Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a613030373a3a2f34382d3438203d3e203438353939.roa
File:                     326130373a353463353a613030373a3a2f34382d3438203d3e203438353939.roa (raw, json)
Hash identifier:          0fiLEfp7+b8VVvyERng6lEjRYjdVKy/fCGL+wnEEpiA=
Subject key identifier:   B7:F7:C7:24:29:E4:79:EA:C2:0E:5A:BE:3F:C9:B2:9B:80:F1:B1:F2
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       5E4783733D721748B713DDEF4E349DD453894A6D
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a613030373a3a2f34382d3438203d3e203438353939.roa
Signing time:             Mon 18 Sep 2023 15:32:59 +0000
ROA not before:           Mon 18 Sep 2023 15:27:59 +0000
ROA not after:            Mon 16 Sep 2024 15:32:59 +0000
asID:                     48599
IP address blocks:        2a07:54c5:a007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:47:83:73:3d:72:17:48:b7:13:dd:ef:4e:34:9d:d4:53:89:4a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 18 15:27:59 2023 GMT
            Not After : Sep 16 15:32:59 2024 GMT
        Subject: CN=B7F7C72429E479EAC20E5ABE3FC9B29B80F1B1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:38:b1:c5:1d:c6:32:94:2c:dc:10:6e:5c:
                    3e:94:0e:ef:84:0a:05:30:65:e8:ef:b7:69:07:4d:
                    83:10:5a:3f:a9:0b:b2:7b:68:dd:99:ed:d8:91:3e:
                    05:b1:f2:bb:24:d5:4e:aa:cc:c7:6d:a7:ec:ca:12:
                    da:13:06:8e:38:03:69:62:a2:4f:d3:51:44:34:85:
                    60:15:3e:fb:16:0e:df:f5:62:fa:90:13:e3:41:bb:
                    b3:93:59:f0:26:32:fe:52:8d:f5:5f:d1:35:96:8a:
                    f9:06:ed:74:93:e2:28:6d:6b:63:06:d6:6b:0c:54:
                    08:23:f5:73:0b:92:1b:a1:c9:62:a3:31:f2:aa:2c:
                    c9:80:83:b4:2a:62:55:6f:1f:39:c7:29:ef:a3:7b:
                    5e:17:6d:34:76:59:1d:9d:62:b2:ef:92:d9:9b:7d:
                    86:80:1e:cd:22:38:71:d8:cd:b4:1a:35:0c:1a:a2:
                    10:88:66:de:f6:5a:37:36:11:29:a6:03:f6:dd:85:
                    e1:63:14:bb:33:2d:a8:25:0d:32:e3:7c:78:43:62:
                    ba:d8:48:00:91:de:b7:60:4d:d1:3a:3e:34:7f:76:
                    d2:00:60:8e:46:9b:72:5a:e0:e8:fa:6f:44:ca:f5:
                    57:b2:61:77:18:1f:70:e3:d3:50:b5:c1:94:94:60:
                    74:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F7:C7:24:29:E4:79:EA:C2:0E:5A:BE:3F:C9:B2:9B:80:F1:B1:F2
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a613030373a3a2f34382d3438203d3e203438353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:a007::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:77:24:82:ee:09:72:ee:72:f8:68:18:00:77:1c:29:63:e8:
         15:25:b6:34:fe:5f:11:62:79:ef:97:8b:f4:db:73:6f:1a:19:
         73:69:4c:cb:fb:f9:e1:3b:91:6b:47:78:a3:34:49:a1:82:98:
         cc:b0:29:55:96:78:6f:af:25:f7:96:ba:91:9e:e5:a6:aa:28:
         de:50:19:14:77:36:1a:88:45:db:ad:8c:ae:13:78:3e:3f:a4:
         d7:c2:1e:99:1e:e2:05:07:f4:b3:58:79:8a:6b:b5:c9:84:d1:
         0e:4e:bf:0b:47:c2:e2:17:cd:de:76:f4:3f:9a:69:07:0b:76:
         d4:ad:6b:b6:2a:35:e6:36:f3:79:44:d4:26:9a:ac:72:58:62:
         a9:03:13:1e:fe:0f:b1:46:44:14:e5:e2:3b:87:b1:5b:63:e0:
         b4:4d:19:3f:50:19:06:61:0c:e7:24:23:9b:19:4a:86:e9:e9:
         c1:78:b4:88:bd:fc:70:87:82:1b:25:ae:13:ba:3f:5f:69:cd:
         7a:44:15:c1:9b:57:9e:8c:42:a4:93:00:ab:ee:72:81:41:b5:
         65:7e:0a:12:32:af:48:3a:85:6a:e6:b0:e9:09:42:76:15:9f:
         5f:24:82:f1:b1:3d:1c:a6:97:16:76:6f:d7:77:59:2a:e3:74:
         f4:17:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----