Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313566653a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463353a313566653a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          Km5OAkjHEnXRC6o3PYdpqcpUuPEDOiWDbwHIMCN9OOc=
Subject key identifier:   F4:23:4E:C7:C4:1D:4E:BF:A5:41:05:C7:1A:5B:79:47:D2:47:B8:19
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       1CB87C5379EF5E1C81B7632342BE28B190B19BB6
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313566653a3a2f34382d3438203d3e203630393030.roa
Signing time:             Mon 18 Sep 2023 15:33:04 +0000
ROA not before:           Mon 18 Sep 2023 15:28:04 +0000
ROA not after:            Mon 16 Sep 2024 15:33:04 +0000
asID:                     60900
IP address blocks:        2a07:54c5:15fe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b8:7c:53:79:ef:5e:1c:81:b7:63:23:42:be:28:b1:90:b1:9b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 18 15:28:04 2023 GMT
            Not After : Sep 16 15:33:04 2024 GMT
        Subject: CN=F4234EC7C41D4EBFA54105C71A5B7947D247B819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:12:ab:05:b7:b0:93:91:2d:a1:84:42:84:84:
                    19:ea:cf:c0:46:62:66:11:9b:ca:ca:b9:86:30:86:
                    da:ac:50:94:c4:7f:7d:8c:64:39:66:3f:67:e2:e7:
                    73:17:ef:af:5b:ee:e6:94:15:d5:65:4f:c2:53:89:
                    dc:14:ef:1e:88:e4:0b:11:0e:ac:2f:ac:5e:02:81:
                    72:ce:99:70:a3:89:f3:15:c5:8f:12:1f:6e:68:f2:
                    a9:ef:0d:36:d9:0b:48:7f:14:1e:4e:cc:1f:bc:06:
                    0e:b8:43:08:17:d6:19:e1:9d:24:92:33:d0:18:43:
                    09:4e:fe:27:4f:96:8d:bb:14:0c:07:0f:2d:11:44:
                    41:f6:b1:4e:d1:c9:b2:4d:f7:41:fb:3f:ba:da:58:
                    3c:98:94:15:67:76:e8:f0:7b:aa:2c:ab:06:d5:76:
                    15:97:05:de:d0:00:5c:40:78:16:17:b2:8f:9b:14:
                    35:5d:71:99:e3:8f:c6:68:d4:0c:81:b2:3c:d6:80:
                    66:30:65:62:7c:95:fd:1d:79:83:7e:1a:71:28:6b:
                    71:23:bb:da:c3:71:8f:5b:ed:dc:23:62:27:ff:b1:
                    26:ea:f3:57:e9:1f:96:7d:ce:c7:f4:6a:bc:af:ff:
                    9f:38:1d:12:09:1e:71:96:9b:ce:f6:3a:18:71:73:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:23:4E:C7:C4:1D:4E:BF:A5:41:05:C7:1A:5B:79:47:D2:47:B8:19
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313566653a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:15fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:b2:e7:45:a5:e8:b7:8a:c9:04:e8:21:91:ab:ec:9a:a7:32:
         95:b2:02:1a:30:b1:66:2b:d1:4a:64:92:44:65:76:9f:35:70:
         6f:ac:0d:7f:ac:f8:36:89:6e:97:18:5a:12:fd:b2:71:26:70:
         4e:5c:cb:72:16:d4:d6:87:92:f5:da:68:b4:1e:80:ae:f8:7a:
         ef:6b:37:13:6c:19:74:b4:81:a1:bd:85:79:2b:41:f0:08:96:
         71:85:12:be:e2:c3:44:50:79:cd:86:ac:b8:f2:2d:8b:99:d6:
         cc:c9:e0:fe:81:db:2f:a7:f2:9c:f6:df:2d:cd:ff:a9:0f:9f:
         0a:c6:47:f4:66:15:c9:df:17:80:99:9c:c2:31:e3:10:e7:1c:
         34:51:32:ab:c7:61:8c:fa:13:26:16:5d:7e:9b:71:aa:a3:96:
         59:b7:67:2a:b2:78:e6:e9:5c:19:77:39:3d:4a:c8:4d:18:e8:
         33:0a:4d:17:19:d1:74:a3:ca:a1:20:b0:4a:8c:ba:74:ed:b4:
         e9:91:68:07:9f:9b:26:98:0d:4c:10:63:f7:c2:f5:1a:01:81:
         25:cb:0c:bc:03:eb:a6:69:95:bc:20:e9:db:94:4a:f9:ca:b5:
         fc:44:fe:20:6e:8a:32:ec:8e:92:d2:3b:60:c1:36:2e:19:96:
         ba:32:b2:84
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUHLh8U3nvXhyBt2MjQr4osZCxm7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM2NDhFRkQ3OEQ2QkUxRUUyQ0VCQ0U4OTE0MEEyRjJE
MTQ1NzBDQjAeFw0yMzA5MTgxNTI4MDRaFw0yNDA5MTYxNTMzMDRaMDMxMTAvBgNV
BAMTKEY0MjM0RUM3QzQxRDRFQkZBNTQxMDVDNzFBNUI3OTQ3RDI0N0I4MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmEqsFt7CTkS2hhEKEhBnqz8BG
YmYRm8rKuYYwhtqsUJTEf32MZDlmP2fi53MX769b7uaUFdVlT8JTidwU7x6I5AsR
DqwvrF4CgXLOmXCjifMVxY8SH25o8qnvDTbZC0h/FB5OzB+8Bg64QwgX1hnhnSSS
M9AYQwlO/idPlo27FAwHDy0RREH2sU7RybJN90H7P7raWDyYlBVndujwe6osqwbV
dhWXBd7QAFxAeBYXso+bFDVdcZnjj8Zo1AyBsjzWgGYwZWJ8lf0deYN+GnEoa3Ej
u9rDcY9b7dwjYif/sSbq81fpH5Z9zsf0aryv/584HRIJHnGWm872Ohhxc39fAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU9CNOx8QdTr+lQQXHGlt5R9JHuBkwHwYDVR0j
BBgwFoAU82SO/XjWvh7izrzokUCi8tFFcMswDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xNi9GMzY0OEVGRDc4RDZCRTFFRTJDRUJDRTg5MTQwQTJGMkQxNDU3MENC
LmNybDCBgAYIKwYBBQUHAQEEdDByMHAGCCsGAQUFBzAChmRyc3luYzovL3Jwa2ku
emFwcGllaG9zdC5jb20vcmVwby9OT1JUSExBWUVSX1VJRF8xMzg2NC8wL0YzNjQ4
RUZENzhENkJFMUVFMkNFQkNFODkxNDBBMkYyRDE0NTcwQ0IuY2VyMIG2BggrBgEF
BQcBCwSBqTCBpjCBowYIKwYBBQUHMAuGgZZyc3luYzovL3JzeW5jLnBhYXMucnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRm
YWVhNGIxYmMxMi8xNi8zMjYxMzAzNzNhMzUzNDYzMzUzYTMxMzU2NjY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzYzMDM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMUV/jAN
BgkqhkiG9w0BAQsFAAOCAQEAQbLnRaXot4rJBOghkavsmqcylbICGjCxZivRSmSS
RGV2nzVwb6wNf6z4NolulxhaEv2ycSZwTlzLchbU1oeS9dpotB6Arvh672s3E2wZ
dLSBob2FeStB8AiWcYUSvuLDRFB5zYasuPIti5nWzMng/oHbL6fynPbfLc3/qQ+f
CsZH9GYVyd8XgJmcwjHjEOccNFEyq8dhjPoTJhZdfptxqqOWWbdnKrJ45ulcGXc5
PUrITRjoMwpNFxnRdKPKoSCwSoy6dO206ZFoB5+bJpgNTBBj98L1GgGBJcsMvAPr
pmmVvCDp25RK+cq1/ET+IG6KMuyOktI7YME2LhmWujKyhA==
-----END CERTIFICATE-----