Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS211380.roa
File:                     AS211380.roa (raw, json)
Hash identifier:          gi2/roLQwmNQ5l8gpevZiagogRTFWrmtv61lW/4/mxw=
Subject key identifier:   AF:8A:57:74:31:FA:E0:D5:E2:45:FC:09:AB:32:93:EF:0A:F8:EE:03
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       506DCA96513BD881ABA84856B28B0F41A4C6F4F0
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS211380.roa
Signing time:             Thu 23 Feb 2023 18:37:27 +0000
ROA not before:           Thu 23 Feb 2023 18:32:27 +0000
ROA not after:            Thu 22 Feb 2024 18:37:27 +0000
asID:                     211380
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6d:ca:96:51:3b:d8:81:ab:a8:48:56:b2:8b:0f:41:a4:c6:f4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:27 2023 GMT
            Not After : Feb 22 18:37:27 2024 GMT
        Subject: CN=AF8A577431FAE0D5E245FC09AB3293EF0AF8EE03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:8a:14:38:27:1b:9b:f9:a1:db:1f:90:7f:
                    1a:8c:2b:be:1b:1b:2c:54:42:77:71:30:ae:6a:5d:
                    80:f6:e3:25:a2:72:19:b1:36:45:6f:60:d5:59:dc:
                    0e:75:a6:78:ea:4c:87:6d:db:7a:14:b0:f9:db:af:
                    4d:c0:4e:67:72:b7:cb:c2:90:0c:1f:26:d8:c9:84:
                    23:6a:7c:90:f1:80:75:16:e1:3a:68:6f:68:78:ab:
                    77:63:a0:ba:ab:28:22:09:ee:aa:ae:59:1a:9e:af:
                    00:fa:39:e3:4d:97:93:ed:7b:0b:7d:66:da:0e:dd:
                    fb:af:92:46:a4:ae:44:6e:eb:d7:09:d0:68:c9:f0:
                    de:2b:61:06:56:ca:50:bd:22:99:36:03:c6:66:93:
                    99:12:ee:52:72:99:d3:17:9a:6c:79:ed:fb:86:3e:
                    a8:e5:78:40:59:dd:3e:8f:10:09:4a:4e:71:1e:c7:
                    9d:2d:54:67:0f:f8:87:df:fe:8b:25:24:30:c5:bc:
                    d2:0b:2f:4f:2b:0c:4a:85:51:cd:43:82:95:58:dc:
                    e9:f5:9a:c2:54:5f:b8:d3:ff:c9:b7:d9:fb:9f:1e:
                    50:93:b2:32:81:58:d2:d9:99:ea:e2:ca:8d:3e:45:
                    09:28:f7:1d:71:9a:1c:09:5e:3d:7c:f1:45:b1:58:
                    85:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8A:57:74:31:FA:E0:D5:E2:45:FC:09:AB:32:93:EF:0A:F8:EE:03
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS211380.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:42:8f:a9:49:1e:1c:95:26:8b:e9:27:db:04:19:d5:11:93:
         98:2e:19:98:f4:c7:06:36:f6:7e:53:e8:6b:ff:32:33:ba:07:
         a7:51:d5:c2:e3:92:44:9e:3a:4a:ff:45:3a:f7:5f:3a:43:2f:
         b6:c9:3c:6a:47:6f:6d:e4:3c:36:7e:34:c4:5b:b7:62:b9:32:
         8b:79:fb:e4:d5:df:28:60:4f:06:ff:28:45:54:f9:e5:64:e5:
         c7:68:70:7c:a7:ba:6b:f4:cb:d0:d8:ca:71:26:19:c8:ec:2e:
         52:b1:ad:8a:02:7f:14:6a:77:c8:56:51:1b:ca:eb:9b:36:da:
         cd:6f:73:71:d0:6e:ac:a3:e3:c5:46:c7:24:fb:37:1f:86:37:
         6d:23:81:6e:e4:79:04:ab:09:b0:26:44:d5:90:3d:34:fc:07:
         67:d5:7c:b3:28:8f:66:42:9c:6f:d0:4b:b8:46:cd:fb:fa:6e:
         a5:41:19:d8:41:4b:2b:71:a1:c7:8b:8b:fb:0d:cd:6f:4c:be:
         b4:da:23:c7:60:bf:38:0f:52:f9:61:eb:69:25:48:31:0b:82:
         bb:20:59:fe:cb:ea:73:36:d1:40:94:4b:e1:e3:c2:77:eb:a8:
         a4:f9:40:47:0c:ec:cb:28:6e:f4:c7:b5:52:3a:05:bf:09:66:
         67:19:2a:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----