Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313630303a3a2f34302d3438203d3e20323033383637.roa
File:                     326130373a353463353a313630303a3a2f34302d3438203d3e20323033383637.roa (raw, json)
Hash identifier:          UVIuh838wfvenFlA/RVIk79S1DCchV+IdJ1yrotzhKI=
Subject key identifier:   67:E8:22:1B:AB:15:F2:6B:3E:8E:A4:D0:9E:9B:CF:0B:88:BF:18:84
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       7ABA98D06DFE1E28F106635051301B2916FF1E5C
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313630303a3a2f34302d3438203d3e20323033383637.roa
Signing time:             Wed 26 Jul 2023 17:53:15 +0000
ROA not before:           Wed 26 Jul 2023 17:48:15 +0000
ROA not after:            Wed 24 Jul 2024 17:53:15 +0000
asID:                     203867
IP address blocks:        2a07:54c5:1600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ba:98:d0:6d:fe:1e:28:f1:06:63:50:51:30:1b:29:16:ff:1e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Jul 26 17:48:15 2023 GMT
            Not After : Jul 24 17:53:15 2024 GMT
        Subject: CN=67E8221BAB15F26B3E8EA4D09E9BCF0B88BF1884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:b5:8a:b6:91:28:8c:00:07:07:28:21:94:
                    04:b5:33:58:e1:01:9d:8f:f4:08:2e:d6:b0:97:4a:
                    6b:03:b9:b5:e8:1b:25:c0:8f:e1:6c:bb:b3:fd:9f:
                    83:56:ca:72:82:02:bf:09:d1:1b:c1:6e:86:ef:75:
                    0d:dc:16:1c:5f:67:60:86:1b:e0:6e:23:1b:3e:f3:
                    1d:ac:ca:33:c5:9f:d7:1e:8e:c1:5d:62:32:20:5d:
                    ec:79:09:da:11:d6:e4:c3:ad:08:cf:7f:4e:f5:c8:
                    af:bf:a4:5e:d9:4d:b4:77:71:2f:9d:97:c6:03:77:
                    36:81:b1:c1:87:e3:73:81:a6:19:a9:37:b8:69:b1:
                    04:cf:fe:ac:19:43:d8:e5:b9:85:02:01:00:b3:ef:
                    e0:10:60:e8:45:0d:24:ae:a4:48:a5:43:99:9f:46:
                    6e:27:cb:15:7d:d0:f3:db:ed:a4:54:25:24:0d:a2:
                    76:54:be:d4:52:56:d4:ae:95:78:7b:04:b2:f8:6a:
                    4c:c0:b3:7b:33:22:d8:7e:33:e7:f7:f3:67:99:87:
                    11:cd:f7:90:4d:56:e6:10:19:40:f5:31:63:e3:95:
                    1b:b7:59:ca:ef:07:00:da:75:37:94:cb:0e:fa:cf:
                    51:9a:65:62:96:e2:77:a2:96:9b:43:76:7b:1c:61:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E8:22:1B:AB:15:F2:6B:3E:8E:A4:D0:9E:9B:CF:0B:88:BF:18:84
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a313630303a3a2f34302d3438203d3e20323033383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         e2:8b:bd:59:27:73:26:fe:66:ce:ce:d3:4a:2b:ba:77:6a:9d:
         14:2f:20:aa:b3:f3:f4:4e:79:91:85:f4:d7:19:9a:be:53:75:
         c4:f0:8d:e0:0a:b8:50:72:33:82:5f:d0:3e:eb:5f:f5:02:02:
         ed:39:e2:e9:73:ee:1a:d6:15:eb:af:41:e1:b8:f3:46:10:e9:
         7f:bb:37:e1:52:41:67:e5:68:ad:0f:72:b4:3d:6c:6e:e1:41:
         a5:cb:13:35:fc:9c:a5:a4:be:37:67:e0:fb:c1:85:3e:b4:2e:
         42:66:76:c3:3c:81:01:40:42:f2:d5:0f:7b:71:3f:d5:06:92:
         1f:44:7e:07:86:3e:dc:99:ae:18:c7:44:ba:15:61:63:0e:59:
         4b:c9:1e:eb:34:67:d9:fd:99:93:e3:de:bc:2b:8a:bf:49:ec:
         c5:e3:cc:53:67:b0:ae:2c:95:f9:d4:ac:b1:73:1c:4e:1d:f7:
         8f:97:c4:f2:da:2c:6d:a7:fe:ac:d0:0a:e2:cc:8c:f8:7b:e8:
         f8:fc:82:8c:a7:2b:fe:05:2c:4c:91:c5:18:4b:68:cf:ff:14:
         6d:03:d4:db:76:f0:3f:ea:ee:e4:ff:fd:57:f3:5a:7c:8b:94:
         e8:f3:77:92:d5:30:bd:a1:ce:91:7e:a0:ab:df:e4:70:45:68:
         a0:2b:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----