Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203635.roa
File:                     AS203635.roa (raw, json)
Hash identifier:          8OERovGaZKo/fm/MZEbVdgcYOAeMIpkEkmYQ7VreCT8=
Subject key identifier:   14:1D:66:43:91:30:78:FB:E6:9B:C8:04:1F:F2:19:13:5C:E3:27:6C
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       458DCFA8DCB2E528C0FDCEAFEAAE342996966956
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203635.roa
Signing time:             Thu 23 Feb 2023 18:37:28 +0000
ROA not before:           Thu 23 Feb 2023 18:32:28 +0000
ROA not after:            Thu 22 Feb 2024 18:37:28 +0000
asID:                     203635
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a07:54c4:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8d:cf:a8:dc:b2:e5:28:c0:fd:ce:af:ea:ae:34:29:96:96:69:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:28 2023 GMT
            Not After : Feb 22 18:37:28 2024 GMT
        Subject: CN=141D6643913078FBE69BC8041FF219135CE3276C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7b:fc:f9:55:d0:98:e4:26:3f:46:b3:79:c4:
                    61:38:0a:58:4b:8f:fc:22:d5:8e:cb:95:ff:d3:c9:
                    21:14:31:4a:81:05:a4:f7:3b:6a:11:1d:fe:b9:7b:
                    49:aa:f8:cd:a9:e3:75:31:40:72:6f:e3:86:0e:b9:
                    b6:cf:69:3c:37:6b:eb:4e:8a:43:a8:29:72:89:14:
                    65:ad:c5:f2:06:e3:14:75:b8:fc:36:e6:12:00:5b:
                    64:48:d7:57:e6:73:21:9d:f4:e9:75:07:14:e9:4b:
                    83:9e:55:5e:be:cc:1c:05:5a:b1:2d:b7:11:d0:c1:
                    57:3d:f4:57:9b:ad:21:92:91:d0:39:45:e8:1c:cb:
                    04:32:75:6d:f9:e8:3d:8b:0b:3c:36:5e:24:5a:a4:
                    e6:ef:fd:02:d6:a2:e8:91:fe:fb:5a:cd:f5:cc:1d:
                    5e:a8:d7:69:e6:2f:d7:17:9c:16:95:39:74:24:31:
                    b7:c7:0d:51:e0:ee:70:49:3c:e0:1f:c0:93:71:e2:
                    97:4d:a0:2f:49:68:ea:96:ee:0a:c6:d5:3c:e5:b5:
                    bc:7c:e3:a5:22:23:5d:f6:22:ad:8e:82:25:5a:d7:
                    a5:8d:cb:76:e1:4c:83:a9:e0:ef:54:d4:93:28:a6:
                    75:5c:03:42:a4:88:b4:b6:1d:e5:82:7e:f8:19:18:
                    43:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1D:66:43:91:30:78:FB:E6:9B:C8:04:1F:F2:19:13:5C:E3:27:6C
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48
                  2a07:54c4:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:9f:72:00:49:14:60:15:1a:ed:10:00:ba:48:26:cc:6f:
         f8:84:d1:4e:94:25:65:73:2a:0c:3e:52:98:23:ba:7f:c7:e6:
         d0:10:23:d8:a0:bd:70:31:3e:8a:bc:75:c3:c6:3b:42:ce:cf:
         63:56:db:4f:91:c1:36:2a:b4:66:37:ea:63:2a:9b:e0:68:c5:
         c3:f0:c0:23:c6:4c:db:95:51:f1:28:73:7b:55:96:9c:97:1c:
         28:de:a0:0f:d8:df:82:c8:02:37:a8:fc:87:65:0a:80:84:4f:
         33:c8:8a:a9:a7:cb:13:d2:94:23:00:bc:27:d5:40:cf:7a:d0:
         b3:47:da:4a:ad:1f:41:c9:9a:5c:ee:56:ab:15:86:a6:66:84:
         c3:74:29:a1:98:be:fd:dc:ab:08:94:14:58:eb:80:59:7a:6b:
         b3:dc:fb:c8:4b:2c:94:c6:9b:78:f5:28:3b:d8:8f:cc:26:b3:
         64:c2:80:dd:3f:7b:6d:24:55:14:61:b1:0d:af:fd:6b:f0:3e:
         88:bd:9e:38:0b:98:c9:ff:f1:11:dc:28:09:84:5f:c0:6b:91:
         07:a3:9e:f4:9e:b6:75:27:de:c8:90:28:13:82:f8:51:cf:0d:
         17:66:8b:01:3e:db:ca:ae:af:af:5e:d8:19:37:1f:00:70:8d:
         b3:1c:09:54
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIURY3PqNyy5SjA/c6v6q40KZaWaVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMzAyMjMxODMyMjhaFw0yNDAyMjIxODM3MjhaMDMxMTAvBgNV
BAMTKDE0MUQ2NjQzOTEzMDc4RkJFNjlCQzgwNDFGRjIxOTEzNUNFMzI3NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQe/z5VdCY5CY/RrN5xGE4ClhL
j/wi1Y7Llf/TySEUMUqBBaT3O2oRHf65e0mq+M2p43UxQHJv44YOubbPaTw3a+tO
ikOoKXKJFGWtxfIG4xR1uPw25hIAW2RI11fmcyGd9Ol1BxTpS4OeVV6+zBwFWrEt
txHQwVc99FebrSGSkdA5RegcywQydW356D2LCzw2XiRapObv/QLWouiR/vtazfXM
HV6o12nmL9cXnBaVOXQkMbfHDVHg7nBJPOAfwJNx4pdNoC9JaOqW7grG1Tzltbx8
46UiI132Iq2OgiVa16WNy3bhTIOp4O9U1JMopnVcA0KkiLS2HeWCfvgZGEMRAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUFB1mQ5EwePvmm8gEH/IZE1zjJ2wwHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChlty
c3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0Y2
QzA2OUIxNEJBOTdBQzYxNDE4Mzc0OTU2NjhBRTZDODczRkRGRkUuY2VyMGAGCCsG
AQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3Qu
Y29tL3JlcG8vTk9SVEhMQVlFUl9VSURfMTM4NjQvMC9BUzIwMzYzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIw
EgMHACoHVMKwCwMHACoHVMQAAzANBgkqhkiG9w0BAQsFAAOCAQEANXufcgBJFGAV
Gu0QALpIJsxv+ITRTpQlZXMqDD5SmCO6f8fm0BAj2KC9cDE+irx1w8Y7Qs7PY1bb
T5HBNiq0ZjfqYyqb4GjFw/DAI8ZM25VR8Shze1WWnJccKN6gD9jfgsgCN6j8h2UK
gIRPM8iKqafLE9KUIwC8J9VAz3rQs0faSq0fQcmaXO5WqxWGpmaEw3QpoZi+/dyr
CJQUWOuAWXprs9z7yEsslMabePUoO9iPzCazZMKA3T97bSRVFGGxDa/9a/A+iL2e
OAuYyf/xEdwoCYRfwGuRB6Oe9J62dSfeyJAoE4L4Uc8NF2aLAT7byq6vr17YGTcf
AHCNsxwJVA==
-----END CERTIFICATE-----