Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS50836.roa
File:                     AS50836.roa (raw, json)
Hash identifier:          QbHd+V640xpEmX9xlEUpjJdXw20scivfT6JCSV/F9a8=
Subject key identifier:   2D:5A:F7:6A:02:06:77:3D:D0:0D:0C:B5:64:2B:36:DD:60:9C:C3:00
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       276F99F4B09253D705978DB9BF87BAFE6C122847
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS50836.roa
Signing time:             Thu 23 Feb 2023 18:37:21 +0000
ROA not before:           Thu 23 Feb 2023 18:32:21 +0000
ROA not after:            Thu 22 Feb 2024 18:37:21 +0000
asID:                     50836
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6f:99:f4:b0:92:53:d7:05:97:8d:b9:bf:87:ba:fe:6c:12:28:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:21 2023 GMT
            Not After : Feb 22 18:37:21 2024 GMT
        Subject: CN=2D5AF76A0206773DD00D0CB5642B36DD609CC300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:25:43:ef:26:68:82:ae:f9:63:d4:b5:2b:
                    aa:07:89:0c:7a:5f:02:ef:3c:67:21:4f:42:ea:c3:
                    27:de:98:71:ae:d9:21:1b:0b:d5:76:c2:f9:11:22:
                    1c:2d:34:95:18:eb:1d:c6:b7:a2:19:c5:0a:4a:cb:
                    cb:6e:4e:c0:02:78:8c:82:11:69:9f:a1:1a:04:5b:
                    8a:eb:e8:43:78:8d:44:e3:67:e9:26:44:ae:10:ca:
                    33:30:ae:4d:ce:75:a9:99:a4:9a:55:5f:e0:ce:e2:
                    90:b4:0c:f1:eb:d4:95:88:83:4c:ce:0a:d6:ce:1b:
                    9e:9a:02:b5:30:3a:0f:48:03:e7:79:2d:05:cb:59:
                    d7:9d:11:a1:1b:a6:1c:05:66:2c:18:14:2c:d1:63:
                    a9:da:08:0b:4b:62:48:c0:b0:81:ce:3c:7d:a9:72:
                    d0:3a:bc:7c:aa:11:ce:d8:81:f7:3a:60:ae:bd:30:
                    98:db:4f:c0:13:36:6e:d3:74:de:55:34:b4:c6:c1:
                    79:f0:8d:4e:dc:56:40:a4:b5:a0:b8:cc:b1:13:ff:
                    38:ae:aa:a6:42:29:a7:18:5f:bd:d3:6d:d8:c2:2a:
                    83:67:26:f3:e9:05:aa:9e:84:1b:cb:ff:18:6e:dd:
                    07:f7:bf:cc:66:5c:1f:f4:3a:ac:5f:7c:3f:35:f6:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5A:F7:6A:02:06:77:3D:D0:0D:0C:B5:64:2B:36:DD:60:9C:C3:00
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS50836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ed:9d:c8:db:d4:e4:f4:0b:ea:9c:68:4d:e8:66:08:49:30:
         01:5b:cc:e8:e9:35:65:16:08:9a:3a:7b:e2:c7:29:e8:ab:af:
         36:d8:7d:5b:97:4c:fd:09:c3:0d:50:e5:b7:72:97:2d:c5:0b:
         14:6d:7f:9c:69:8f:f8:eb:53:d3:0a:68:93:a5:c8:dd:17:d4:
         1f:0d:12:a8:0f:16:5b:7f:a6:93:60:44:52:5f:20:a6:de:75:
         8f:8f:f2:ec:8a:60:4e:2e:f8:7e:fa:5a:cb:96:18:69:13:d7:
         ea:76:e1:da:40:41:fe:8a:8b:f7:9f:57:ae:41:92:62:11:1f:
         26:61:25:92:4f:11:ca:b9:85:98:a2:1c:16:c5:2b:ff:57:ff:
         8b:1a:ad:85:a7:b0:8a:a3:89:1c:83:5b:3a:a7:06:e3:20:be:
         e0:22:d4:72:8f:22:28:b0:81:e5:e2:b8:fd:6b:47:96:1f:b6:
         06:d8:24:04:35:74:77:59:1c:f8:e7:27:e9:73:05:87:ff:68:
         19:86:32:09:ae:e3:bf:ce:3a:f9:dd:be:0e:ca:c6:eb:cb:7c:
         6f:e2:d0:06:f2:2d:30:ad:9b:ad:67:ad:50:99:47:2c:d2:9e:
         68:bf:c3:1c:1d:61:7d:23:32:47:f1:bc:25:02:f2:44:f5:ed:
         40:ea:74:05
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUJ2+Z9LCSU9cFl425v4e6/mwSKEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMzAyMjMxODMyMjFaFw0yNDAyMjIxODM3MjFaMDMxMTAvBgNV
BAMTKDJENUFGNzZBMDIwNjc3M0REMDBEMENCNTY0MkIzNkRENjA5Q0MzMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaSVD7yZogq75Y9S1K6oHiQx6
XwLvPGchT0LqwyfemHGu2SEbC9V2wvkRIhwtNJUY6x3Gt6IZxQpKy8tuTsACeIyC
EWmfoRoEW4rr6EN4jUTjZ+kmRK4QyjMwrk3OdamZpJpVX+DO4pC0DPHr1JWIg0zO
CtbOG56aArUwOg9IA+d5LQXLWdedEaEbphwFZiwYFCzRY6naCAtLYkjAsIHOPH2p
ctA6vHyqEc7Ygfc6YK69MJjbT8ATNm7TdN5VNLTGwXnwjU7cVkCktaC4zLET/ziu
qqZCKacYX73TbdjCKoNnJvPpBaqehBvL/xhu3Qf3v8xmXB/0OqxffD819rYzAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQULVr3agIGdz3QDQy1ZCs23WCcwwAwHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChlty
c3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0Y2
QzA2OUIxNEJBOTdBQzYxNDE4Mzc0OTU2NjhBRTZDODczRkRGRkUuY2VyMF8GCCsG
AQUFBwELBFMwUTBPBggrBgEFBQcwC4ZDcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3Qu
Y29tL3JlcG8vTk9SVEhMQVlFUl9VSURfMTM4NjQvMC9BUzUwODM2LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKgdUwrALMA0GCSqGSIb3DQEBCwUAA4IBAQCP7Z3I29Tk9AvqnGhN6GYISTAB
W8zo6TVlFgiaOnvixynoq6822H1bl0z9CcMNUOW3cpctxQsUbX+caY/461PTCmiT
pcjdF9QfDRKoDxZbf6aTYERSXyCm3nWPj/LsimBOLvh++lrLlhhpE9fqduHaQEH+
iov3n1euQZJiER8mYSWSTxHKuYWYohwWxSv/V/+LGq2Fp7CKo4kcg1s6pwbjIL7g
ItRyjyIosIHl4rj9a0eWH7YG2CQENXR3WRz45yfpcwWH/2gZhjIJruO/zjr53b4O
ysbry3xv4tAG8i0wrZutZ61QmUcs0p5ov8McHWF9IzJH8bwlAvJE9e1A6nQF
-----END CERTIFICATE-----