Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS201242.roa
File:                     AS201242.roa (raw, json)
Hash identifier:          rZUj0EQAEUbGnJ2XDefS5s9xyi8SiEjXtHd4BAybhcc=
Subject key identifier:   A6:4C:B8:07:F9:0F:BE:13:94:8F:24:C8:AE:75:20:47:27:3A:55:13
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       6F9CDAD2D86CE5611D73A2E3FA75E3F596BF0C97
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS201242.roa
Signing time:             Thu 23 Feb 2023 18:37:23 +0000
ROA not before:           Thu 23 Feb 2023 18:32:23 +0000
ROA not after:            Thu 22 Feb 2024 18:37:23 +0000
asID:                     201242
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9c:da:d2:d8:6c:e5:61:1d:73:a2:e3:fa:75:e3:f5:96:bf:0c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:23 2023 GMT
            Not After : Feb 22 18:37:23 2024 GMT
        Subject: CN=A64CB807F90FBE13948F24C8AE752047273A5513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:13:a7:cf:4f:5c:1c:88:62:61:b9:0d:f9:
                    ea:f9:23:e9:d7:cd:ee:49:6d:b2:2d:72:49:50:96:
                    72:17:0d:a8:2a:1e:1f:69:ee:d6:7b:7a:55:98:1c:
                    d8:79:52:27:f0:f8:28:0d:b8:87:96:33:d1:37:ff:
                    f5:c5:fd:e2:c9:d8:26:9a:3b:23:37:fc:e4:5d:10:
                    c2:82:33:74:59:4a:a9:40:b6:59:4d:a3:92:6d:3c:
                    fa:8c:dd:73:cb:44:4d:90:91:92:b6:54:ea:a7:1a:
                    0f:37:e8:9b:a4:dc:30:d3:68:7d:a1:15:93:ca:bf:
                    7a:a3:cf:4d:ed:03:63:4e:92:69:ad:ff:78:47:79:
                    69:13:8f:eb:23:47:91:b2:cb:5b:04:ba:fd:b4:c8:
                    ce:fd:27:24:32:c1:1b:4a:b3:87:e5:b2:ec:47:51:
                    20:11:91:82:51:ec:a5:80:70:b6:7e:9e:2b:86:65:
                    bb:6e:32:c9:26:b7:fa:d4:b2:0b:c2:a7:2c:ba:8d:
                    af:c9:8c:81:df:0d:10:64:4e:d8:c5:fb:ad:47:e1:
                    8e:b0:7b:7a:6d:1b:e7:c4:63:10:ac:6e:b1:54:4b:
                    ac:4d:d4:af:48:bd:da:34:dd:ab:ae:6b:68:89:66:
                    ce:04:ad:26:4b:47:c4:7f:7e:89:3f:2c:0d:a4:e9:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4C:B8:07:F9:0F:BE:13:94:8F:24:C8:AE:75:20:47:27:3A:55:13
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS201242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         d6:28:61:e6:b2:ce:ca:31:7d:f1:d4:7e:19:1e:1c:e8:ca:88:
         0b:45:a6:8d:eb:97:22:85:5f:58:4e:07:b6:6b:21:90:33:dc:
         19:74:f2:be:71:64:00:07:12:5c:56:f0:4a:54:b4:fa:c1:a4:
         47:b1:69:d1:8f:89:0b:b5:fd:b9:32:03:e6:b9:a8:4c:a1:15:
         ab:10:eb:4e:cb:30:62:fc:56:61:2d:32:5c:3b:8a:80:6b:1c:
         fe:af:26:7f:25:62:7b:66:77:3b:a0:aa:4e:c1:cf:30:0a:e5:
         13:bb:2b:35:bc:2e:a7:9b:07:a9:11:6e:ad:92:5c:2a:17:b5:
         11:81:29:e7:4b:46:35:c9:b1:52:be:28:67:3f:95:53:cf:41:
         58:84:d8:5c:b8:ac:14:06:5e:9f:13:a5:74:82:86:0f:27:87:
         56:46:10:fc:c0:d3:7b:3b:15:ad:d4:b1:66:f4:b5:11:cc:47:
         8f:c5:9d:c2:60:68:1f:fe:b7:c7:92:49:07:df:90:46:33:72:
         f4:49:dd:d2:d0:8d:78:93:40:dc:e2:7b:33:67:64:d2:4d:6f:
         f5:9a:c8:3f:65:39:78:38:60:9b:0e:8a:c8:d9:c2:c3:f2:ef:
         16:9d:3c:8f:92:cd:5b:ba:a3:b3:0d:b9:77:67:50:13:bc:f8:
         66:c9:8f:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org