Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e203530323234.roa
File:                     326130373a353463353a313330303a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier:          hBl7LY2UAQ4GYWfMhU1SOk4iE2SjF4+S+J3OFKWyuKY=
Subject key identifier:   A2:2D:B0:F9:F9:1D:2C:D3:F7:A3:2E:D7:B6:6F:2E:17:D4:AE:6B:2F
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       18EE4BBD6EFF945CA350D8F38026242C3D883778
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e203530323234.roa
Signing time:             Wed 19 Apr 2023 00:19:36 +0000
ROA not before:           Wed 19 Apr 2023 00:14:36 +0000
ROA not after:            Wed 17 Apr 2024 00:19:36 +0000
asID:                     50224
IP address blocks:        2a07:54c5:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ee:4b:bd:6e:ff:94:5c:a3:50:d8:f3:80:26:24:2c:3d:88:37:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 19 00:14:36 2023 GMT
            Not After : Apr 17 00:19:36 2024 GMT
        Subject: CN=A22DB0F9F91D2CD3F7A32ED7B66F2E17D4AE6B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:76:f8:1c:f8:9e:c6:d5:af:24:c3:66:04:c9:
                    67:f0:2b:4d:45:fe:4e:f4:60:c1:b8:58:11:41:78:
                    08:6e:3a:47:99:e4:fb:b2:7a:0d:b5:68:05:df:fc:
                    37:25:e3:5a:40:bb:65:66:f8:83:70:ce:44:c6:2d:
                    8c:d0:0b:79:1c:65:e4:af:29:31:48:0a:88:2a:64:
                    53:3a:81:15:16:49:c5:ed:ec:b7:be:4c:ab:2e:ac:
                    d2:36:48:43:3e:77:00:df:de:01:a5:42:17:e7:12:
                    6b:5a:13:9c:fd:ff:93:74:8a:cb:6e:76:2a:72:f4:
                    e4:8b:c0:7c:65:80:5f:97:2b:44:ba:d5:12:45:0d:
                    43:16:11:83:f7:a6:0d:b3:21:b4:c7:84:ff:ff:26:
                    9d:12:19:56:cb:70:71:63:f5:00:2c:61:02:ba:cf:
                    ea:ae:05:b6:66:a6:21:b5:63:a8:a9:d3:c2:1c:d2:
                    e4:59:93:93:90:71:1e:3c:cc:8c:e9:4d:f3:22:f3:
                    5f:79:7e:5e:4a:14:0a:39:e4:25:12:47:70:e1:7c:
                    b0:1f:25:79:d6:f2:ed:fb:72:3c:f4:15:f3:ec:32:
                    da:ac:43:a9:8d:94:82:b3:c6:98:ab:ac:f3:e0:06:
                    8a:3a:0b:06:58:57:d5:7d:81:65:27:e8:3a:bd:fc:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2D:B0:F9:F9:1D:2C:D3:F7:A3:2E:D7:B6:6F:2E:17:D4:AE:6B:2F
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313330303a3a2f34302d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         d2:3d:d9:df:de:a2:e1:f0:16:fa:cf:ad:b5:c6:c9:c1:a7:79:
         e1:7e:af:c7:a0:f0:02:17:5c:2d:27:e8:32:8b:ca:a9:e5:2e:
         5f:a2:33:34:28:46:45:70:5e:f2:b8:06:24:ed:69:10:32:f9:
