Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a613030383a3a2f34382d3438203d3e20323136343632.roa
File:                     326130373a353463353a613030383a3a2f34382d3438203d3e20323136343632.roa (raw, json)
Hash identifier:          SozwuZKkvonmVHDDOyKVWFxRmdHkyTxRFvMVPBtLZcA=
Subject key identifier:   D1:83:20:B9:10:C1:02:57:7A:C4:A9:7B:6B:3C:06:69:3D:56:08:8E
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       85E2CA266C74AFDBC04C8C5DD9865D75A78D7D
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a613030383a3a2f34382d3438203d3e20323136343632.roa
Signing time:             Sun 24 Sep 2023 12:22:50 +0000
ROA not before:           Sun 24 Sep 2023 12:17:50 +0000
ROA not after:            Sun 22 Sep 2024 12:22:50 +0000
asID:                     216462
IP address blocks:        2a07:54c5:a008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            85:e2:ca:26:6c:74:af:db:c0:4c:8c:5d:d9:86:5d:75:a7:8d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 24 12:17:50 2023 GMT
            Not After : Sep 22 12:22:50 2024 GMT
        Subject: CN=D18320B910C102577AC4A97B6B3C06693D56088E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:19:0f:dc:4a:be:cb:ae:00:20:60:f6:24:
                    6b:f4:51:7b:0e:15:b7:79:99:3b:f1:10:ee:29:68:
                    73:48:c4:21:c0:57:99:89:0d:f7:37:3b:22:96:c4:
                    dc:2a:06:75:c7:84:e5:62:54:8d:a3:58:e7:84:83:
                    27:37:dd:3a:45:42:b6:30:df:c4:f5:fc:f4:6f:11:
                    51:8b:30:bd:43:57:a9:ed:60:35:12:5d:00:85:5b:
                    2b:3b:75:ed:a6:16:1d:41:2e:fb:e4:69:80:98:4d:
                    c8:f4:0c:28:6d:22:5a:e1:fe:8e:67:d3:41:33:99:
                    b4:c9:5a:2f:0f:90:af:ce:db:4d:52:59:a2:f6:3b:
                    5e:54:06:91:5a:4b:3b:27:9a:42:a2:61:d9:d1:71:
                    bc:31:44:bf:6a:1c:01:1c:e2:42:4e:34:e7:44:49:
                    3b:2b:e1:18:ec:a8:7c:a0:f8:7f:5e:b5:36:25:a3:
                    3e:f1:4f:46:63:f4:f0:0f:58:cc:dd:80:ce:71:1a:
                    3e:05:44:c6:c3:87:ad:fd:3a:6d:76:42:a2:5c:5f:
                    31:74:fe:af:67:7c:85:3e:ee:16:59:be:7f:3f:36:
                    c2:2e:4e:2a:55:72:17:36:f4:df:25:44:0a:5a:b4:
                    0e:62:74:46:71:b5:c3:dc:49:32:0e:4b:58:7b:b8:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:83:20:B9:10:C1:02:57:7A:C4:A9:7B:6B:3C:06:69:3D:56:08:8E
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a613030383a3a2f34382d3438203d3e20323136343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:a008::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:ad:f3:31:78:f8:27:a2:da:c5:cb:f0:2f:77:9a:84:18:9c:
