Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa
File:                     326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          Ba/addKhejg17hZOADf/qh5k4qOtPpkMw6dX67YpIys=
Subject key identifier:   B1:D2:77:D3:C2:2E:C7:13:81:C5:C2:C8:9E:D7:5E:CD:37:CA:6C:44
Certificate issuer:       /CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
Certificate serial:       6CE8930B506112AFD71A39C1E106F5AA5EDADDD6
Authority key identifier: 84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa
Signing time:             Mon 03 Jun 2024 22:10:06 +0000
ROA not before:           Mon 03 Jun 2024 22:05:06 +0000
ROA not after:            Mon 02 Jun 2025 22:10:06 +0000
asID:                     54148
IP address blocks:        2a07:54c1:dead::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e8:93:0b:50:61:12:af:d7:1a:39:c1:e1:06:f5:aa:5e:da:dd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B73A995F7E469C0FFD988D851B866DACA9AB74
        Validity
            Not Before: Jun  3 22:05:06 2024 GMT
            Not After : Jun  2 22:10:06 2025 GMT
        Subject: CN=B1D277D3C22EC71381C5C2C89ED75ECD37CA6C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:f2:19:88:2a:00:ab:9b:a6:09:f6:b5:cb:
                    99:e3:69:46:c0:5e:91:e1:32:f8:65:3d:5b:b7:d3:
                    95:06:49:f0:5a:14:b1:fb:28:c2:e6:ba:b5:1f:21:
                    c1:93:22:08:94:d2:df:56:47:d5:1c:02:5d:dd:ad:
                    a5:f6:ad:10:62:f6:f8:88:fd:c5:bb:2e:b6:85:6c:
                    c8:4b:0d:aa:1c:6e:0b:45:70:32:c5:bf:c2:cd:3e:
                    6c:0f:4d:07:b3:0d:1a:c4:68:17:e7:3e:fa:fa:80:
                    ee:00:ac:0c:bd:9c:60:b8:af:b4:17:66:8c:c4:6d:
                    d9:bc:38:08:71:63:9b:82:c8:9a:bf:4e:c6:4b:aa:
                    5f:74:90:26:27:72:76:d4:ec:30:d6:fd:fe:ee:2b:
                    b7:bf:1f:fa:a6:43:2f:ab:3d:33:fd:f6:8d:01:d5:
                    d9:36:c5:7a:b1:2e:10:b1:48:2c:f4:71:3a:05:3a:
                    5e:4d:8a:e8:ef:06:8c:14:4f:64:27:17:90:50:88:
                    c2:8d:66:88:1f:52:93:b3:00:95:32:42:e5:6e:84:
                    a7:20:80:67:2a:6b:f5:22:0b:8d:03:93:0f:6c:87:
                    bd:0a:03:06:cd:10:e6:93:c6:51:d3:9c:a6:cb:25:
                    e2:2f:05:75:73:6c:4c:df:22:c9:6e:1b:d3:8a:ee:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D2:77:D3:C2:2E:C7:13:81:C5:C2:C8:9E:D7:5E:CD:37:CA:6C:44
            X509v3 Authority Key Identifier:
                keyid:84:B7:3A:99:5F:7E:46:9C:0F:FD:98:8D:85:1B:86:6D:AC:A9:AB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/84B73A995F7E469C0FFD988D851B866DACA9AB74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/84B73A995F7E469C0FFD988D851B866DACA9AB74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/1/326130373a353463313a646561643a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:89:6a:95:a6:40:5e:01:55:e2:5f:3c:ad:1c:cc:ad:aa:2e:
         c8:3d:5b:cf:09:26:a7:36:46:7e:5b:90:6c:86:c8:67:df:68:
         fd:70:7e:65:61:09:c3:2f:5f:12:bd:8b:04:c3:1e:28:a9:ae:
         ac:d1:68:e1:7b:ea:9e:99:75:17:4f:31:0c:77:ee:71:23:96:
         79:ba:b1:46:3b:60:79:98:b0:ad:f5:3a:b5:bb:68:c9:ae:0a:
         e5:7d:99:01:e2:ac:44:40:7d:0f:b7:e3:1a:dd:c9:58:54:86:
         18:c9:7c:1b:16:b7:73:90:5e:2e:6f:55:cc:67:70:66:81:19:
         96:c3:44:93:c8:47:ac:74:d7:db:e6:51:f0:f3:f4:68:46:e6:
         04:94:7e:78:e6:72:58:34:ad:6b:3e:8d:04:98:79:dd:72:8b:
         ad:67:fa:83:01:50:9f:46:4f:81:b6:01:37:e1:f5:00:a6:25:
         92:39:da:ef:c9:18:8f:2f:86:52:88:cc:34:d2:dc:69:4e:21:
         2e:fd:3f:ae:16:b1:c5:b6:30:79:b7:d0:69:2a:3e:86:78:0d:
         6a:89:03:6d:e9:41:9e:00:47:5f:72:77:9e:0e:66:12:f3:25:
         64:5c:9b:95:34:1d:4e:7f:52:0d:7f:7e:3a:ba:94:fd:c4:3d:
         3d:fe:8c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----