Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS212294.roa
File:                     AS212294.roa (raw, json)
Hash identifier:          lOOUclijzadkLlNYX/INlPWwC/ni8cFgNZY1I5vwU3I=
Subject key identifier:   C3:A0:46:D5:67:EA:A4:17:82:28:D9:8F:6C:DB:42:93:25:3A:78:FB
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       123C582D750530949FB579C7A71C91AFA8B50256
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS212294.roa
Signing time:             Thu 23 Feb 2023 18:37:25 +0000
ROA not before:           Thu 23 Feb 2023 18:32:25 +0000
ROA not after:            Thu 22 Feb 2024 18:37:25 +0000
asID:                     212294
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3c:58:2d:75:05:30:94:9f:b5:79:c7:a7:1c:91:af:a8:b5:02:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:25 2023 GMT
            Not After : Feb 22 18:37:25 2024 GMT
        Subject: CN=C3A046D567EAA4178228D98F6CDB4293253A78FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:9d:c6:8d:e8:0b:47:93:d3:1d:d5:62:97:
                    8c:60:fb:b6:72:5d:58:ee:cb:79:e6:64:f6:94:0d:
                    dd:4d:fd:66:d4:81:20:a3:1f:c6:f3:52:03:4e:57:
                    5d:ae:6f:c6:a8:19:7e:97:f5:f5:54:7d:e2:31:0f:
                    31:2a:a1:89:ea:5e:ca:31:e6:fc:70:97:f5:01:0a:
                    ed:47:23:86:26:5a:80:28:0b:f7:d6:19:33:6c:a5:
                    1a:c2:61:65:cd:19:f4:18:64:3c:d2:ac:e5:d4:cb:
                    c5:8b:e7:26:51:16:08:c2:5a:c7:27:cb:1e:4d:54:
                    f7:1f:7c:0d:e6:c1:27:75:ac:d0:36:20:54:d2:af:
                    75:a3:16:94:16:0a:52:a3:65:a1:fe:0d:62:26:94:
                    40:a0:31:c0:6e:bc:9e:91:dd:34:39:24:41:bd:1f:
                    90:46:c1:9f:d9:c2:51:66:d5:9a:32:30:5d:30:01:
                    3b:fe:95:21:f6:7e:65:86:a1:3d:a4:50:88:80:aa:
                    c6:8e:fa:22:ab:68:47:58:b8:ef:65:16:bb:14:34:
                    e9:04:9e:53:83:e5:05:0b:3a:15:7e:c3:b7:f3:57:
                    42:6b:b7:33:9b:9e:75:d5:35:71:5e:cb:94:52:7d:
                    eb:4b:02:1d:5f:b8:7d:b3:d4:cc:ab:9f:02:2f:7e:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A0:46:D5:67:EA:A4:17:82:28:D9:8F:6C:DB:42:93:25:3A:78:FB
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS212294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:4d:83:35:9d:37:d6:56:fe:ad:61:f8:05:17:93:09:0c:df:
         e2:a7:e8:6f:68:bd:29:a0:af:80:e0:e7:19:22:c2:43:f0:92:
         ee:43:74:39:25:1d:8e:7f:fb:de:ae:07:78:95:ee:dd:ce:61:
         80:fe:76:15:47:c7:5e:e3:27:5c:d2:2b:19:96:5e:df:32:2e:
         b4:00:e7:bb:73:e3:87:30:54:5f:82:e3:69:1e:6c:d2:d3:db:
         b0:7f:e9:19:1b:d7:f1:b5:c6:ee:f1:8f:c6:d8:5e:83:9a:bc:
         62:c9:74:eb:11:49:e1:f1:ee:e6:8a:fa:d6:0b:e7:b6:47:5f:
         6e:bf:0f:e6:1c:aa:34:5b:3a:36:70:97:50:9a:fd:65:d1:67:
         cc:9f:77:48:7a:21:59:31:ec:45:26:de:09:2a:3d:bb:be:69:
         71:92:ec:5d:a7:74:94:3f:ee:01:01:12:23:b2:00:75:5c:cd:
         ce:dd:b9:02:f7:7f:c1:e2:fc:79:c0:15:b3:ef:4c:40:58:60:
         5d:68:08:1c:fe:48:41:15:55:bf:84:82:55:4f:f3:59:f7:ef:
         15:49:7f:c0:09:00:4a:0c:07:5f:a7:ee:5e:b3:84:b1:48:29:
         e0:b6:73:72:57:80:ae:f8:3a:9b:29:f7:b8:40:7e:8b:55:20:
         91:ca:fa:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----