Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313530303a3a2f34302d3438203d3e20313939313737.roa
File:                     326130373a353463353a313530303a3a2f34302d3438203d3e20313939313737.roa (raw, json)
Hash identifier:          UjnA/1V1qb8wn+GSQsiJv4w6SvnJDade4AX4Eq/8GvA=
Subject key identifier:   B9:71:BC:98:EB:B4:92:C8:C7:93:17:A3:0F:00:67:17:37:D6:0A:28
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       4859505416B7EAAB1480CA8421209E986CFDA30E
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313530303a3a2f34302d3438203d3e20313939313737.roa
Signing time:             Mon 18 Sep 2023 15:33:03 +0000
ROA not before:           Mon 18 Sep 2023 15:28:03 +0000
ROA not after:            Mon 16 Sep 2024 15:33:03 +0000
asID:                     199177
IP address blocks:        2a07:54c5:1500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:59:50:54:16:b7:ea:ab:14:80:ca:84:21:20:9e:98:6c:fd:a3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 18 15:28:03 2023 GMT
            Not After : Sep 16 15:33:03 2024 GMT
        Subject: CN=B971BC98EBB492C8C79317A30F00671737D60A28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:93:4b:2a:d4:03:da:d3:cc:ad:75:fd:ab:
                    3a:76:ef:75:ec:a6:2d:3f:50:1b:e1:d8:4e:cd:15:
                    a0:64:1d:a1:5b:40:77:82:24:9d:0a:58:72:bd:6f:
                    b7:0f:25:2e:26:38:77:d9:95:d6:40:37:24:6c:1f:
                    3d:25:fb:6a:57:ea:e3:a5:52:66:f1:a2:23:88:bb:
                    8f:a6:74:6d:9f:a4:2c:3b:bf:12:30:00:83:69:52:
                    96:50:b9:c2:78:78:04:3f:90:8e:0b:96:5c:63:db:
                    9c:07:8c:0b:1b:56:f6:cc:64:b8:71:44:c8:54:ad:
                    e3:56:1a:f6:8f:e1:97:6d:a6:a6:b8:f1:5d:33:b5:
                    81:7e:1d:82:fc:ed:58:5f:8d:dd:5b:01:d7:ad:7f:
                    6a:bb:72:fc:a8:3d:93:77:89:3f:1c:0c:b5:a2:67:
                    3d:6c:ef:c5:1b:3e:0b:c7:be:f0:bb:21:e3:97:b2:
                    9f:43:63:2b:63:4a:2f:dd:d3:38:f6:54:39:1f:9d:
                    d5:3a:b0:c3:e7:fd:22:cf:19:35:fa:75:e6:e6:60:
                    c9:ae:49:60:33:b9:cc:06:ad:77:3f:03:10:40:4b:
                    92:72:a6:70:81:1d:5a:51:89:f1:ad:ef:ea:0f:b1:
                    04:51:19:8f:ec:28:2f:be:a2:7b:99:8c:7e:61:fb:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:71:BC:98:EB:B4:92:C8:C7:93:17:A3:0F:00:67:17:37:D6:0A:28
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313530303a3a2f34302d3438203d3e20313939313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:2f:6a:df:77:63:92:1d:84:d9:5b:7e:c5:87:f9:65:f4:
         13:b5:7c:2c:de:59:54:dc:79:57:52:f4:56:b4:ed:87:3f:4d:
