Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS213045.roa
File:                     AS213045.roa (raw, json)
Hash identifier:          8gWj4obaj76LuKUUnsDY9yyH53oqkNhBXTE7euDsUps=
Subject key identifier:   62:D2:F9:7A:DC:2C:9D:D1:13:C0:6F:93:9C:0E:94:12:1B:DA:0F:4D
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       1DDF289C0354D32D47F3C12E3182F709D5B9DACE
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS213045.roa
Signing time:             Thu 23 Feb 2023 18:37:16 +0000
ROA not before:           Thu 23 Feb 2023 18:32:16 +0000
ROA not after:            Thu 22 Feb 2024 18:37:16 +0000
asID:                     213045
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:df:28:9c:03:54:d3:2d:47:f3:c1:2e:31:82:f7:09:d5:b9:da:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:16 2023 GMT
            Not After : Feb 22 18:37:16 2024 GMT
        Subject: CN=62D2F97ADC2C9DD113C06F939C0E94121BDA0F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:da:d5:17:7f:a7:12:0e:e8:98:02:63:4d:ae:
                    d1:9a:a0:2f:41:fb:af:74:2b:54:b2:78:24:ef:66:
                    4a:2a:a0:b6:b2:98:3a:f7:78:11:11:7c:55:26:f4:
                    47:aa:02:9d:d5:74:ac:96:2e:6d:65:47:b5:46:ee:
                    8c:0c:b4:55:63:ed:fd:91:a4:c7:0a:81:81:4b:90:
                    8f:4c:4d:c1:74:03:8c:23:73:8b:af:62:fa:44:af:
                    b0:ac:ab:6b:c5:8f:5b:34:d4:9d:ce:b5:8a:42:6f:
                    8f:ef:8a:fc:9e:c7:12:5a:31:d8:9b:7a:46:b1:c9:
                    64:bb:92:e3:64:72:79:d8:72:c9:c8:3a:0a:f2:75:
                    e0:1f:73:ec:0c:e8:be:f8:bb:6a:a8:f4:d5:db:88:
                    13:31:2a:db:1c:65:f5:31:f5:86:30:62:dd:84:92:
                    2e:b3:60:4c:d2:cb:76:28:a0:21:43:0c:ba:4b:8b:
                    18:fb:ce:ea:d0:4a:6b:a0:d3:7a:0d:b7:22:d4:85:
                    07:34:8e:c5:ea:1d:03:ad:f2:03:1b:14:63:35:46:
                    86:d2:2b:69:90:b3:c9:4d:31:f3:a1:20:3e:1d:cd:
                    ef:4b:1a:20:ac:64:14:a8:23:57:de:a5:9b:6b:9e:
                    7b:0d:d4:45:c6:3c:58:09:53:42:ca:85:e3:4a:3b:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D2:F9:7A:DC:2C:9D:D1:13:C0:6F:93:9C:0E:94:12:1B:DA:0F:4D
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS213045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         de:51:96:d5:21:65:b7:6c:f1:30:d7:5b:69:77:7b:69:2f:c1:
         43:25:6c:f0:08:29:96:86:56:78:5f:7f:39:6e:d2:f8:27:eb:
         3e:f3:a3:dd:05:0a:f1:9a:26:2f:c5:07:aa:e3:11:cb:16:91:
         a2:ba:24:8a:73:15:48:0c:3e:66:8a:a3:9f:00:62:59:e6:f1:
         3f:f6:84:8c:99:6a:19:77:1d:99:ad:6f:72:f6:80:fe:0c:6e:
         41:7f:8d:de:72:23:b6:d1:68:85:67:6d:44:e4:48:19:8b:35:
         38:5e:13:92:80:c6:f6:8b:11:ac:5f:b2:8b:40:4c:87:1c:a0:
         91:ee:92:e0:63:55:b4:f7:92:f2:79:0b:a3:fe:c8:a8:5a:f9:
         49:b2:7b:c8:90:18:3f:10:e0:06:39:04:ab:af:43:5e:b4:dd:
         2c:3d:75:5d:6f:dc:43:28:a7:68:6c:ac:7d:9b:98:e1:1f:84:
         55:f5:66:48:ed:34:92:09:da:b8:f1:29:cb:86:a7:b9:c4:01:
         a4:3f:a9:a9:c0:97:dd:5f:d1:ab:32:03:09:2b:80:e1:9d:97:
         35:f5:d7:ea:12:4c:09:4d:4c:91:3e:fc:19:fc:f3:2c:29:09:
         7e:3f:a9:41:0d:a6:06:1e:69:98:bf:46:b4:e0:7c:6e:db:78:
         88:93:8d:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----