Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a613030393a3a2f34382d3438203d3e203539393933.roa
File:                     326130373a353463353a613030393a3a2f34382d3438203d3e203539393933.roa (raw, json)
Hash identifier:          X2CH9TfAZK+W4y0Fqa/JplCxk/23uOqZ41LQMOd1gJI=
Subject key identifier:   35:6E:BF:9D:D9:5F:8D:C6:E0:6B:C4:04:88:63:1A:FF:30:22:79:2C
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       7A9AB0C5FB396B39DE4E0D141133FF923BA25272
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a613030393a3a2f34382d3438203d3e203539393933.roa
Signing time:             Wed 19 Apr 2023 00:19:34 +0000
ROA not before:           Wed 19 Apr 2023 00:14:34 +0000
ROA not after:            Wed 17 Apr 2024 00:19:34 +0000
asID:                     59993
IP address blocks:        2a07:54c5:a009::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9a:b0:c5:fb:39:6b:39:de:4e:0d:14:11:33:ff:92:3b:a2:52:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 19 00:14:34 2023 GMT
            Not After : Apr 17 00:19:34 2024 GMT
        Subject: CN=356EBF9DD95F8DC6E06BC40488631AFF3022792C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:65:16:c9:67:18:f9:aa:38:3a:7e:c5:cb:d1:
                    46:7a:80:38:69:2e:66:f6:71:07:f5:07:ea:ea:74:
                    20:83:9f:f6:d0:1f:f7:fd:d6:42:96:8c:ca:f2:32:
                    e4:bf:8d:ac:23:48:7a:71:53:2d:ee:b4:0a:b5:fe:
                    21:3b:94:0f:4c:d7:98:a2:b9:a0:bc:9e:96:bd:5f:
                    1a:70:a7:b4:6a:6d:f7:90:b0:8d:57:c1:68:f4:02:
                    f7:58:de:7b:98:2a:fa:85:ee:36:07:df:b4:1a:50:
                    a6:19:6f:11:81:b0:91:35:85:64:b4:83:ea:9b:ab:
                    ae:a7:bc:f9:50:da:25:e4:f6:c7:c6:70:e1:a7:02:
                    5f:0f:95:2f:d1:5f:de:d1:e6:51:f3:0f:d7:51:37:
                    43:da:9a:84:75:d5:86:08:ae:62:b2:ae:77:e8:fa:
                    fc:6c:af:fc:cb:b6:0c:77:45:03:74:31:ef:bd:61:
                    c6:e8:53:f1:5e:29:3e:93:07:2d:03:6d:19:8d:6c:
                    fd:72:ce:1c:73:6d:ce:95:66:c6:c0:e7:77:4b:0c:
                    c7:36:6b:ea:50:61:1a:05:5a:4a:8f:a0:8c:a0:96:
                    59:c5:7b:0c:fd:be:86:29:f3:8e:cd:80:85:a5:0a:
                    a2:0b:71:85:12:e7:a9:2e:4b:7e:e2:ed:8b:3d:3f:
                    42:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6E:BF:9D:D9:5F:8D:C6:E0:6B:C4:04:88:63:1A:FF:30:22:79:2C
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463353a613030393a3a2f34382d3438203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:a009::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:79:a9:45:46:10:0e:f5:14:4b:c8:e5:10:8d:3d:c1:67:b4:
         07:8b:04:57:5a:a4:c7:d4:1e:64:a6:ba:d5:be:38:4e:4e:3c:
         91:e9:d0:7e:9a:f6:3f:c9:34:77:ac:11:1f:e7:e2:b8:74:4f:
         20:38:36:bd:a8:94:98:74:40:68:c5:7a:9b:97:e7:a4:5b:0e:
         a0:91:a4:b1:e9:9b:6c:2d:87:ae:3d:84:93:f6:1a:a0:10:ae:
         a2:7b:92:5e:63:f2:5a:b0:bc:32:0b:e1:86:c9:f6:fa:cd:e2:
         6c:02:34:67:b7:cf:f1:b2:e1:9e:ec:83:48:6d:ce:ca:de:b4:
         b2:35:64:df:9a:a9:bf:1e:71:cb:d7:c5:b8:b5:55:95:b9:7e:
         8b:ea:c4:07:2e:79:d3:30:36:d3:e5:2c:f7:16:52:dc:ad:75:
         d6:68:05:f3:46:22:8f:d8:90:25:7a:8e:2b:ee:22:9d:60:1c:
         b7:c1:79:6d:3e:de:c9:97:70:04:c4:77:5c:df:76:cc:55:ed:
         04:58:3c:c3:1c:21:7e:04:b6:57:39:23:94:19:38:2a:bc:b6:
         03:a0:ed:e8:29:c8:90:11:87:ed:94:b6:59:7b:ce:55:9b:50:
         32:c5:c6:8a:f9:d7:b5:08:86:c6:42:ea:7a:09:74:e6:fb:d5:
         1a:77:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----