Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS212123.roa
File:                     AS212123.roa (raw, json)
Hash identifier:          HlnUY1Zu9k5eRJGDykYrupzmG3C+xIhDe+Jgy0v3s44=
Subject key identifier:   77:9A:1B:C0:85:74:7A:7A:C1:75:52:D9:EB:88:2C:DA:7D:32:69:27
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       6D0C2C1C00839DC60F5F8028BF7224548857F461
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS212123.roa
Signing time:             Thu 23 Feb 2023 18:37:12 +0000
ROA not before:           Thu 23 Feb 2023 18:32:12 +0000
ROA not after:            Thu 22 Feb 2024 18:37:12 +0000
asID:                     212123
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0c:2c:1c:00:83:9d:c6:0f:5f:80:28:bf:72:24:54:88:57:f4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:12 2023 GMT
            Not After : Feb 22 18:37:12 2024 GMT
        Subject: CN=779A1BC085747A7AC17552D9EB882CDA7D326927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:61:86:95:81:e1:d5:76:a9:7e:bf:0a:89:
                    31:73:19:1c:93:eb:d2:ea:49:fa:ea:29:39:bc:68:
                    3f:67:fe:4c:01:11:13:20:df:a0:a3:0f:67:da:35:
                    d0:44:8d:9e:8d:e5:13:a9:91:dd:cb:16:d7:b8:79:
                    f2:ad:67:b3:89:66:ca:cd:96:e4:32:b9:d4:ef:0c:
                    25:9b:48:13:c6:a1:3a:1e:53:38:b4:70:d1:af:e6:
                    83:35:ba:7e:ca:75:57:9c:15:9c:f9:90:41:b8:e5:
                    8d:6a:76:f9:00:dd:c8:6a:19:46:bf:31:07:25:f2:
                    8f:fc:10:c8:67:90:9b:48:b9:45:21:42:64:d3:2e:
                    9d:ec:ed:40:b2:ec:48:71:08:cc:01:f2:2d:b3:a9:
                    82:53:6c:1a:4f:17:3e:ff:ab:3c:b7:9c:9f:56:29:
                    3f:30:35:1e:7c:16:f9:a1:71:62:48:4c:ad:f4:ba:
                    32:37:38:c4:9c:04:2c:33:8c:56:f8:1f:0f:7a:b6:
                    aa:cb:be:65:76:8d:dd:2b:08:43:c1:86:37:91:f6:
                    00:da:b6:09:50:a4:29:9f:ba:b2:39:4d:db:02:44:
                    d6:34:1e:97:29:7e:63:81:3e:43:80:88:89:69:47:
                    d4:a7:ee:0e:4a:82:9f:4f:87:9d:8f:69:92:fd:14:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9A:1B:C0:85:74:7A:7A:C1:75:52:D9:EB:88:2C:DA:7D:32:69:27
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS212123.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:6c:b2:16:72:75:c5:e8:93:94:a7:1b:83:87:a6:ba:95:
         c9:06:c9:a1:27:de:9a:79:8d:46:4f:62:ec:82:a1:d3:2d:64:
         64:83:5d:d7:04:ec:47:e0:4d:91:15:28:f5:08:2e:14:d3:b1:
         6b:38:22:01:ae:19:34:5a:76:7f:25:fc:0f:89:16:1f:46:e9:
         fb:e1:69:12:7f:b6:50:cc:24:80:2d:91:fd:a7:f6:2b:df:2a:
         2b:5a:12:16:6e:f3:ca:d0:eb:7f:6d:51:90:f3:16:e9:11:d4:
         c2:0a:2c:5d:1a:44:19:16:44:bc:2d:07:93:1e:9f:c1:c2:6f:
         7d:34:15:31:f2:2c:9f:f3:23:78:49:6d:7d:b5:87:cc:79:49:
         5e:d9:ff:f0:ac:8f:ef:34:6a:0a:70:b4:b1:70:0f:cc:c7:b4:
         fb:89:59:a0:f1:1f:fd:8a:bd:21:d1:75:cc:e4:01:85:81:7f:
         d3:85:57:2c:f0:41:a3:0e:1c:3a:97:5f:05:68:2a:0d:2a:7a:
         44:1f:a6:22:da:9c:d0:77:1f:63:b9:61:ab:a5:21:b1:3b:7a:
         c2:7c:b3:60:3d:f1:34:88:47:4c:26:e1:da:47:de:96:a3:f0:
         47:bd:49:e1:80:fb:d5:c1:46:6f:70:94:fc:7e:c5:eb:1c:f2:
         9a:55:20:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----