Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313566653a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463353a313566653a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          1PfpLtrMZ9AbPRQfPSA8paQha4HH6YIma4UJRY2E2gM=
Subject key identifier:   63:3F:AC:20:0E:30:4D:F1:11:41:E5:29:0B:50:68:67:E0:23:B6:71
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       6AB1ED226097205939398244672C0B70C4C0B93C
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313566653a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 05 May 2023 22:09:59 +0000
ROA not before:           Fri 05 May 2023 22:04:59 +0000
ROA not after:            Fri 03 May 2024 22:09:59 +0000
asID:                     60900
IP address blocks:        2a07:54c5:15fe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b1:ed:22:60:97:20:59:39:39:82:44:67:2c:0b:70:c4:c0:b9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: May  5 22:04:59 2023 GMT
            Not After : May  3 22:09:59 2024 GMT
        Subject: CN=633FAC200E304DF11141E5290B506867E023B671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:a4:a7:04:07:ba:48:2c:5f:71:6f:be:73:
                    97:d2:10:a1:e1:b2:ef:9c:50:60:d7:27:ef:4e:8f:
                    25:e0:9f:9b:e1:24:2a:4f:35:20:be:e0:63:62:16:
                    64:45:72:77:e2:2f:5b:51:37:be:78:6b:37:21:35:
                    b4:44:10:48:51:55:4e:f2:fe:21:49:2d:40:ab:cf:
                    cd:6e:d1:1e:d1:81:ab:62:65:1e:d6:27:e0:ea:09:
                    ec:4a:f1:b4:d8:b5:e2:ec:07:a0:ea:03:2d:44:c9:
                    e3:72:49:68:cb:34:09:e0:db:28:f7:e0:e5:bf:a2:
                    d7:9c:5d:95:c7:03:de:25:58:63:f9:62:85:61:3e:
                    27:95:8e:e1:24:c6:94:20:a3:65:f8:60:6e:1c:d9:
                    06:c8:f2:d1:36:96:61:e5:5f:9f:2e:b2:71:a9:0b:
                    98:c8:47:43:07:78:d8:07:a4:4d:66:85:54:1a:ef:
                    dd:19:04:53:99:2d:21:a5:0e:c4:bc:f0:49:ab:b8:
                    f3:02:8f:fc:10:6a:bf:14:f6:dc:e6:c3:fe:05:af:
                    0e:ab:1f:c9:0a:37:96:89:52:68:5b:7d:7b:70:88:
                    1f:99:c3:ca:57:c4:5f:a9:bb:0f:77:e1:1f:22:1e:
                    d2:9d:29:ff:e1:2f:a5:dc:56:b4:72:4b:fb:fb:0a:
                    74:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3F:AC:20:0E:30:4D:F1:11:41:E5:29:0B:50:68:67:E0:23:B6:71
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313566653a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:15fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:03:59:be:e1:25:25:95:cd:bf:38:f1:2e:19:61:1b:84:4c:
         66:5c:a7:b2:66:f9:77:b8:f8:95:f1:4d:49:aa:a9:f4:c5:64:
