Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203453.roa
File:                     AS203453.roa (raw, json)
Hash identifier:          ogtaMDimDhNmcbWgYmL+KbyZtGBXxXv4Z425+D1itYI=
Subject key identifier:   18:9B:06:87:E7:3F:19:67:2F:5D:99:A5:0A:6E:CE:B4:43:9A:F9:E1
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       52037B1C5C9CF3134F10CC3BBCB9DEA97B0EBE72
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203453.roa
Signing time:             Thu 23 Feb 2023 18:37:17 +0000
ROA not before:           Thu 23 Feb 2023 18:32:17 +0000
ROA not after:            Thu 22 Feb 2024 18:37:17 +0000
asID:                     203453
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:03:7b:1c:5c:9c:f3:13:4f:10:cc:3b:bc:b9:de:a9:7b:0e:be:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:17 2023 GMT
            Not After : Feb 22 18:37:17 2024 GMT
        Subject: CN=189B0687E73F19672F5D99A50A6ECEB4439AF9E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:1d:bc:4f:5b:52:d1:46:4a:e6:43:dd:8f:
                    4f:5d:c1:3c:9c:b8:30:76:8f:cc:5b:4f:36:2d:14:
                    27:f9:68:87:9f:49:b6:9b:44:34:2d:c8:c7:8b:f4:
                    8a:ac:85:ed:0e:1d:e1:b0:19:86:47:41:01:16:a3:
                    71:76:fa:cd:66:33:02:8f:b1:5d:69:12:3a:99:a3:
                    22:6f:9f:b1:2f:21:1e:0c:0e:f2:ff:db:dc:72:4d:
                    c2:b8:88:0e:4c:ad:4d:e5:90:50:d0:13:3f:e9:c1:
                    68:1e:05:54:2f:3d:d1:84:ee:1d:97:25:3a:28:a1:
                    f2:f2:7b:d6:e5:09:5c:5f:83:18:60:f4:98:3f:d6:
                    2b:71:9b:58:4d:48:ab:a4:6d:9a:ef:fa:1c:cf:8b:
                    3f:8d:8b:30:82:da:78:a5:b8:c4:82:e0:5f:76:9b:
                    b9:57:c6:67:33:ea:c5:b4:27:40:32:97:49:c0:f0:
                    92:ab:29:eb:37:bd:19:c5:ad:64:4c:77:9d:81:dc:
                    f2:4a:4e:27:c7:4d:1d:45:e9:34:fe:14:39:6a:1c:
                    46:ee:17:bc:e6:b8:f8:3f:d6:d8:7b:37:6c:4b:74:
                    66:a8:53:91:83:03:f3:9f:e7:c6:d1:80:57:c7:ac:
                    30:36:69:a8:c2:63:f6:66:9c:64:c0:86:e4:f4:72:
                    29:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9B:06:87:E7:3F:19:67:2F:5D:99:A5:0A:6E:CE:B4:43:9A:F9:E1
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203453.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:d7:79:f3:bc:96:07:a2:db:73:16:af:35:f2:67:a1:f8:d7:
         89:8b:e6:d2:4e:05:aa:fd:24:12:91:da:06:5a:43:f9:af:37:
         b6:d3:34:b3:9c:28:b0:b4:d5:f6:4b:95:d9:e9:94:c1:86:f4:
         bc:58:b2:89:2e:79:73:56:e4:e8:94:ec:ad:18:3c:ff:13:e1:
         a3:1e:68:ed:05:9c:c3:05:12:86:f5:f1:81:f3:71:2d:5b:5d:
         5b:0c:26:89:01:10:af:19:36:df:32:74:1e:b9:84:4f:79:e9:
         02:da:04:93:27:4a:00:15:46:57:69:3a:41:57:6e:ee:8c:da:
         63:0a:b7:d3:ec:7d:e5:57:c0:6e:77:2a:1c:01:0a:93:6e:6f:
         e9:ca:bc:a4:1a:06:b2:e8:6c:ba:85:3c:e2:ba:8f:6a:25:13:
         35:3a:c4:a9:db:91:85:29:59:61:12:80:d6:d5:f8:6e:d8:3f:
         ef:93:07:1e:85:55:b6:51:74:97:4a:09:3a:eb:85:79:1b:b5:
         38:4b:6d:4e:03:4a:30:49:80:8e:1b:2e:63:73:55:b8:6a:14:
         a4:8e:ff:68:f2:78:aa:df:f0:2f:31:18:7a:6e:c0:e6:b6:ce:
         37:e6:9d:66:24:ff:f7:55:0a:d5:54:88:1a:72:56:05:1b:e1:
         18:56:f6:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----