Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200975.roa
File:                     AS200975.roa (raw, json)
Hash identifier:          0d7DvrZTKyLPlc6Xu2oOP7DeynpI+I6pNmYf+hs9vEg=
Subject key identifier:   0F:82:17:7B:1C:37:20:28:D1:20:0E:0F:E5:EE:97:F8:6C:16:D3:68
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       52FA3C9DAC3FB9455C6C8D7A88272096EE76674D
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200975.roa
Signing time:             Thu 23 Feb 2023 18:37:26 +0000
ROA not before:           Thu 23 Feb 2023 18:32:26 +0000
ROA not after:            Thu 22 Feb 2024 18:37:26 +0000
asID:                     200975
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fa:3c:9d:ac:3f:b9:45:5c:6c:8d:7a:88:27:20:96:ee:76:67:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:26 2023 GMT
            Not After : Feb 22 18:37:26 2024 GMT
        Subject: CN=0F82177B1C372028D1200E0FE5EE97F86C16D368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:3e:12:ff:bc:ce:92:2e:9f:55:ae:78:bd:
                    e1:eb:68:b9:35:0b:85:9d:0f:e7:b6:23:25:0e:af:
                    cb:09:a0:45:7e:ca:a1:c9:b9:22:90:24:1d:ea:4e:
                    08:48:1f:1f:c4:2f:b8:d9:a8:4a:80:97:67:4b:83:
                    56:4a:1e:1c:17:c1:93:15:0e:a6:04:67:2e:f6:17:
                    d4:a4:a7:af:af:d3:1f:d2:09:47:7a:3f:dc:21:c3:
                    7a:21:04:32:72:c6:b0:35:f9:c8:b6:89:bb:a6:c8:
                    45:e0:bf:3a:eb:38:0f:6e:6d:12:ba:42:6c:9c:08:
                    32:74:e7:69:33:86:ec:80:76:02:e8:2c:87:7a:ae:
                    6f:99:35:99:44:97:9b:8f:d5:e1:38:26:4d:a0:ab:
                    8b:a9:08:0e:ed:0f:12:8c:bd:8f:9a:7a:db:65:19:
                    14:fd:4e:bb:de:a2:c4:db:2d:f1:24:cf:df:30:3b:
                    bf:b9:05:8c:4d:23:8e:80:01:5e:ef:eb:e1:f7:ae:
                    6c:0d:f2:14:2a:f3:21:69:e8:d9:2e:b5:0a:0d:f3:
                    a3:62:50:4d:02:39:4e:ab:0b:ca:e7:ac:dd:73:78:
                    f7:7d:8d:c5:51:b8:80:4e:83:47:73:90:2c:3e:4b:
                    3a:ca:e5:d6:3c:d8:57:77:cb:ad:af:2c:18:1c:83:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:82:17:7B:1C:37:20:28:D1:20:0E:0F:E5:EE:97:F8:6C:16:D3:68
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200975.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:df:3b:be:3a:d2:b8:39:be:4c:13:b2:1e:bf:b4:55:76:f3:
         b0:78:1c:0b:da:37:ad:34:e7:82:f8:fe:b7:46:67:c0:ba:a1:
         dc:b2:2d:a6:1e:3b:82:f9:f3:6e:37:bd:f4:e4:1c:90:5d:5e:
         d5:d8:b7:3e:af:69:cf:1d:ca:f7:67:00:14:72:2a:1d:ec:5a:
         5a:bb:ec:a2:f6:be:ce:0f:82:e1:a7:dd:02:ca:5c:ac:56:1e:
         6a:fd:e2:ae:b1:bf:cd:a4:e0:f5:6d:d9:fe:87:c9:2c:1e:6e:
         85:d8:d8:c0:f9:3e:49:50:49:82:28:02:61:95:fb:41:0e:dc:
         e4:82:ce:3a:b6:12:89:a6:05:e5:36:b0:38:b6:17:7b:ec:20:
         b7:51:99:18:75:26:2e:1a:15:70:25:3a:47:53:7c:4d:67:73:
         3d:dc:70:36:80:66:5b:79:c3:bf:75:55:03:fa:17:fc:bf:2b:
         7c:30:74:42:64:14:4f:aa:a9:92:68:d1:9a:4c:9f:26:29:97:
         df:cb:ee:c1:00:e2:09:a5:aa:66:5d:4d:d7:00:1f:2d:ad:34:
         f4:c4:34:e7:62:c1:2a:55:4c:d7:e1:d2:00:1a:55:f7:ef:58:
         70:2f:96:d5:8e:96:75:f6:26:4d:c2:af:b2:01:b1:5a:76:99:
         b0:ac:2a:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----