Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS52210.roa
File:                     AS52210.roa (raw, json)
Hash identifier:          FCacW6rwNJwB0b2nVJEdKbsMj9sueBY0MygCJ3UnlTI=
Subject key identifier:   5E:AE:DA:62:BF:A7:71:FC:DC:13:6F:A2:47:CA:A5:4C:31:A9:88:65
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       05FBDAF3B103B03C43BCC8BD7C88039754ACACDE
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS52210.roa
Signing time:             Thu 23 Feb 2023 18:37:24 +0000
ROA not before:           Thu 23 Feb 2023 18:32:24 +0000
ROA not after:            Thu 22 Feb 2024 18:37:24 +0000
asID:                     52210
IP address blocks:        2a07:54c4:174b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fb:da:f3:b1:03:b0:3c:43:bc:c8:bd:7c:88:03:97:54:ac:ac:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:24 2023 GMT
            Not After : Feb 22 18:37:24 2024 GMT
        Subject: CN=5EAEDA62BFA771FCDC136FA247CAA54C31A98865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:76:4c:b8:6f:20:d4:0a:98:f5:58:bd:ac:4d:
                    b1:c2:d7:40:2a:70:d4:c6:b9:f4:9e:f2:21:c7:08:
                    9a:ff:ae:d9:d3:af:a3:3c:21:01:0c:aa:75:71:86:
                    32:58:88:cc:e9:d9:49:02:7c:82:d6:63:b8:6a:75:
                    2d:66:e8:ea:64:bf:ad:43:e3:09:bc:0f:8f:4d:0f:
                    55:5d:b3:63:38:db:0d:79:36:c2:89:11:31:6f:d7:
                    fc:59:e5:6b:f6:6c:f8:5c:54:50:36:e1:ed:9e:38:
                    51:92:eb:19:c1:14:fd:d3:92:70:ec:c3:06:7c:20:
                    07:f5:3d:66:89:7e:e0:22:82:0a:b4:6c:ee:3a:e3:
                    d4:eb:3a:ce:36:cf:ed:d6:43:04:a2:1c:b6:67:2c:
                    f1:87:48:72:71:39:88:de:99:69:6e:dd:85:9f:ef:
                    26:44:3a:a7:3d:53:78:07:95:ec:e1:4c:11:23:96:
                    63:df:6e:a9:fa:3d:72:7d:44:21:77:25:02:84:8b:
                    df:c2:84:47:3b:41:35:a9:2a:ea:7b:89:5e:61:b2:
                    d2:37:17:bc:2d:1f:eb:b0:84:ba:b7:07:22:87:1b:
                    85:5c:5d:0c:ee:4d:c0:96:07:8c:07:37:4b:0a:f3:
                    28:d0:8c:ad:65:b0:be:bb:b8:c7:73:c0:f4:6e:62:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AE:DA:62:BF:A7:71:FC:DC:13:6F:A2:47:CA:A5:4C:31:A9:88:65
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS52210.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:174b::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:52:dc:31:70:47:3b:e0:7c:45:c6:1c:6c:07:b7:f2:2b:ff:
         b3:09:0d:85:6a:e2:30:9d:05:d3:e3:3b:7d:f5:56:13:18:97:
         0f:02:9c:06:1a:2f:c6:ce:d3:e2:3a:2b:d0:c7:a3:c4:70:ec:
         59:69:2d:59:c3:ca:22:76:a6:5b:ca:ad:15:f6:8c:82:8e:fd:
         d1:7c:68:02:a0:ae:aa:34:29:4f:8d:c2:b1:67:0e:41:bf:9f:
         5e:cd:05:38:05:64:9b:9e:20:bd:17:f5:86:4a:fc:6f:05:e4:
         d8:57:f8:0c:70:19:20:96:7e:2f:e1:13:67:aa:06:06:ab:97:
         e3:66:5e:99:fc:d6:be:99:6d:30:86:ee:9b:e4:c4:4c:b5:a8:
         f8:d3:8a:7c:50:15:0a:d1:8c:d0:83:11:02:7c:0f:32:d7:9c:
         d1:b4:4e:20:cd:0e:2e:4a:fd:af:33:d1:66:f6:aa:46:96:4b:
         45:2b:b4:dc:a9:3c:63:bf:4a:8a:e6:cb:8f:e9:7f:1a:90:81:
         be:a3:3c:24:c7:eb:39:6c:6d:47:4d:2b:f2:38:fb:83:a6:11:
         2a:68:27:42:44:44:02:19:e8:d8:58:a7:a4:eb:86:da:ae:f8:
         7a:cf:47:59:8a:db:55:a1:54:a9:e4:e8:e9:cb:cf:28:a9:ea:
         ac:f7:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----