Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS400542.roa
File:                     AS400542.roa (raw, json)
Hash identifier:          FSh8ArreJu+AFuVyDw6tBNSwM6MozUxTiko1R8+6BDY=
Subject key identifier:   34:27:31:F1:C1:A8:16:40:11:0B:0D:64:B1:B3:3C:B7:23:E5:BD:70
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       2B5D5ADDCE559CE0E97A51214BE9239B3BEB100A
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS400542.roa
Signing time:             Thu 23 Feb 2023 18:37:27 +0000
ROA not before:           Thu 23 Feb 2023 18:32:27 +0000
ROA not after:            Thu 22 Feb 2024 18:37:27 +0000
asID:                     400542
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5d:5a:dd:ce:55:9c:e0:e9:7a:51:21:4b:e9:23:9b:3b:eb:10:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:27 2023 GMT
            Not After : Feb 22 18:37:27 2024 GMT
        Subject: CN=342731F1C1A81640110B0D64B1B33CB723E5BD70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:5c:7c:5c:17:dc:2a:dc:8b:5a:1c:20:8c:
                    2c:b4:f7:e4:f6:12:3b:64:b7:d6:7f:d4:c2:58:94:
                    ff:8b:16:a1:8e:af:00:57:a1:e9:29:f0:6b:a3:2d:
                    c3:b1:0e:d6:a9:f2:3a:73:5e:97:b7:dc:fb:8b:ad:
                    2e:61:8d:c3:36:4a:bc:0e:2e:bd:f8:d2:87:b5:92:
                    e5:a1:5e:08:33:d6:ba:a8:2f:ef:e5:40:9e:d8:88:
                    96:ea:90:c0:43:bc:61:84:9e:14:fd:35:50:e2:20:
                    5b:6b:ee:72:cd:79:83:dc:4e:87:43:bd:a7:c3:52:
                    d0:41:1a:0f:6f:fa:86:d5:a4:aa:46:67:e6:e6:b6:
                    2e:d8:07:8e:10:fa:1d:70:91:88:6f:ac:b9:34:78:
                    5e:29:6f:04:fd:93:e4:a4:6e:4f:c9:25:41:c0:bf:
                    24:8f:1e:b0:f5:11:f4:4a:d1:38:53:d2:8e:53:88:
                    61:a9:10:5a:24:f6:6d:4f:c9:9b:38:aa:8a:8d:5e:
                    aa:02:7b:ba:f1:bd:1f:d1:66:d5:28:b1:be:a9:e8:
                    31:33:79:d8:15:ca:26:a6:6c:08:0b:f6:e1:bd:0e:
                    fe:42:cc:ba:78:68:1d:cb:27:de:d3:65:da:9a:4b:
                    66:d6:3b:03:be:5b:1f:0a:aa:f1:4e:d2:b9:4a:f6:
                    56:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:27:31:F1:C1:A8:16:40:11:0B:0D:64:B1:B3:3C:B7:23:E5:BD:70
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS400542.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:33:19:7a:84:bb:44:87:cd:59:91:90:86:4b:87:e1:f4:57:
         50:55:bd:4c:c4:62:9f:28:82:7f:00:40:40:c4:d9:fd:79:bf:
         7a:34:14:70:ea:4c:77:a6:91:b3:15:91:09:e2:30:d4:95:f0:
         dd:3d:dd:bd:09:1b:d7:5d:62:65:7a:01:5d:97:55:32:23:54:
         26:f2:57:5e:2d:4d:c1:fc:42:e6:9f:7d:59:e0:31:2a:c0:6a:
         6c:3f:82:39:fd:66:18:f5:af:a6:6f:bc:cb:7f:52:6f:9e:73:
         a0:69:d1:c3:01:31:15:fa:70:14:18:21:bd:36:97:9b:50:ad:
         a9:44:1f:3a:25:98:d7:19:70:30:58:3a:89:30:6c:a4:63:23:
         8e:1b:82:05:47:07:3f:4e:1e:01:3a:80:8c:35:f8:ad:d7:c4:
         a5:72:c9:9a:81:8d:65:f7:6a:20:73:87:a8:64:75:c9:57:b2:
         0c:98:c9:02:4b:3d:58:8b:16:68:c7:10:80:54:a0:fd:3e:70:
         9a:f5:ec:bf:eb:79:ac:9d:e7:a0:92:24:0a:d5:7e:6f:93:2c:
         9b:69:2a:d7:4a:60:c2:f2:58:1d:a8:21:b1:7c:3c:00:1e:08:
         85:8e:f0:df:88:2a:39:28:42:fa:f4:c3:f8:45:5e:da:97:2e:
         89:4b:07:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----