Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS213239.roa
File:                     AS213239.roa (raw, json)
Hash identifier:          iyhsGObjtEwliwS/cCw7L01JzDEB7KDO4S/vR8HQSWs=
Subject key identifier:   1C:21:18:02:71:7F:D9:BB:DE:B5:B5:A9:F2:BF:BE:C4:F0:94:B9:C9
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       7A11469A13B44238927DDBF61A0CCF2CE8E12FE7
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS213239.roa
Signing time:             Thu 23 Feb 2023 18:37:34 +0000
ROA not before:           Thu 23 Feb 2023 18:32:34 +0000
ROA not after:            Thu 22 Feb 2024 18:37:34 +0000
asID:                     213239
IP address blocks:        2a07:54c6::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:11:46:9a:13:b4:42:38:92:7d:db:f6:1a:0c:cf:2c:e8:e1:2f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:34 2023 GMT
            Not After : Feb 22 18:37:34 2024 GMT
        Subject: CN=1C211802717FD9BBDEB5B5A9F2BFBEC4F094B9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:ee:b8:03:08:ae:5f:e2:ea:d2:2a:fc:9a:
                    ab:2f:df:9d:ef:b9:fd:74:71:73:4b:2c:e3:6a:97:
                    c0:5d:05:f3:9b:9c:d8:ee:29:d0:3a:89:89:31:26:
                    0f:3b:f9:25:b9:d2:45:3d:cf:98:2d:e6:a3:4e:58:
                    d0:82:ca:e2:06:31:66:60:7d:50:a7:3f:b8:0e:e8:
                    f1:ea:da:14:3c:cc:5c:11:4b:8d:0d:ef:ed:a0:70:
                    64:88:3b:ed:1e:15:7f:78:1b:be:6f:94:e4:43:27:
                    85:77:31:4b:71:9d:0e:58:4a:5c:60:49:56:c9:2d:
                    16:c5:c0:96:c3:02:3b:09:55:0e:98:31:8c:a5:35:
                    a1:70:ea:a5:ac:4f:25:b9:d8:66:f8:45:4b:2e:42:
                    07:ab:bc:02:be:79:8b:9d:72:70:7b:17:79:29:a3:
                    91:26:31:28:11:ea:da:c6:6f:79:35:12:db:07:7c:
                    b3:91:d5:24:f5:0c:bc:7f:bb:66:e0:1c:22:86:e3:
                    eb:67:13:db:6e:9b:f9:71:88:18:08:f5:fd:64:53:
                    40:5e:2f:bf:df:55:67:4c:bb:c1:86:1e:33:43:5f:
                    61:42:60:e4:33:ef:92:61:3e:6f:fd:af:50:bd:5a:
                    c7:ed:1d:55:7e:15:0f:3e:84:68:32:61:b3:c2:2e:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:21:18:02:71:7F:D9:BB:DE:B5:B5:A9:F2:BF:BE:C4:F0:94:B9:C9
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS213239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         e9:c3:d9:9f:86:9f:b5:9b:73:dd:ad:43:a5:f7:a1:fe:55:78:
         5d:d2:95:0e:f0:6f:6c:4b:9b:f4:00:27:02:08:66:d0:5c:2a:
         91:81:7b:27:b3:aa:65:dc:f1:1d:2e:14:17:cd:be:bc:e0:6d:
         93:7c:ba:0e:6e:5c:87:73:2e:c9:d5:4a:90:ae:f0:49:f1:a1:
         22:ad:26:7c:36:5c:f2:00:d1:2d:1f:9f:60:17:b6:a9:35:9a:
         cd:e0:64:73:2e:f6:f5:66:f9:d2:30:be:1d:d9:90:02:9d:23:
         bf:8a:78:aa:4c:8e:51:90:ef:76:8f:ae:39:4b:80:72:7c:87:
         b0:91:04:03:e3:2b:43:ba:e0:1f:e0:00:9e:bd:01:4c:0d:fd:
         d7:17:5e:4a:ab:e1:7a:88:32:64:37:88:2b:94:d2:ab:3b:74:
         41:23:98:d3:3b:d5:e1:f4:2a:26:a0:a5:8a:e2:e6:1b:a6:30:
         3e:32:bb:60:0b:9a:5b:45:26:cc:1c:e8:98:ed:0b:a7:79:64:
         55:8c:19:0c:8c:d2:86:94:4d:69:29:a2:52:66:5c:9e:86:84:
         2d:14:17:8d:4f:01:f5:7a:ff:b2:a8:ac:9e:20:41:ed:46:e4:
         f1:e0:4b:2d:74:8e:e9:ec:a2:29:62:8d:25:8e:2d:63:88:83:
         2b:83:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----