Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210645.roa
File:                     AS210645.roa (raw, json)
Hash identifier:          UlU/aOAax8iVCCBC4UpZ/c6JzygTvI1tYxvrWCUe4f8=
Subject key identifier:   CC:9F:19:0A:B6:93:EC:6C:08:A3:21:F6:69:80:DA:D0:71:76:6C:BA
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       504A3E39379E2CE8D0FDD50347B92652BB96B25E
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210645.roa
Signing time:             Thu 23 Feb 2023 18:37:32 +0000
ROA not before:           Thu 23 Feb 2023 18:32:32 +0000
ROA not after:            Thu 22 Feb 2024 18:37:32 +0000
asID:                     210645
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4a:3e:39:37:9e:2c:e8:d0:fd:d5:03:47:b9:26:52:bb:96:b2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:32 2023 GMT
            Not After : Feb 22 18:37:32 2024 GMT
        Subject: CN=CC9F190AB693EC6C08A321F66980DAD071766CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:d4:47:a6:dd:58:4e:ef:b4:d0:2c:ec:55:
                    da:13:3e:3d:0f:8b:0f:81:81:b2:8c:54:e3:00:e2:
                    1c:ad:72:d5:3b:8a:bb:57:2e:79:55:61:6a:28:5a:
                    0c:80:65:7f:2a:e4:9c:ea:17:f3:68:de:83:10:92:
                    85:3b:36:c7:01:6c:a4:30:09:e9:af:57:95:3e:6a:
                    dd:c0:00:58:a3:3c:f7:05:b7:62:cd:49:52:eb:77:
                    5a:d5:a7:af:e4:f4:17:d2:91:5e:1c:3d:53:74:96:
                    43:0e:7b:5f:64:3b:72:96:de:40:c3:93:9f:75:8c:
                    21:80:a0:38:e6:3d:f8:9f:32:9a:13:c2:86:20:99:
                    ab:f7:55:d6:66:13:f9:c6:f9:0c:a2:e0:a7:af:a5:
                    aa:49:ed:61:01:77:95:31:57:39:ff:8b:22:e7:92:
                    9f:0d:71:57:11:df:46:f9:7d:74:f1:e6:29:0e:b5:
                    86:79:c6:f9:8b:7b:81:83:02:7b:c6:7a:d6:6c:88:
                    f1:be:05:0e:3b:3b:70:07:ff:2d:5f:8e:76:df:75:
                    35:df:80:45:95:56:d1:2b:50:2d:16:ed:bf:df:8a:
                    ae:a1:e3:b6:0c:5e:91:18:11:89:43:9d:0d:61:c9:
                    56:87:b5:98:e4:f4:5e:37:42:bc:c1:31:ee:7b:4c:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9F:19:0A:B6:93:EC:6C:08:A3:21:F6:69:80:DA:D0:71:76:6C:BA
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210645.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:22:5a:2f:e9:bc:07:94:a1:fc:2a:be:1f:10:8c:33:23:cc:
         cd:68:47:6d:11:6a:28:25:76:fa:c2:1d:d7:f8:0b:30:70:d1:
         4c:b7:fa:1e:9b:03:e0:66:90:c7:84:5c:05:e1:d8:a6:5f:4c:
         78:f2:fe:67:3e:0d:f0:ea:62:b1:d1:4e:cf:ce:f4:d5:c9:6c:
         da:d8:32:e3:29:db:f5:98:02:cd:fa:57:1b:f8:ec:0e:55:62:
         c2:78:c1:ec:2f:df:ea:35:c6:f2:8b:e7:8c:9e:51:1a:4d:eb:
         1d:8b:6e:c3:3a:47:40:4c:42:00:32:46:5a:a3:f6:4b:c5:31:
         c4:3b:f8:17:6f:3b:61:11:c8:cb:78:60:a8:85:ac:6d:fe:81:
         b0:74:91:67:3f:aa:67:3a:6d:42:d8:98:bf:ee:95:cb:3b:48:
         d0:f4:b1:1a:f3:97:00:28:2a:12:14:81:d6:5f:b6:c9:49:4e:
         f9:81:21:5c:ad:03:3f:61:44:e3:42:77:c4:59:8e:74:38:60:
         59:33:54:46:60:6b:e1:26:31:12:02:de:33:6a:30:55:32:ba:
         57:81:cc:5f:7d:01:71:fb:c7:51:04:d0:f5:8d:95:db:5a:0f:
         2d:96:89:68:a5:e1:25:ef:b6:b9:98:5e:9e:d8:32:1d:fe:b8:
         44:92:42:c0
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUUEo+OTeeLOjQ/dUDR7kmUruWsl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMzAyMjMxODMyMzJaFw0yNDAyMjIxODM3MzJaMDMxMTAvBgNV
BAMTKENDOUYxOTBBQjY5M0VDNkMwOEEzMjFGNjY5ODBEQUQwNzE3NjZDQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrztRHpt1YTu+00CzsVdoTPj0P
iw+BgbKMVOMA4hytctU7irtXLnlVYWooWgyAZX8q5JzqF/No3oMQkoU7NscBbKQw
CemvV5U+at3AAFijPPcFt2LNSVLrd1rVp6/k9BfSkV4cPVN0lkMOe19kO3KW3kDD
k591jCGAoDjmPfifMpoTwoYgmav3VdZmE/nG+Qyi4KevpapJ7WEBd5UxVzn/iyLn
kp8NcVcR30b5fXTx5ikOtYZ5xvmLe4GDAnvGetZsiPG+BQ47O3AH/y1fjnbfdTXf
gEWVVtErUC0W7b/fiq6h47YMXpEYEYlDnQ1hyVaHtZjk9F43QrzBMe57TAI5AgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUzJ8ZCraT7GwIoyH2aYDa0HF2bLowHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChlty
c3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0Y2
QzA2OUIxNEJBOTdBQzYxNDE4Mzc0OTU2NjhBRTZDODczRkRGRkUuY2VyMGAGCCsG
AQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3Qu
Y29tL3JlcG8vTk9SVEhMQVlFUl9VSURfMTM4NjQvMC9BUzIxMDY0NS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoHVMKwCzANBgkqhkiG9w0BAQsFAAOCAQEAWCJaL+m8B5Sh/Cq+HxCMMyPM
zWhHbRFqKCV2+sId1/gLMHDRTLf6HpsD4GaQx4RcBeHYpl9MePL+Zz4N8OpisdFO
z8701cls2tgy4ynb9ZgCzfpXG/jsDlViwnjB7C/f6jXG8ovnjJ5RGk3rHYtuwzpH
QExCADJGWqP2S8UxxDv4F287YRHIy3hgqIWsbf6BsHSRZz+qZzptQtiYv+6VyztI
0PSxGvOXACgqEhSB1l+2yUlO+YEhXK0DP2FE40J3xFmOdDhgWTNURmBr4SYxEgLe
M2owVTK6V4HMX30BcfvHUQTQ9Y2V21oPLZaJaKXhJe+2uZhentgyHf64RJJCwA==
-----END CERTIFICATE-----