Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204508.roa
File:                     AS204508.roa (raw, json)
Hash identifier:          CXNLECbh9oBTfVYvtcZ2tyXfhmKieW8UXWIJgIEqC3c=
Subject key identifier:   56:9D:82:89:19:27:99:4C:8F:AD:12:57:B6:AE:3A:0C:D9:BE:F2:F9
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       37257275C3F6E7C1F407C242648478140D9A0659
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204508.roa
Signing time:             Thu 23 Feb 2023 18:37:11 +0000
ROA not before:           Thu 23 Feb 2023 18:32:11 +0000
ROA not after:            Thu 22 Feb 2024 18:37:11 +0000
asID:                     204508
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:25:72:75:c3:f6:e7:c1:f4:07:c2:42:64:84:78:14:0d:9a:06:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:11 2023 GMT
            Not After : Feb 22 18:37:11 2024 GMT
        Subject: CN=569D82891927994C8FAD1257B6AE3A0CD9BEF2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6f:af:94:e7:f2:74:38:8e:53:19:d6:70:74:
                    31:dc:f7:55:50:69:5c:b1:64:b1:26:32:83:33:52:
                    ec:71:0e:82:c1:0d:bc:49:9a:63:dc:af:cc:46:89:
                    89:ca:96:b4:15:8e:c7:48:50:02:60:cd:58:53:d4:
                    08:c5:96:41:80:65:60:dd:92:44:75:9c:32:60:96:
                    5c:8c:83:29:6d:49:d8:e3:37:1b:d6:d4:42:dd:eb:
                    32:36:8e:00:a9:22:06:a6:04:24:d8:c0:49:fb:05:
                    53:75:5d:6b:ce:fb:bc:4a:9b:a2:49:b1:ff:33:9b:
                    d0:10:72:3e:74:ad:12:36:23:93:cc:0e:56:fa:77:
                    c9:bc:af:90:88:d0:29:3a:2c:f6:49:68:62:a7:62:
                    32:fa:76:7b:25:39:da:dc:a7:18:31:41:e2:4a:ff:
                    d1:eb:1e:61:ed:c9:c3:9e:58:18:a3:43:93:b6:22:
                    92:d4:d3:ac:ec:1e:b9:ac:88:52:0d:41:4a:b1:4d:
                    91:54:fd:c9:b1:cb:ef:2c:c4:82:ca:f5:fe:7f:b9:
                    b4:d9:d4:ef:d3:05:1a:6d:62:c7:95:e8:cd:13:ae:
                    bd:c7:10:29:59:33:49:27:fb:3f:27:6a:8c:0c:6e:
                    dc:9d:70:3b:6b:af:c4:90:f0:a2:c0:fb:5d:46:dd:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9D:82:89:19:27:99:4C:8F:AD:12:57:B6:AE:3A:0C:D9:BE:F2:F9
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204508.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:de:6c:41:f8:1a:a9:96:43:f7:fa:d8:fc:e4:86:93:74:8e:
         25:0f:2a:07:43:b2:ef:5b:1a:81:b9:69:1d:c3:65:39:68:3e:
         6d:13:f5:7e:10:ca:04:8e:c3:5d:bc:d1:7f:dd:63:2d:45:a3:
         fa:16:3e:cc:24:09:81:a5:5c:a7:85:1c:f3:0a:46:20:c9:e5:
         30:37:46:78:b9:b0:3f:da:53:00:af:00:65:ea:b1:8d:0e:70:
         9f:58:1e:4d:ad:0e:7a:19:d9:d7:03:bc:36:90:42:dc:23:01:
         a4:18:37:83:18:1d:54:a6:ad:60:aa:e8:d2:63:93:ed:5e:d2:
         b1:7b:f0:2a:4f:25:58:5d:5a:50:89:e4:a3:68:33:d7:ef:94:
         89:45:71:11:b7:83:d5:f7:4c:b3:24:8c:25:c2:35:88:57:0a:
         36:5f:a0:7d:f7:0e:10:9a:97:06:a9:27:47:97:bc:01:9b:c0:
         0b:a4:7a:30:0d:3b:a4:f9:a5:d6:dd:68:a8:80:a3:e0:bf:55:
         e5:a5:9a:6f:92:9f:cc:b5:4c:f3:5a:a9:13:72:26:a9:4a:ff:
         1c:e1:3f:ce:64:49:75:55:ba:60:99:39:66:4b:dc:73:ab:24:
         09:a2:99:87:4d:2d:9a:4f:dd:48:31:f2:2f:58:c9:b6:53:79:
         99:af:be:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----