Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS205848.roa
File:                     AS205848.roa (raw, json)
Hash identifier:          5KU99Eos8CFnEtycfdOCKOgqc/U4vUsNmCWzctSRM6k=
Subject key identifier:   CF:39:20:BE:18:D2:32:48:81:F7:3E:D1:A3:42:12:4A:A4:FA:A2:91
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       535D124C9F6EC938A1E60D4CC6D20856D2789AFD
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS205848.roa
Signing time:             Thu 23 Feb 2023 18:37:16 +0000
ROA not before:           Thu 23 Feb 2023 18:32:16 +0000
ROA not after:            Thu 22 Feb 2024 18:37:16 +0000
asID:                     205848
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5d:12:4c:9f:6e:c9:38:a1:e6:0d:4c:c6:d2:08:56:d2:78:9a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:16 2023 GMT
            Not After : Feb 22 18:37:16 2024 GMT
        Subject: CN=CF3920BE18D2324881F73ED1A342124AA4FAA291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:71:0c:ed:b3:e1:13:1f:62:37:7b:d6:90:
                    a5:29:d9:9d:f0:29:f9:ac:0d:f5:86:20:bd:cc:53:
                    45:7d:36:e2:04:27:57:0c:c3:a2:8a:56:54:62:81:
                    7b:26:4e:bc:bf:d4:4e:91:51:4b:66:d4:f4:bb:1b:
                    8c:53:62:7e:f0:7f:42:44:63:10:df:b0:06:c4:e6:
                    c4:27:78:ee:f9:68:a6:9e:db:0f:20:0b:67:54:87:
                    14:5f:fd:d0:c1:b7:a7:5a:21:f9:1d:e5:07:6e:21:
                    1f:e7:19:c0:59:1f:e8:16:27:af:26:89:fb:e2:16:
                    89:2f:8e:bc:a5:33:e5:de:d8:6d:11:2f:12:6d:a5:
                    07:57:d9:af:a8:c9:0d:15:35:bd:51:da:66:1f:d2:
                    6e:df:89:4c:ab:cb:89:59:5f:0f:4a:af:4e:7c:b2:
                    24:81:82:f5:24:18:37:42:0c:11:1c:f9:9a:28:38:
                    04:74:15:e1:f5:6f:53:fe:43:dc:a8:29:cc:f4:d4:
                    e3:82:a5:18:7c:b8:5a:cc:58:5d:95:ea:b0:3a:a9:
                    33:b8:18:eb:64:49:6b:1b:ab:67:24:d1:38:af:0c:
                    34:69:6b:e1:24:55:6a:fb:16:b9:d6:e6:4c:11:01:
                    f6:b8:d6:40:2d:e2:71:d8:2c:7c:74:11:39:b9:f2:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:39:20:BE:18:D2:32:48:81:F7:3E:D1:A3:42:12:4A:A4:FA:A2:91
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS205848.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:39:49:ce:cd:33:24:d6:5a:aa:01:1d:09:63:7b:51:3d:
         7a:ca:3d:f1:51:44:1f:24:83:38:ba:18:0c:06:8f:7c:7a:dc:
         c2:b9:b4:aa:c3:cd:75:59:cd:32:f7:af:01:91:16:17:88:d4:
         0d:7c:0b:fe:b3:29:46:3a:31:c2:a5:9a:2b:0b:d0:ec:81:61:
         1a:0f:6d:94:fc:74:5a:fb:47:4e:dd:7d:4b:41:5e:4f:0f:c4:
         0b:8e:1a:b5:5f:57:5d:6d:8c:07:82:ff:23:7a:9c:d0:4f:ed:
         91:01:55:41:dc:fa:e0:03:fa:ee:26:92:fd:e6:08:28:fe:63:
         23:89:90:cb:25:3b:8c:10:3f:72:d5:39:ab:90:44:4c:be:96:
         0e:16:d4:36:bf:55:1d:13:ae:ec:13:57:a3:f2:b5:32:4b:db:
         73:38:60:e4:01:06:ff:b0:63:87:9e:b2:ea:6f:a4:7b:6c:eb:
         6c:2e:94:8f:4b:71:07:fa:ce:e3:21:bc:33:46:39:bb:fb:c3:
         01:ca:ae:ea:ab:5d:f9:aa:1c:df:9d:04:5e:1f:b7:2b:36:b3:
         64:5b:ee:f5:dc:09:25:b3:c9:7e:af:63:23:63:14:6d:9f:f1:
         02:51:d5:b4:d5:87:96:33:86:eb:c7:20:f8:4f:5c:56:89:8a:
         01:bc:fc:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----