Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313930303a3a2f34302d3438203d3e203630393030.roa
File:                     326130373a353463353a313930303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier:          ySu/b/J8aDKgRiQOis0QAOxm+l6lnbrOu6beiH0tr7o=
Subject key identifier:   74:B5:32:8B:5E:75:4A:3A:7B:06:58:A3:85:77:A7:90:AA:E8:5A:00
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       76FE5002FF892511A87E895DAD1E1F915A77521C
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313930303a3a2f34302d3438203d3e203630393030.roa
Signing time:             Mon 18 Sep 2023 15:33:03 +0000
ROA not before:           Mon 18 Sep 2023 15:28:03 +0000
ROA not after:            Mon 16 Sep 2024 15:33:03 +0000
asID:                     60900
IP address blocks:        2a07:54c5:1900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fe:50:02:ff:89:25:11:a8:7e:89:5d:ad:1e:1f:91:5a:77:52:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 18 15:28:03 2023 GMT
            Not After : Sep 16 15:33:03 2024 GMT
        Subject: CN=74B5328B5E754A3A7B0658A38577A790AAE85A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:c0:62:e6:0a:87:f1:f7:3e:f9:0c:b9:fb:
                    ad:6a:85:11:d4:d7:c5:87:be:23:ad:7f:ec:e2:59:
                    3f:48:d1:a9:df:7f:fa:98:f3:7b:c4:27:43:b8:86:
                    25:18:ec:ae:ba:98:5e:78:68:88:84:2f:be:51:bd:
                    30:f1:d9:29:a6:7f:51:d4:1b:11:c2:ee:79:30:7a:
                    27:30:20:da:50:6c:9b:f9:80:4e:d7:71:ca:7d:5c:
                    84:af:fd:f1:95:87:ef:8e:14:b4:d6:73:66:90:5d:
                    52:c5:b1:d7:e9:5a:fc:ae:e7:f8:d8:86:7e:35:19:
                    b6:a2:f2:e3:5c:1a:fc:db:11:f4:b1:95:48:fb:59:
                    46:a8:21:f1:12:00:2b:76:51:64:5b:8a:c4:63:dc:
                    d2:0f:fd:d5:7e:e4:05:f5:86:ef:d6:fe:82:94:6e:
                    04:2e:7d:ce:30:f7:02:89:07:d3:8f:3d:73:b6:51:
                    35:27:b1:10:4f:e4:3e:c8:51:ec:c4:4e:bc:54:4a:
                    24:72:2d:5c:21:68:28:fe:30:62:45:52:80:02:1b:
                    d3:2b:04:e0:e1:1e:d8:bd:46:9d:b8:3e:b9:13:dd:
                    7b:5a:90:8c:71:e5:1b:35:18:03:a6:08:14:a4:af:
                    4a:b3:18:a9:b1:9b:ba:bb:29:5a:a5:fc:18:c0:3e:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:32:8B:5E:75:4A:3A:7B:06:58:A3:85:77:A7:90:AA:E8:5A:00
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a313930303a3a2f34302d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:0a:b0:98:61:20:d9:8f:ec:71:d1:7b:34:ea:e3:87:a7:6a:
         81:2c:35:73:ea:d0:32:a4:68:9e:b6:bf:1a:73:4e:a6:8a:97:
         e8:a7:b7:88:63:e7:e9:4a:99:3e:c4:32:b8:9a:36:fe:6f:0c:
         65:cc:d3:9d:8a:5e:e1:4b:d7:ba:13:0b:f8:4c:99:27:3d:70:
         22:c2:68:43:e3:b5:aa:f2:7b:46:07:bb:14:85:6e:64:b0:cf:
         45:0e:5b:73:bf:99:5c:67:e7:94:16:03:ec:a4:c0:e4:80:70:
         26:a8:ec:45:ca:18:e0:16:f0:ce:be:94:c0:18:a9:4a:9b:1d:
         28:c4:7d:4a:62:85:d9:3e:94:bc:7b:61:0d:5b:33:d9:04:3d:
         61:cc:1a:f2:0a:f6:58:8a:a9:52:cc:2e:e1:b1:d5:0f:4c:a8:
         39:15:61:c8:f3:17:c3:69:02:49:c2:41:7f:3f:39:9e:17:7f:
         96:97:4d:00:e0:af:5d:89:01:02:09:4b:47:72:b4:19:12:5c:
         1f:28:38:fb:bd:ee:02:f5:da:b8:16:5e:87:1d:4a:96:a7:7c:
         b1:51:da:3c:34:4c:2f:47:97:be:1f:18:52:83:1b:e7:49:35:
         78:2d:55:12:4b:1e:5b:47:50:5f:03:5f:c5:55:22:4e:76:33:
         2d:8e:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----