Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313630303a3a2f34302d3438203d3e20323033383637.roa
File:                     326130373a353463353a313630303a3a2f34302d3438203d3e20323033383637.roa (raw, json)
Hash identifier:          SyzuD4OjKFIxuWFn/rpi8tt3qUvwj0T8NsazMmqgIXM=
Subject key identifier:   A4:52:94:D7:54:D0:89:C7:CD:F2:AB:D5:7A:12:72:79:97:A4:70:BA
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       42B2F8D95A12F801A1E761E355C7FB4522BC8BB0
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313630303a3a2f34302d3438203d3e20323033383637.roa
Signing time:             Mon 18 Sep 2023 15:33:01 +0000
ROA not before:           Mon 18 Sep 2023 15:28:01 +0000
ROA not after:            Mon 16 Sep 2024 15:33:01 +0000
asID:                     203867
IP address blocks:        2a07:54c5:1600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b2:f8:d9:5a:12:f8:01:a1:e7:61:e3:55:c7:fb:45:22:bc:8b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 18 15:28:01 2023 GMT
            Not After : Sep 16 15:33:01 2024 GMT
        Subject: CN=A45294D754D089C7CDF2ABD57A12727997A470BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:02:a5:d2:03:58:dc:fa:e8:bd:c6:ce:ef:
                    e9:d8:f6:b3:38:01:e1:bd:bc:07:43:40:a8:65:a7:
                    2d:a2:ce:9c:32:de:de:32:1b:54:60:7f:7a:80:e2:
                    e9:f0:c6:43:7d:65:97:2b:0a:9b:96:1e:c7:e8:19:
                    68:86:35:5b:3e:36:cf:c2:d4:03:28:43:29:23:e9:
                    0c:b4:f0:da:e2:a0:2b:3e:2a:6d:f3:d5:54:bc:f3:
                    88:a9:ab:10:ed:6f:74:82:24:2f:df:2d:4b:62:73:
                    2f:23:ae:65:ab:47:3d:3a:35:73:c3:a3:3b:e2:38:
                    a3:1b:8b:95:e4:d9:52:c8:5b:54:72:08:55:d8:da:
                    af:d7:ff:51:8c:be:ab:d8:fb:dd:20:4d:dc:d1:ce:
                    af:e0:b4:5f:9a:45:90:32:2a:5e:33:61:78:75:6a:
                    58:dd:a5:8c:b8:c5:ef:3b:d8:0f:2d:df:5a:df:b1:
                    d0:8a:69:e7:72:1e:8b:8c:13:e3:40:a5:6e:1e:41:
                    bd:9e:11:76:e1:0d:77:62:b8:eb:1c:d5:5b:f2:9e:
                    44:da:de:24:6d:ba:56:59:f6:e3:c6:ce:67:b7:c7:
                    bf:5b:f4:7e:3b:55:60:37:0a:17:0f:e2:0a:0d:91:
                    f5:51:b1:f4:8b:53:b5:45:47:05:1c:dd:60:55:70:
                    df:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:94:D7:54:D0:89:C7:CD:F2:AB:D5:7A:12:72:79:97:A4:70:BA
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313630303a3a2f34302d3438203d3e20323033383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:a9:71:57:65:b6:43:29:d6:9c:1e:f3:63:7a:cc:f4:cc:dc:
         1b:80:05:f7:22:78:27:4b:00:70:19:73:b4:ca:2d:2a:ac:d7:
         25:96:fb:54:a3:7d:bc:1e:30:c5:95:fc:bc:a8:f9:fd:27:b6:
         22:dc:00:60:8b:63:e5:3d:b2:4c:58:b8:87:45:dc:60:04:81:
         74:49:30:ec:b4:cf:3b:50:44:71:35:5d:49:6f:f6:ae:1f:d4:
         8f:01:00:b8:d2:21:b2:00:b8:9b:0d:6e:e4:9e:72:30:9d:b2:
         c7:d6:22:79:f8:d1:a0:23:0a:7a:de:ac:2f:8e:22:c2:54:0f:
         c1:8d:95:de:f0:41:2a:92:6c:58:b4:d0:a3:68:44:f3:30:25:
         ee:c6:ad:78:c9:34:39:cc:d2:6e:4a:4d:ea:68:8c:67:37:dd:
         a8:27:63:54:14:53:a6:70:f2:13:c6:97:79:bb:eb:8f:60:92:
         60:1b:49:8c:38:d4:df:10:0f:42:5a:23:88:ba:20:f1:51:6f:
         16:95:55:cf:80:78:93:5a:d2:32:18:6e:ac:e4:ea:74:b3:90:
         2b:f9:ee:b3:66:b6:0c:0b:cf:d5:52:27:65:38:e8:77:c8:9d:
         61:e1:d3:4e:c6:b7:8a:7a:31:ac:e7:20:0f:d7:fb:b9:77:1c:
         1d:65:11:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----