Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200952.roa
File:                     AS200952.roa (raw, json)
Hash identifier:          5+wzksbUW/fkJ+mWW0N765gkSPV2inhCbv/fFS5+9qM=
Subject key identifier:   76:75:6F:ED:35:3C:0E:62:13:1E:BC:43:65:F2:24:80:2A:93:44:05
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       7EF973207F75EF7E79CCF6AF04BA134A56F66553
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200952.roa
Signing time:             Thu 23 Feb 2023 18:37:31 +0000
ROA not before:           Thu 23 Feb 2023 18:32:31 +0000
ROA not after:            Thu 22 Feb 2024 18:37:31 +0000
asID:                     200952
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f9:73:20:7f:75:ef:7e:79:cc:f6:af:04:ba:13:4a:56:f6:65:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:31 2023 GMT
            Not After : Feb 22 18:37:31 2024 GMT
        Subject: CN=76756FED353C0E62131EBC4365F224802A934405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:54:36:55:48:72:67:4a:20:e4:ab:51:bb:31:
                    81:5a:38:33:21:81:84:d2:82:eb:74:2e:6a:05:c8:
                    59:46:97:80:37:f4:85:c2:e1:d3:c5:20:55:70:af:
                    95:b0:65:5b:97:ab:ec:85:9a:b6:90:19:a3:46:c8:
                    25:a0:53:20:0d:3b:41:a3:86:9b:f5:88:8c:a4:e3:
                    15:03:7b:f4:6b:a1:61:97:dc:0e:dc:66:0a:85:97:
                    d6:83:4a:3d:3c:d3:a6:c8:d5:2b:c8:23:61:73:71:
                    95:7d:fd:27:16:0a:cd:60:58:05:28:5e:10:3b:71:
                    6d:93:8e:09:b3:54:29:bd:d0:00:c1:4d:d2:08:b5:
                    f3:87:4e:ba:53:2a:fd:52:65:6c:08:bf:b0:20:2c:
                    6e:fd:70:05:86:a6:5c:47:97:7e:d9:4e:f1:c6:bc:
                    31:7a:3c:cd:37:6c:68:04:f9:be:44:68:89:e4:4e:
                    a1:eb:1c:ab:5c:cb:51:7b:03:25:37:4d:46:52:8a:
                    80:80:a9:7b:c1:68:43:49:0f:bf:37:6d:ba:8a:1c:
                    68:a6:37:c0:4a:6c:40:da:a7:01:ba:06:c2:fe:87:
                    92:8b:6f:c4:fd:fc:fd:6f:ec:26:11:7f:88:72:42:
                    2a:31:14:9e:44:2e:4b:bc:b2:b2:a8:fe:03:4d:e0:
                    96:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:75:6F:ED:35:3C:0E:62:13:1E:BC:43:65:F2:24:80:2A:93:44:05
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200952.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:a7:ce:38:aa:5e:50:b4:f0:7d:ee:6e:15:3f:5c:c1:5c:
         b3:23:bd:47:4e:17:cd:c4:0b:c7:db:90:ba:f6:76:e0:78:26:
         49:f3:a8:ec:7c:b4:86:26:5f:ce:3b:54:0f:ce:56:71:50:e3:
         e7:59:58:e3:88:4c:af:b6:21:c2:0c:60:e9:48:27:9b:aa:ac:
         d8:57:98:c8:97:b9:fd:8f:ad:7e:e7:1a:6e:b4:9c:2c:05:1b:
         75:4f:e8:93:50:c9:0a:23:10:90:af:95:a2:06:e1:4c:ac:b9:
         fd:c7:ef:37:b9:c1:df:58:25:69:6f:c4:09:8e:80:ac:a0:d8:
         a4:46:19:d8:84:72:2a:4e:36:40:77:30:f6:22:1b:54:55:bc:
         62:e8:ee:03:99:61:64:50:d5:c1:63:12:75:7b:c5:ed:89:d6:
         4a:aa:41:c2:c9:37:c2:48:6d:72:40:15:3b:3c:a0:73:fd:79:
         07:60:4d:b7:72:50:04:da:2b:00:28:69:e9:01:2e:c7:8e:4f:
         65:d0:af:65:0a:a9:73:09:e2:6c:27:a1:ea:3e:e1:a6:93:9f:
         e3:0d:07:0a:b5:96:d6:2b:bd:3d:19:a5:86:61:54:a3:c7:2b:
         36:73:0b:24:33:5a:d7:4d:7c:6a:10:85:f3:5b:bd:72:c2:a6:
         f9:9c:47:ed
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUfvlzIH917355zPavBLoTSlb2ZVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMzAyMjMxODMyMzFaFw0yNDAyMjIxODM3MzFaMDMxMTAvBgNV
BAMTKDc2NzU2RkVEMzUzQzBFNjIxMzFFQkM0MzY1RjIyNDgwMkE5MzQ0MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVDZVSHJnSiDkq1G7MYFaODMh
gYTSgut0LmoFyFlGl4A39IXC4dPFIFVwr5WwZVuXq+yFmraQGaNGyCWgUyANO0Gj
hpv1iIyk4xUDe/RroWGX3A7cZgqFl9aDSj0806bI1SvII2FzcZV9/ScWCs1gWAUo
XhA7cW2TjgmzVCm90ADBTdIItfOHTrpTKv1SZWwIv7AgLG79cAWGplxHl37ZTvHG
vDF6PM03bGgE+b5EaInkTqHrHKtcy1F7AyU3TUZSioCAqXvBaENJD783bbqKHGim
N8BKbEDapwG6BsL+h5KLb8T9/P1v7CYRf4hyQioxFJ5ELku8srKo/gNN4JY9AgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUdnVv7TU8DmITHrxDZfIkgCqTRAUwHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChlty
c3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0Y2
QzA2OUIxNEJBOTdBQzYxNDE4Mzc0OTU2NjhBRTZDODczRkRGRkUuY2VyMGAGCCsG
AQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3Qu
Y29tL3JlcG8vTk9SVEhMQVlFUl9VSURfMTM4NjQvMC9BUzIwMDk1Mi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoHVMKwCzANBgkqhkiG9w0BAQsFAAOCAQEAcA6nzjiqXlC08H3ubhU/XMFc
syO9R04XzcQLx9uQuvZ24HgmSfOo7Hy0hiZfzjtUD85WcVDj51lY44hMr7Yhwgxg
6Ugnm6qs2FeYyJe5/Y+tfucabrScLAUbdU/ok1DJCiMQkK+VogbhTKy5/cfvN7nB
31glaW/ECY6ArKDYpEYZ2IRyKk42QHcw9iIbVFW8YujuA5lhZFDVwWMSdXvF7YnW
SqpBwsk3wkhtckAVOzygc/15B2BNt3JQBNorAChp6QEux45PZdCvZQqpcwnibCeh
6j7hppOf4w0HCrWW1iu9PRmlhmFUo8crNnMLJDNa1018ahCF81u9csKm+ZxH7Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org