Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463373a3a2f33322d3438203d3e203537383730.roa
File:                     326130373a353463373a3a2f33322d3438203d3e203537383730.roa (raw, json)
Hash identifier:          PwsEzsmFTg+QiVwwJEWOqq/iCoub7KZ4kpGbD6UreBE=
Subject key identifier:   D0:A5:36:C9:11:E6:CA:C6:AF:84:07:5C:D8:2F:C2:64:11:B1:D4:EA
Certificate issuer:       /CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
Certificate serial:       2F5D0BC1EA406B116ABF093A60FA81BB4B74BE74
Authority key identifier: B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463373a3a2f33322d3438203d3e203537383730.roa
Signing time:             Wed 19 Apr 2023 00:19:28 +0000
ROA not before:           Wed 19 Apr 2023 00:14:28 +0000
ROA not after:            Wed 17 Apr 2024 00:19:28 +0000
asID:                     57870
IP address blocks:        2a07:54c7::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5d:0b:c1:ea:40:6b:11:6a:bf:09:3a:60:fa:81:bb:4b:74:be:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431
        Validity
            Not Before: Apr 19 00:14:28 2023 GMT
            Not After : Apr 17 00:19:28 2024 GMT
        Subject: CN=D0A536C911E6CAC6AF84075CD82FC26411B1D4EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:39:68:53:e5:57:d1:da:e2:19:f5:08:5d:
                    5f:1c:a6:f3:c0:33:dd:27:2a:17:7f:a2:76:d1:ee:
                    11:dd:09:23:0f:f5:66:a2:71:64:7e:55:2c:db:f8:
                    b9:61:4b:a2:9b:d3:53:85:fb:37:b2:e7:67:72:83:
                    ff:b9:15:5f:69:cc:d7:c2:97:80:60:56:7d:0b:c0:
                    b6:1b:a2:90:69:f3:24:b5:d5:df:dc:c2:16:1e:12:
                    a7:6b:ea:6b:60:19:08:bf:a3:8a:3a:50:f1:d6:ca:
                    92:ea:d3:e4:86:98:63:aa:91:10:8b:d5:b7:8c:2a:
                    07:43:42:28:a9:52:a3:a6:d5:7a:f6:19:a3:20:67:
                    69:20:4b:07:72:f9:df:86:33:b2:ba:02:bc:56:f2:
                    ee:ef:18:45:0c:11:25:35:e0:86:a6:4c:17:0e:2b:
                    8a:40:00:f9:db:a2:97:32:57:d6:f6:34:42:b1:8c:
                    07:28:3f:d5:87:3a:47:fa:1d:ee:5e:6c:c1:40:05:
                    7b:2f:60:aa:5d:ef:e6:6d:04:60:48:92:6b:ef:d5:
                    6b:13:54:f2:d3:09:43:be:b6:fb:a3:e9:de:e0:55:
                    7c:41:d2:18:c6:47:ae:69:b2:bd:42:72:a4:9d:5e:
                    d3:6b:ad:e9:90:2a:ad:6d:e4:35:94:6c:7f:b1:1d:
                    bc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A5:36:C9:11:E6:CA:C6:AF:84:07:5C:D8:2F:C2:64:11:B1:D4:EA
            X509v3 Authority Key Identifier:
                keyid:B9:B7:CB:6C:2D:81:80:F3:45:2B:4A:4F:93:D4:10:5B:AD:FF:24:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/B9B7CB6C2D8180F3452B4A4F93D4105BADFF2431.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/1/326130373a353463373a3a2f33322d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:b6:d9:7c:c0:cc:44:06:96:6e:b1:60:80:0a:2e:ad:7b:79:
         84:a2:98:43:e8:f0:52:6c:81:38:cc:2d:bd:36:4e:2a:15:f8:
         ba:ae:18:fd:9d:db:3f:54:e1:b9:75:51:6d:1e:cb:5b:1b:4e:
         0f:6e:e0:da:65:79:32:46:64:54:1e:67:11:f4:96:1d:1c:fd:
         21:71:f7:29:5c:c4:b6:ec:d8:3c:23:d5:a6:d2:ff:d9:90:dc:
         96:b5:e8:82:24:aa:66:51:2f:6f:60:e9:1d:92:be:29:ff:54:
         dd:6e:cd:35:96:1f:16:77:c4:b0:7d:2c:7c:3b:a2:5d:00:f4:
         c5:cc:cc:59:ff:74:1c:21:00:26:ff:85:64:7d:6c:39:6b:68:
         9b:80:60:4e:ca:34:53:e8:f0:86:55:0a:31:34:df:d4:30:61:
         a6:6f:f2:15:ab:0f:d3:58:3e:24:a8:7b:ce:8c:0c:d8:4d:86:
         47:a0:9c:c2:72:f7:61:46:94:22:d5:47:cb:55:fc:0f:7d:2c:
         9b:20:a7:96:34:33:4c:8f:52:dd:95:22:16:f4:80:9c:e3:d1:
         7e:ec:2f:dc:d0:38:e3:dd:e6:05:00:8b:fe:21:14:3e:5b:ae:
         5a:dc:25:32:e1:76:57:ee:da:bf:f5:a9:24:21:80:73:0f:b8:
         ad:c8:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----