         60:fe:0c:f8:27:6e:b6:48:f5:2c:94:0f:e7:08:51:99:2e:7d:
         15:1a:6d:f0:69:94:4f:14:3d:b7:0a:be:52:0a:c0:e4:88:d3:
         1f:85:6a:67:db:10:09:30:7f:4b:1a:95:62:22:bf:a5:4c:d6:
         8a:f5:25:69:e4:4a:69:d6:4d:6e:c1:c2:82:3f:7b:dc:61:6a:
         a7:c4:b8:6c:d7:db:0f:f5:3b:6c:38:c1:cb:76:c0:e3:5b:9c:
         07:1d:d4:33:d6:cd:f4:e2:f4:2b:02:7f:6d:86:5f:e3:72:71:
         27:59:53:c0:32:3e:80:10:1d:ef:37:9d:f6:f1:18:c1:5f:0b:
         b0:66:63:ae:8e:99:99:e6:61:b6:35:dc:92:c4:1c:d4:e7:d4:
         0a:2a:81:94:32:a4:c5:4c:e9:56:7a:bb:e3:86:e3:e7:57:8f:
         93:82:5f:a8:b5:ed:75:29:28:c3:15:e6:a3:21:cc:12:39:d9:
         b6:f3:cd:c8:9a:97:73:87:8f:2d:44:c8:83:2e:81:3d:9a:9b:
         15:36:39:15:8d:aa:46:d4:f0:d8:28:fd:21:12:ab:b4:35:6c:
         fa:87:fe:56
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUSFlQVBa36qsUgMqEISCemGz9ow4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM2NDhFRkQ3OEQ2QkUxRUUyQ0VCQ0U4OTE0MEEyRjJE
MTQ1NzBDQjAeFw0yMzA5MTgxNTI4MDNaFw0yNDA5MTYxNTMzMDNaMDMxMTAvBgNV
BAMTKEI5NzFCQzk4RUJCNDkyQzhDNzkzMTdBMzBGMDA2NzE3MzdENjBBMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5n5NLKtQD2tPMrXX9qzp273Xs
pi0/UBvh2E7NFaBkHaFbQHeCJJ0KWHK9b7cPJS4mOHfZldZANyRsHz0l+2pX6uOl
UmbxoiOIu4+mdG2fpCw7vxIwAINpUpZQucJ4eAQ/kI4Lllxj25wHjAsbVvbMZLhx
RMhUreNWGvaP4Zdtpqa48V0ztYF+HYL87Vhfjd1bAdetf2q7cvyoPZN3iT8cDLWi
Zz1s78UbPgvHvvC7IeOXsp9DYytjSi/d0zj2VDkfndU6sMPn/SLPGTX6debmYMmu
SWAzucwGrXc/AxBAS5JypnCBHVpRifGt7+oPsQRRGY/sKC++onuZjH5h+0q3AgMB
AAGjggJpMIICZTAdBgNVHQ4EFgQUuXG8mOu0ksjHkxejDwBnFzfWCigwHwYDVR0j
BBgwFoAU82SO/XjWvh7izrzokUCi8tFFcMswDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xNi9GMzY0OEVGRDc4RDZCRTFFRTJDRUJDRTg5MTQwQTJGMkQxNDU3MENC
LmNybDCBgAYIKwYBBQUHAQEEdDByMHAGCCsGAQUFBzAChmRyc3luYzovL3Jwa2ku
emFwcGllaG9zdC5jb20vcmVwby9OT1JUSExBWUVSX1VJRF8xMzg2NC8wL0YzNjQ4
RUZENzhENkJFMUVFMkNFQkNFODkxNDBBMkYyRDE0NTcwQ0IuY2VyMIG4BggrBgEF
BQcBCwSBqzCBqDCBpQYIKwYBBQUHMAuGgZhyc3luYzovL3JzeW5jLnBhYXMucnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRm
YWVhNGIxYmMxMi8xNi8zMjYxMzAzNzNhMzUzNDYzMzUzYTMxMzUzMDMwM2EzYTJm
MzQzMDJkMzQzODIwM2QzZTIwMzEzOTM5MzEzNzM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdUxRUw
DQYJKoZIhvcNAQELBQADggEBAHHiL2rfd2OSHYTZW37Fh/ll9BO1fCzeWVTceVdS
9Fa07Yc/TWD+DPgnbrZI9SyUD+cIUZkufRUabfBplE8UPbcKvlIKwOSI0x+Famfb
EAkwf0salWIiv6VM1or1JWnkSmnWTW7BwoI/e9xhaqfEuGzX2w/1O2w4wct2wONb
nAcd1DPWzfTi9CsCf22GX+NycSdZU8AyPoAQHe83nfbxGMFfC7BmY66OmZnmYbY1
3JLEHNTn1AoqgZQypMVM6VZ6u+OG4+dXj5OCX6i17XUpKMMV5qMhzBI52bbzzcia
l3OHjy1EyIMugT2amxU2ORWNqkbU8Ngo/SESq7Q1bPqH/lY=
-----END CERTIFICATE-----