         09:56:fb:dc:13:b9:b4:29:c0:28:30:87:76:22:12:a4:94:2e:
         01:5f:69:53:ba:c8:3c:7f:2a:de:57:42:1d:e1:48:a1:ed:99:
         23:b9:13:e9:fe:a4:97:dd:2f:34:90:e4:da:99:53:ec:0a:b2:
         fe:f6:8a:93:82:bc:23:d9:49:5a:07:55:b1:a9:33:b4:ec:63:
         aa:70:2c:b2:21:d5:07:b5:ad:73:d0:5d:42:b3:5a:a3:f3:c7:
         b6:e2:80:cf:d3:a8:51:72:56:ad:12:9c:e4:89:36:16:7b:5c:
         09:e5:76:90:30:e5:2e:ef:6a:06:93:a4:e2:44:0a:26:64:f2:
         54:cf:39:bb:8c:f2:19:ad:b7:36:63:bf:26:5a:04:e6:33:43:
         e7:3d:c0:4a:46:35:98:1f:f1:b9:f0:38:04:2c:d4:a5:ea:21:
         fb:c5:8f:d5:b9:b6:0d:b5:fe:1a:8d:90:4f:79:71:9a:07:c6:
         c6:3b:6c:41:29:36:47:04:d1:a9:3d:0f:6d:a0:1f:69:28:b2:
         f7:9c:89:3f:ca:ac:06:8b:5c:4b:48:90:90:79:6d:50:bf:ed:
         a9:21:19:9b:26:4b:f6:6c:a8:42:a4:2d:53:ed:14:c4:90:4b:
         2a:a8:cb:d0
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUAIXiyiZsdK/bwEyMXdmGXXWnjX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM2NDhFRkQ3OEQ2QkUxRUUyQ0VCQ0U4OTE0MEEyRjJE
MTQ1NzBDQjAeFw0yMzA5MjQxMjE3NTBaFw0yNDA5MjIxMjIyNTBaMDMxMTAvBgNV
BAMTKEQxODMyMEI5MTBDMTAyNTc3QUM0QTk3QjZCM0MwNjY5M0Q1NjA4OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1RkP3Eq+y64AIGD2JGv0UXsO
Fbd5mTvxEO4paHNIxCHAV5mJDfc3OyKWxNwqBnXHhOViVI2jWOeEgyc33TpFQrYw
38T1/PRvEVGLML1DV6ntYDUSXQCFWys7de2mFh1BLvvkaYCYTcj0DChtIlrh/o5n
00EzmbTJWi8PkK/O201SWaL2O15UBpFaSzsnmkKiYdnRcbwxRL9qHAEc4kJONOdE
STsr4RjsqHyg+H9etTYloz7xT0Zj9PAPWMzdgM5xGj4FRMbDh639Om12QqJcXzF0
/q9nfIU+7hZZvn8/NsIuTipVchc29N8lRApatA5idEZxtcPcSTIOS1h7uKZhAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU0YMguRDBAld6xKl7azwGaT1WCI4wHwYDVR0j
BBgwFoAU82SO/XjWvh7izrzokUCi8tFFcMswDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xNi9GMzY0OEVGRDc4RDZCRTFFRTJDRUJDRTg5MTQwQTJGMkQxNDU3MENC
LmNybDCBgAYIKwYBBQUHAQEEdDByMHAGCCsGAQUFBzAChmRyc3luYzovL3Jwa2ku
emFwcGllaG9zdC5jb20vcmVwby9OT1JUSExBWUVSX1VJRF8xMzg2NC8wL0YzNjQ4
RUZENzhENkJFMUVFMkNFQkNFODkxNDBBMkYyRDE0NTcwQ0IuY2VyMIG4BggrBgEF
BQcBCwSBqzCBqDCBpQYIKwYBBQUHMAuGgZhyc3luYzovL3JzeW5jLnBhYXMucnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRm
YWVhNGIxYmMxMi8xNi8zMjYxMzAzNzNhMzUzNDYzMzUzYTYxMzAzMDM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMTM2MzQzNjMyLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUxaAI
MA0GCSqGSIb3DQEBCwUAA4IBAQCNrfMxePgnotrFy/Avd5qEGJwJVvvcE7m0KcAo
MId2IhKklC4BX2lTusg8fyreV0Id4Uih7ZkjuRPp/qSX3S80kOTamVPsCrL+9oqT
grwj2UlaB1WxqTO07GOqcCyyIdUHta1z0F1Cs1qj88e24oDP06hRclatEpzkiTYW
e1wJ5XaQMOUu72oGk6TiRAomZPJUzzm7jPIZrbc2Y78mWgTmM0PnPcBKRjWYH/G5
8DgELNSl6iH7xY/VubYNtf4ajZBPeXGaB8bGO2xBKTZHBNGpPQ9toB9pKLL3nIk/
yqwGi1xLSJCQeW1Qv+2pIRmbJkv2bKhCpC1T7RTEkEsqqMvQ
-----END CERTIFICATE-----