Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS23428.roa
File:                     AS23428.roa (raw, json)
Hash identifier:          wq7OlpUmt6EJ9zsY6+4MRCxI7AQSSzMw62NJndSMDCk=
Subject key identifier:   22:E7:78:BF:1B:48:8A:45:B7:92:F6:A3:28:0E:E4:9D:6D:A1:B3:D2
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       29434963755D907415F828C60A6A91666308A359
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS23428.roa
Signing time:             Thu 23 Feb 2023 18:37:18 +0000
ROA not before:           Thu 23 Feb 2023 18:32:18 +0000
ROA not after:            Thu 22 Feb 2024 18:37:18 +0000
asID:                     23428
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:43:49:63:75:5d:90:74:15:f8:28:c6:0a:6a:91:66:63:08:a3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:18 2023 GMT
            Not After : Feb 22 18:37:18 2024 GMT
        Subject: CN=22E778BF1B488A45B792F6A3280EE49D6DA1B3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:ae:75:a3:48:32:56:18:fe:23:df:b3:fe:
                    96:b5:b5:98:44:e7:93:c5:86:f2:63:45:4d:3f:87:
                    56:bc:f7:16:d5:41:91:da:7f:05:6f:6f:a1:89:3c:
                    b6:79:79:c1:57:2b:9c:3f:d5:87:d2:20:91:c6:52:
                    fa:12:80:33:6b:90:89:3d:a6:c2:40:b1:d8:e4:5a:
                    0b:2a:77:0d:ce:a5:bc:8d:32:64:fd:f8:c4:46:b5:
                    14:fb:f1:11:bd:71:eb:ca:7a:36:fb:c0:82:bc:3e:
                    e5:70:64:6c:79:04:29:a5:72:9f:69:15:a3:a4:c6:
                    1e:5e:1f:e8:a7:39:bb:10:92:90:5d:01:43:2c:39:
                    95:8b:d0:4b:c2:fd:4c:07:37:32:40:73:08:ef:84:
                    e4:33:f2:0a:48:d3:33:44:85:a3:04:92:a6:85:f3:
                    5e:f2:5f:32:d8:da:2d:eb:a1:6b:30:41:35:5b:3c:
                    5d:68:f6:e6:08:9b:d3:bb:4f:7f:ff:cc:50:6e:d8:
                    f2:c4:61:df:7c:9a:a8:22:d6:2e:9d:a8:84:f6:95:
                    92:73:1b:f7:80:4c:c9:8f:9c:26:d6:c6:d0:fd:c4:
                    b2:b1:51:52:29:20:16:d3:51:96:bf:63:b6:6b:bb:
                    d2:b6:da:4f:c5:88:a5:51:77:76:16:63:6d:27:d0:
                    e9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E7:78:BF:1B:48:8A:45:B7:92:F6:A3:28:0E:E4:9D:6D:A1:B3:D2
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS23428.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         e0:bb:cd:fe:6f:e8:49:bf:98:82:93:a6:02:4c:af:77:22:ff:
         85:68:cf:f6:09:65:cc:4c:ed:1c:70:c1:eb:3a:f6:ac:0c:0c:
         fb:7e:d8:01:39:44:fc:2c:ea:11:e3:f9:20:94:41:31:f5:62:
         f2:21:8e:ac:ac:9b:3f:dc:93:43:7f:bc:95:82:ec:b4:c4:f9:
         19:60:6e:44:b4:b9:43:a9:27:4b:4e:26:93:50:7d:71:4e:a9:
         31:b0:96:ce:dd:8a:8a:81:04:df:89:08:2f:de:99:e6:0c:97:
         06:64:18:c0:83:9f:95:4f:83:08:b8:a2:0e:0d:ed:44:fa:cf:
         68:f1:d3:35:48:42:c3:ea:ab:5f:70:76:b2:6d:d5:87:0f:f8:
         1b:c9:ce:f8:a0:74:2a:15:e7:8f:43:2e:13:de:a8:55:57:85:
         a4:18:69:2d:51:27:17:eb:5a:1d:4e:a8:23:cd:71:18:a0:61:
         0b:ff:0c:58:90:c5:65:f2:56:05:d7:b6:59:5b:b6:0c:96:2a:
         50:de:c7:2b:d6:9b:db:35:e3:51:74:d7:05:d8:09:20:66:b4:
         82:19:4c:16:63:81:50:48:44:ea:04:65:70:91:a2:cf:e2:c0:
         2a:9a:1f:61:92:45:eb:59:a8:ee:b0:b6:3e:b9:91:7e:23:9b:
         77:84:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----