         86:ad:3e:71:31:46:5d:a8:0a:dd:3e:e3:c6:fc:36:79:31:8b:
         3d:2d:26:ab:4c:6e:6c:2d:34:90:26:62:3e:3c:be:52:ac:37:
         83:51:bf:3d:c3:51:5c:b2:4c:7b:7c:84:21:b2:de:02:7a:a9:
         a2:4c:dc:6f:5a:e5:e6:51:ac:30:51:f6:0f:07:07:0b:65:93:
         45:46:27:7f:88:f2:39:a2:71:93:43:03:4b:23:30:86:d5:da:
         86:1a:f4:49:37:36:4a:df:ec:30:b1:fb:5a:cc:f8:4e:44:5a:
         c0:70:41:8c:fd:17:ce:91:72:c6:53:13:d0:d1:8a:37:9e:b6:
         9d:06:5a:53:85:40:45:91:39:bd:ac:f8:fc:77:b9:b7:24:73:
         7b:87:f7:54:44:27:66:5d:7f:fb:bf:3c:de:11:6a:24:f6:f1:
         a3:02:8d:73:cf:03:76:22:3b:b3:ec:3e:96:96:6c:45:e3:4a:
         f5:21:bf:82:87:af:ab:07:2d:4b:f1:11:e2:1f:f8:2b:05:00:
         fb:e1:ac:e5:de:0d:66:22:13:bc:3a:0f:8e:8a:4c:10:8c:cc:
         03:aa:df:79
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIUarHtImCXIFk5OYJEZywLcMTAuTwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlCN0NCNkMyRDgxODBGMzQ1MkI0QTRGOTNENDEwNUJB
REZGMjQzMTAeFw0yMzA1MDUyMjA0NTlaFw0yNDA1MDMyMjA5NTlaMDMxMTAvBgNV
BAMTKDYzM0ZBQzIwMEUzMDRERjExMTQxRTUyOTBCNTA2ODY3RTAyM0I2NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKqSnBAe6SCxfcW++c5fSEKHh
su+cUGDXJ+9OjyXgn5vhJCpPNSC+4GNiFmRFcnfiL1tRN754azchNbREEEhRVU7y
/iFJLUCrz81u0R7RgatiZR7WJ+DqCexK8bTYteLsB6DqAy1EyeNySWjLNAng2yj3
4OW/otecXZXHA94lWGP5YoVhPieVjuEkxpQgo2X4YG4c2QbI8tE2lmHlX58usnGp
C5jIR0MHeNgHpE1mhVQa790ZBFOZLSGlDsS88EmruPMCj/wQar8U9tzmw/4Frw6r
H8kKN5aJUmhbfXtwiB+Zw8pXxF+puw934R8iHtKdKf/hL6XcVrRyS/v7CnT5AgMB
AAGjggJlMIICYTAdBgNVHQ4EFgQUYz+sIA4wTfERQeUpC1BoZ+AjtnEwHwYDVR0j
BBgwFoAUubfLbC2BgPNFK0pPk9QQW63/JDEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzc0MTFkNmItMzYxNS00YTg2LTg2NzMtMzQwY2UyZjIy
NmVlLzEvQjlCN0NCNkMyRDgxODBGMzQ1MkI0QTRGOTNENDEwNUJBREZGMjQzMS5j
cmwwgYAGCCsGAQUFBwEBBHQwcjBwBggrBgEFBQcwAoZkcnN5bmM6Ly9ycGtpLnph
cHBpZWhvc3QuY29tL3JlcG8vTk9SVEhMQVlFUl9VSURfMTM4NjQvMC9COUI3Q0I2
QzJEODE4MEYzNDUyQjRBNEY5M0Q0MTA1QkFERkYyNDMxLmNlcjCBtQYIKwYBBQUH
AQsEgagwgaUwgaIGCCsGAQUFBzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS8zNzQxMWQ2Yi0zNjE1LTRhODYtODY3My0zNDBj
ZTJmMjI2ZWUvMS8zMjYxMzAzNzNhMzUzNDYzMzUzYTMxMzU2NjY1M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzYzMDM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMUV/jANBgkq
hkiG9w0BAQsFAAOCAQEAiANZvuElJZXNvzjxLhlhG4RMZlynsmb5d7j4lfFNSaqp
9MVkhq0+cTFGXagK3T7jxvw2eTGLPS0mq0xubC00kCZiPjy+Uqw3g1G/PcNRXLJM
e3yEIbLeAnqpokzcb1rl5lGsMFH2DwcHC2WTRUYnf4jyOaJxk0MDSyMwhtXahhr0
STc2St/sMLH7Wsz4TkRawHBBjP0XzpFyxlMT0NGKN562nQZaU4VARZE5vaz4/He5
tyRze4f3VEQnZl1/+7883hFqJPbxowKNc88DdiI7s+w+lpZsReNK9SG/goevqwct
S/ER4h/4KwUA++Gs5d4NZiITvDoPjopMEIzMA6rfeQ==
-----END CERTIFICATE-----