Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a3a2f33322d3438203d3e203537383730.roa
File:                     326130373a353463353a3a2f33322d3438203d3e203537383730.roa (raw, json)
Hash identifier:          LBSIK1F85jcIL986GfvkLhhSswfdTLeJBN5Kg26lDxw=
Subject key identifier:   DE:55:3A:13:DB:03:34:1F:75:4F:5A:A5:02:BB:4A:A6:68:1B:FB:DE
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       598205AB207E962D56B7FAE2C812357CFB96B1ED
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a3a2f33322d3438203d3e203537383730.roa
Signing time:             Wed 19 Apr 2023 00:19:35 +0000
ROA not before:           Wed 19 Apr 2023 00:14:35 +0000
ROA not after:            Wed 17 Apr 2024 00:19:35 +0000
asID:                     57870
IP address blocks:        2a07:54c5::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:82:05:ab:20:7e:96:2d:56:b7:fa:e2:c8:12:35:7c:fb:96:b1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 19 00:14:35 2023 GMT
            Not After : Apr 17 00:19:35 2024 GMT
        Subject: CN=DE553A13DB03341F754F5AA502BB4AA6681BFBDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:59:1c:4d:0d:d3:36:0d:0b:83:54:f6:50:
                    c2:f1:55:13:0a:4c:d5:ac:44:9d:47:a5:b2:19:a6:
                    55:46:2d:bd:ee:a9:84:21:69:f2:52:7c:5d:00:6e:
                    4e:9d:96:67:b4:96:d2:c6:6f:26:0f:a6:f7:8e:59:
                    06:af:1b:ba:17:2d:7a:19:4e:e6:ff:b9:2c:8d:19:
                    9f:50:56:86:86:e3:97:c4:3c:8a:c4:ca:4c:dc:51:
                    dd:f2:88:f0:c1:54:e6:a4:7f:76:1e:5b:73:28:70:
                    c3:a0:df:9e:69:aa:30:91:00:37:23:5c:6e:88:81:
                    8e:49:7b:b6:a8:99:c2:b1:a7:ee:5d:e4:75:bb:20:
                    80:53:d2:b5:de:f6:d3:ac:a6:23:ea:f6:f4:9e:26:
                    4b:93:e5:c7:d3:bf:30:4b:f8:0f:72:7f:67:12:f6:
                    bb:8a:25:6b:8f:04:a1:55:98:2d:3f:60:04:d7:de:
                    6c:de:0c:89:ed:99:6a:e9:c6:e0:a4:45:34:8b:a1:
                    ad:2c:de:1a:c4:66:05:95:e0:6c:fa:58:46:3c:09:
                    4a:4a:e5:8a:8f:53:98:31:98:bb:af:e9:30:92:2e:
                    ff:85:50:8c:f7:09:15:65:38:a2:8e:64:3e:8b:36:
                    c0:2a:8b:25:93:1f:35:98:fb:79:16:99:d6:9c:b7:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:55:3A:13:DB:03:34:1F:75:4F:5A:A5:02:BB:4A:A6:68:1B:FB:DE
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a3a2f33322d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:f5:0e:78:18:8c:58:de:44:4b:31:b9:bc:ff:9d:e1:12:ce:
         a7:98:5f:38:0e:ed:c9:95:01:5a:a0:66:ce:16:41:ed:8e:69:
         9b:d6:5b:6a:89:c3:cc:ce:74:7d:b5:cf:cb:85:4f:d9:4a:ed:
         43:06:32:64:51:45:a6:16:e9:ee:71:fe:39:88:46:bd:24:93:
         8b:2a:1b:49:56:9e:89:5c:64:bc:db:b4:c7:ba:d5:e5:f1:92:
         06:0c:7c:76:85:c3:a8:0f:dc:12:c5:17:91:94:17:cf:f8:83:
         5f:88:38:5e:8d:29:f6:2a:62:25:93:a8:62:af:7a:e5:6d:d1:
         fe:b4:46:bb:5f:2d:3f:4f:4c:50:54:c3:e6:17:ed:06:82:09:
         c3:10:4c:33:5a:43:2c:26:87:4c:9a:aa:a0:dd:f7:50:21:60:
         01:3c:bd:79:f7:a3:61:b2:46:97:cc:c6:ac:8c:a8:a2:7f:68:
         5e:1f:29:af:0f:5b:97:07:27:47:ec:f1:b4:6a:be:8e:b7:b9:
         16:0e:1d:45:b1:ae:96:1b:eb:08:41:9f:f4:e1:cd:7b:ae:b7:
         07:bb:a0:cf:4c:75:29:ad:bf:89:94:da:5b:54:03:43:f5:c8:
         21:32:74:97:cd:ab:89:99:99:88:b6:f2:96:46:f9:69:c8:12:
         d2:bc:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----