Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS41666.roa
File:                     AS41666.roa (raw, json)
Hash identifier:          aOce0vgY2e+jkHd5M6oW6f/uasRnDbxbxR37HVZKRxw=
Subject key identifier:   51:99:E0:91:89:2A:D6:9F:22:25:6F:A2:DB:61:CE:13:D6:64:53:88
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       581C0C93AF25A29D7DBE00760DAE33AB530FFA35
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS41666.roa
Signing time:             Thu 23 Feb 2023 18:37:32 +0000
ROA not before:           Thu 23 Feb 2023 18:32:32 +0000
ROA not after:            Thu 22 Feb 2024 18:37:32 +0000
asID:                     41666
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1c:0c:93:af:25:a2:9d:7d:be:00:76:0d:ae:33:ab:53:0f:fa:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:32 2023 GMT
            Not After : Feb 22 18:37:32 2024 GMT
        Subject: CN=5199E091892AD69F22256FA2DB61CE13D6645388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:8c:61:c4:4c:fb:49:5d:d2:ee:71:59:86:
                    0d:14:0a:aa:f6:5a:d8:06:06:4a:44:e1:25:3a:13:
                    f1:2f:ac:cb:e6:dc:1b:ac:50:e1:1b:96:bd:4b:0f:
                    db:52:ab:8c:05:98:0f:bf:c9:f3:13:21:69:f3:78:
                    5b:8f:4b:75:57:21:c5:8d:16:32:4b:0e:59:36:1e:
                    fa:02:2b:f9:f0:e0:0d:58:53:4d:32:23:47:b7:6b:
                    3c:f8:5c:a1:7e:bb:b5:a8:0d:93:08:71:bb:20:06:
                    c9:54:e3:d5:7a:e3:53:7e:32:ed:ad:fa:b7:80:47:
                    06:49:98:26:9c:61:68:e2:54:b2:1f:f0:a7:5d:1a:
                    8f:3d:58:fd:35:a8:76:46:f0:eb:3f:9f:9d:55:ed:
                    42:2e:40:47:8d:8c:d5:9b:ba:15:94:a4:c8:bc:61:
                    10:f5:eb:9b:26:e2:76:a9:e7:0b:6d:4e:f9:81:31:
                    d4:e0:93:9b:ad:16:b7:94:11:79:03:95:c0:e6:55:
                    0a:ab:32:f8:59:52:68:46:aa:9b:ef:64:e1:e2:8f:
                    29:90:26:97:73:f4:52:da:ef:cd:39:8a:33:27:88:
                    37:73:8b:29:62:77:78:10:32:44:81:a1:f2:f2:44:
                    36:4d:d7:24:e9:6a:61:2b:b5:0e:6f:ee:2c:b4:aa:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:99:E0:91:89:2A:D6:9F:22:25:6F:A2:DB:61:CE:13:D6:64:53:88
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS41666.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:6d:8b:63:fa:d4:45:d9:c9:e9:62:c0:20:24:bf:b8:3d:
         f0:6b:4a:2d:70:11:4f:14:c9:83:1a:d2:37:0b:64:c6:a8:ae:
         27:6b:48:92:69:f0:d1:4f:5f:41:64:16:28:b9:f3:04:07:3c:
         0c:19:d6:ae:23:07:3a:57:65:e2:fc:e1:7e:50:b1:91:e8:d7:
         14:1d:c5:96:91:da:0f:3e:d8:35:1f:82:3d:7e:79:de:08:6b:
         73:b7:16:15:c8:db:70:08:46:87:69:a4:71:52:55:91:16:91:
         53:35:c6:42:7d:da:28:e1:a8:c2:29:63:a6:4e:a3:b5:31:f2:
         40:09:49:53:7a:56:cf:fc:6f:20:07:30:ba:62:72:f1:09:c6:
         b6:87:3f:6a:08:93:66:42:e0:2c:66:b9:3c:60:47:ab:5d:82:
         d4:c0:4e:a1:94:f5:cd:39:56:9a:c5:4f:e2:7e:41:86:fb:a8:
         05:be:77:ef:f3:3e:b7:23:c2:d5:55:c3:ef:da:53:cb:a9:8d:
         30:e5:55:9a:cb:80:c3:c4:c9:59:ad:d9:da:24:e4:0b:f0:80:
         24:76:b0:4f:a6:64:d7:4e:bc:e9:08:bd:64:30:65:6a:69:3f:
         6d:d8:7e:9c:86:bb:27:36:e8:b4:ad:8e:fd:76:72:8f:0c:18:
         9c:94:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----