         aa:bf:d2:3f:9c:7d:43:c5:bd:f6:07:d6:d4:c1:cd:51:51:94:
         c4:88:06:17:27:6d:fc:c5:9c:73:50:fe:3c:b7:64:56:ad:29:
         ba:a7:40:15:76:ca:84:1b:68:2c:de:91:99:34:a6:41:82:0a:
         c7:99:60:9c:3a:aa:0e:0b:18:83:d2:6f:6e:06:0a:ab:7c:d8:
         e9:06:cf:a1:80:18:54:a5:8c:2f:42:25:cb:de:96:20:e4:de:
         d2:85:10:de:bf:c6:fc:2e:20:58:d4:f4:68:1f:d4:c4:cc:04:
         33:b6:2a:99:09:7c:27:d3:b1:81:d9:76:24:13:e1:23:58:9b:
         e0:ff:e9:be:73:47:31:cf:d4:2c:39:29:04:e6:a7:33:26:18:
         57:49:e9:96:08:61:27:03:9e:a8:b3:07:c5:e2:15:38:5f:e6:
         88:64:80:ad:80:75:83:af:9d:c8:09:28:00:77:85:c3:45:25:
         d4:9c:05:bd:d8:c2:4d:28:98:e0:b0:10:4f:b5:01:87:b2:80:
         40:82:aa:a7
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUGO5LvW7/lFyjUNjzgCYkLD2IN3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlCN0NCNkMyRDgxODBGMzQ1MkI0QTRGOTNENDEwNUJB
REZGMjQzMTAeFw0yMzA0MTkwMDE0MzZaFw0yNDA0MTcwMDE5MzZaMDMxMTAvBgNV
BAMTKEEyMkRCMEY5RjkxRDJDRDNGN0EzMkVEN0I2NkYyRTE3RDRBRTZCMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndvgc+J7G1a8kw2YEyWfwK01F
/k70YMG4WBFBeAhuOkeZ5Puyeg21aAXf/Dcl41pAu2Vm+INwzkTGLYzQC3kcZeSv
KTFICogqZFM6gRUWScXt7Le+TKsurNI2SEM+dwDf3gGlQhfnEmtaE5z9/5N0istu
dipy9OSLwHxlgF+XK0S61RJFDUMWEYP3pg2zIbTHhP//Jp0SGVbLcHFj9QAsYQK6
z+quBbZmpiG1Y6ip08Ic0uRZk5OQcR48zIzpTfMi8195fl5KFAo55CUSR3DhfLAf
JXnW8u37cjz0FfPsMtqsQ6mNlIKzxpirrPPgBoo6CwZYV9V9gWUn6Dq9/H6tAgMB
AAGjggJkMIICYDAdBgNVHQ4EFgQUoi2w+fkdLNP3oy7Xtm8uF9Suay8wHwYDVR0j
BBgwFoAUubfLbC2BgPNFK0pPk9QQW63/JDEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0MTFkNmItMzYxNS00YTg2LTg2NzMtMzQwY2UyZjIy
NmVlLzEvQjlCN0NCNkMyRDgxODBGMzQ1MkI0QTRGOTNENDEwNUJBREZGMjQzMS5j
cmwwgYAGCCsGAQUFBwEBBHQwcjBwBggrBgEFBQcwAoZkcnN5bmM6Ly9ycGtpLnph
cHBpZWhvc3QuY29tL3JlcG8vTk9SVEhMQVlFUl9VSURfMTM4NjQvMC9COUI3Q0I2
QzJEODE4MEYzNDUyQjRBNEY5M0Q0MTA1QkFERkYyNDMxLmNlcjCBtQYIKwYBBQUH
AQsEgagwgaUwgaIGCCsGAQUFBzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS8zNzQxMWQ2Yi0zNjE1LTRhODYtODY3My0zNDBj
ZTJmMjI2ZWUvMS8zMjYxMzAzNzNhMzUzNDYzMzUzYTMxMzMzMDMwM2EzYTJmMzQz
MDJkMzQzODIwM2QzZTIwMzUzMDMyMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoHVMUTMA0GCSqG
SIb3DQEBCwUAA4IBAQDSPdnf3qLh8Bb6z621xsnBp3nhfq/HoPACF1wtJ+gyi8qp
5S5fojM0KEZFcF7yuAYk7WkQMvmqv9I/nH1Dxb32B9bUwc1RUZTEiAYXJ238xZxz
UP48t2RWrSm6p0AVdsqEG2gs3pGZNKZBggrHmWCcOqoOCxiD0m9uBgqrfNjpBs+h
gBhUpYwvQiXL3pYg5N7ShRDev8b8LiBY1PRoH9TEzAQztiqZCXwn07GB2XYkE+Ej
WJvg/+m+c0cxz9QsOSkE5qczJhhXSemWCGEnA56oswfF4hU4X+aIZICtgHWDr53I
CSgAd4XDRSXUnAW92MJNKJjgsBBPtQGHsoBAgqqn
-----END CERTIFICATE-----