Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa
File:                     326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa (raw, json)
Hash identifier:          tVIz29HJhymopCizHyGr1vuJRaLmvf9E/rBuEssCoz4=
Subject key identifier:   BF:D6:A4:99:C3:2E:91:99:1F:F5:EE:F2:26:65:69:C1:17:D0:30:9B
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       2E0D79855D222EA2C754E31758D322852FCF4BFD
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa
Signing time:             Thu 29 Feb 2024 19:33:53 +0000
ROA not before:           Thu 29 Feb 2024 19:28:53 +0000
ROA not after:            Thu 27 Feb 2025 19:33:53 +0000
asID:                     199765
IP address blocks:        2a07:54c5:1600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0d:79:85:5d:22:2e:a2:c7:54:e3:17:58:d3:22:85:2f:cf:4b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Feb 29 19:28:53 2024 GMT
            Not After : Feb 27 19:33:53 2025 GMT
        Subject: CN=BFD6A499C32E91991FF5EEF2266569C117D0309B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:af:2a:d5:23:32:5b:0b:07:e1:19:29:6a:92:
                    e9:d6:42:7a:37:5d:a2:71:a0:45:f8:67:29:52:47:
                    86:68:ea:28:9a:71:a1:9a:b5:63:e6:e4:b9:f4:62:
                    74:ea:25:d5:46:8b:8e:80:4d:66:90:a2:4f:60:96:
                    17:e3:62:34:15:ad:91:77:c8:d4:8f:e8:f5:7f:96:
                    f3:32:ba:d8:56:fe:4f:c0:3e:32:0e:bc:cc:00:7a:
                    60:5f:29:11:b3:cc:0e:ef:31:d8:39:9a:af:5a:3b:
                    d7:2e:2e:44:92:af:f3:bc:4b:88:1b:7b:3b:1c:47:
                    30:c4:cf:d4:2d:d7:88:4f:f3:e5:a8:47:05:1c:fa:
                    5d:55:6d:77:9f:56:a2:83:cf:5b:86:96:bb:bd:89:
                    bf:02:9d:33:ee:ac:b6:b2:96:df:a9:31:6d:e8:7c:
                    95:76:7f:1d:fa:8c:ac:14:6f:f9:8f:11:8f:16:a0:
                    27:dc:0d:fd:0e:09:98:28:c5:55:73:92:4c:1c:33:
                    14:8f:b0:bf:07:b4:55:79:b5:1a:6d:c2:14:d6:70:
                    ed:5d:da:47:3e:8a:b4:7a:af:f5:42:22:8c:dc:63:
                    70:07:7c:a6:b4:0a:77:f4:27:a4:05:75:81:ba:13:
                    34:6b:61:10:0b:93:dd:29:38:e8:75:7d:13:12:21:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D6:A4:99:C3:2E:91:99:1F:F5:EE:F2:26:65:69:C1:17:D0:30:9B
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313630303a3a2f34302d3438203d3e20313939373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:90:93:0c:98:19:92:c1:5a:68:6e:92:66:1a:e3:29:59:
         c6:20:e3:a9:5f:c3:e2:2b:8a:56:a5:8b:48:9e:e2:81:57:dc:
         ba:5b:ac:24:f8:2b:6f:70:8d:ed:59:62:f8:73:92:ee:5d:b6:
         ea:65:0d:76:ba:45:c8:80:f6:18:36:d4:90:11:ea:4b:94:1d:
         de:e2:b8:3d:8f:7c:94:9a:65:ba:8d:4c:8b:d9:89:8b:c4:68:
         bf:38:52:7b:1f:f7:1c:3b:56:e6:76:da:f0:72:d1:f4:b0:c0:
         c7:71:28:b1:ba:a3:1c:9d:a1:88:ec:5b:70:71:36:8d:ff:bc:
         6c:24:dd:9f:f6:a6:d3:13:c3:a2:e8:a9:4b:1d:ca:72:ed:b2:
         5c:d6:3a:43:1a:10:56:ee:fd:02:4d:ed:87:3f:b4:ab:09:2b:
         f2:1b:67:29:f6:19:b8:65:94:bf:9b:94:4a:92:c1:d9:b8:b1:
         24:79:2c:fb:9f:e1:f2:08:37:28:85:d6:ce:0f:67:0e:18:0d:
         49:15:d5:4f:d3:6b:df:65:06:c8:35:8d:01:30:20:f2:89:24:
         01:2b:d2:8d:6d:c7:3d:27:ad:a5:9a:46:3d:fa:a5:68:f2:b7:
         b2:56:24:0e:c9:00:d4:76:b7:d4:0a:ef:6f:c1:21:31:6a:6d:
         d7:ef:ea:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----