d7:78:84:04:37:64:66:
                    4e:6c:d6:b4:47:5a:df:3a:bf:62:2c:15:7b:ba:20:
                    04:6f:f8:ba:34:cc:b3:a9:5e:60:20:73:bb:ea:69:
                    c9:59:d4:b5:ab:d9:ae:8d:19:24:af:76:c9:1b:74:
                    ff:d0:ac:77:e0:51:2a:2e:71:22:83:ff:5d:05:92:
                    5f:d1:d4:d5:9d:6f:e5:1c:a8:79:4d:33:68:3c:dc:
                    8a:31:e1:42:3c:42:a7:01:9a:4a:0d:8d:21:c9:b8:
                    27:08:67:c4:cd:b6:25:af:c5:9d:28:82:fd:8c:c8:
                    01:3e:07:78:f6:62:fd:d5:4a:be:e4:2a:7c:2e:57:
                    18:1d:08:63:3f:1b:a2:81:d5:1f:90:61:69:49:f8:
                    58:6f:e0:6b:ec:1d:bd:4c:7b:76:ba:84:4c:0b:d2:
                    6e:bd:ad:1d:e7:d8:12:8b:9b:0f:3a:87:a6:2a:00:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0E:9B:8E:2A:B5:31:A1:8B:3D:71:DF:ED:B8:EA:0F:C4:45:51:DF
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a383a3a2f34382d3438203d3e20323037353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:a8:2c:05:bb:55:28:a1:35:0e:f1:64:b4:7e:07:8b:54:
         16:22:5d:cb:61:39:55:a6:8f:83:a1:98:7b:42:c1:56:68:74:
         84:0b:08:77:53:49:9f:56:1f:60:d4:8f:bb:36:53:fd:3b:56:
         44:73:0c:c6:f7:68:5f:98:50:e0:bb:10:74:e9:6c:77:e7:e9:
         d7:f9:62:b9:7e:58:6d:ef:31:50:90:89:ba:51:0a:8b:53:b5:
         66:88:be:62:3c:5c:2b:7f:54:24:b0:c3:b0:15:26:d0:77:2b:
         75:50:50:d2:11:fa:f1:83:a0:1e:50:b5:f7:01:69:b4:b1:c0:
         6c:91:9e:57:d4:33:98:5c:eb:c8:e6:6d:d4:d8:22:de:54:2c:
         5f:4e:3f:3c:60:b1:e6:07:62:77:64:f7:62:75:9e:10:4d:19:
         09:d0:79:3a:a7:7c:97:58:b3:9f:5a:7f:48:68:d7:50:82:55:
         24:b5:a5:73:d3:35:f2:51:f6:d6:f2:93:f9:76:cc:37:ac:96:
         6c:4c:cb:99:21:e3:b0:3e:58:f7:c1:aa:e1:6e:f8:3c:86:e3:
         c1:55:e5:5d:81:65:10:43:aa:b7:34:ef:c5:83:39:36:6b:1b:
         0a:9d:ae:70:99:84:d4:ac:1e:26:18:05:c6:c2:a2:f6:97:62:
         56:bc:49:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----