Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313730303a3a2f34302d3438203d3e203630393030.roa
File:                     326130373a353463353a313730303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier:          fgJk1SQ0W/AqZLKTpFo3iPcPtZiRxbJ6g9s0FLWMwRk=
Subject key identifier:   78:47:9E:B6:AC:FD:65:C7:33:40:44:3F:24:9E:04:E3:72:FA:39:73
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       127CE2196185715C8AF8B27600B21E3024D3E0E5
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313730303a3a2f34302d3438203d3e203630393030.roa
Signing time:             Mon 18 Sep 2023 15:33:00 +0000
ROA not before:           Mon 18 Sep 2023 15:28:00 +0000
ROA not after:            Mon 16 Sep 2024 15:33:00 +0000
asID:                     60900
IP address blocks:        2a07:54c5:1700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:7c:e2:19:61:85:71:5c:8a:f8:b2:76:00:b2:1e:30:24:d3:e0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 18 15:28:00 2023 GMT
            Not After : Sep 16 15:33:00 2024 GMT
        Subject: CN=78479EB6ACFD65C73340443F249E04E372FA3973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:36:60:ed:f4:ad:30:9e:83:81:0a:0a:05:
                    98:25:5d:83:72:9b:81:01:08:1a:b8:0f:14:52:35:
                    6e:2a:c0:97:83:96:d8:4a:18:70:de:1b:7a:d5:e0:
                    6c:08:30:20:16:08:1e:4c:30:e3:6b:2d:1b:c1:9c:
                    49:23:40:bd:d4:9a:84:84:8d:cf:ba:37:2d:5d:73:
                    14:cc:df:98:a6:b7:23:ba:ab:e4:30:ef:cb:8d:e1:
                    44:07:b6:68:54:40:7e:7f:4b:6e:56:f1:da:f6:0c:
                    52:cb:31:34:d7:9f:24:3c:71:bc:96:6e:10:36:f4:
                    0c:57:ba:38:5c:87:db:de:3c:13:dd:72:d6:62:f1:
                    b5:a3:30:c4:cd:62:da:b9:a1:20:bf:96:cc:55:1e:
                    25:09:1f:3c:7f:69:8d:f7:f4:7b:27:29:78:5e:a2:
                    e9:78:cf:e4:39:9d:23:15:52:9e:e3:13:87:9c:91:
                    06:89:ec:11:6d:b4:72:63:80:db:b0:df:c4:20:cd:
                    b0:80:f2:53:bd:fe:7b:7b:f4:73:77:09:82:3b:b0:
                    f3:aa:c9:2d:40:06:f9:4d:2e:da:b3:7a:91:5c:f2:
                    17:4b:40:fb:6c:96:47:19:e2:5b:70:48:1d:7f:5a:
                    2f:e4:0b:32:3f:d1:b6:47:29:21:13:6e:48:b5:40:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:47:9E:B6:AC:FD:65:C7:33:40:44:3F:24:9E:04:E3:72:FA:39:73
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313730303a3a2f34302d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:cd:1e:87:4c:92:f1:b7:22:6a:a1:65:ca:77:66:ff:c4:ff:
         5a:4f:5d:ac:23:a4:1a:ea:da:2d:ec:fe:5e:00:df:60:c7:21:
         a1:6e:ca:1d:fb:70:17:5b:36:82:45:a0:10:0e:70:30:3a:a0:
         2c:50:67:85:d0:83:10:5e:54:b6:d0:21:7a:1b:a3:b2:71:ef:
         6f:77:35:f3:95:29:bc:80:a6:af:51:10:0d:2a:60:24:dd:53:
         18:5b:b3:c4:b9:80:2e:38:32:f8:51:75:fa:72:f4:e1:f2:bc:
         54:66:bd:b9:17:49:de:7a:cf:d6:77:d5:43:18:c1:1b:27:fa:
         c8:74:3d:84:fa:d4:eb:f8:66:74:8d:d9:25:66:b4:bd:7a:82:
         f5:cf:7f:b6:0a:f7:99:7f:58:d1:5d:01:54:5e:f4:28:b0:f7:
         cf:cb:d7:64:09:22:e9:d6:d0:4e:63:bb:a3:89:7b:9e:12:d8:
         b5:ee:38:31:b5:cf:3f:1a:03:0f:f0:31:26:a5:b2:60:09:fe:
         fd:28:da:22:84:73:a3:0b:3a:2e:39:6c:e9:a1:2a:bf:06:b4:
         2c:b2:b3:b3:d7:30:89:01:3b:0b:a9:e0:1e:eb:2b:84:7d:ff:
         6e:c5:e6:f4:84:5e:cd:45:47:23:ff:e0:9d:b4:ea:80:a2:24:
         92:cc:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----