Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a613030393a3a2f34382d3438203d3e203539393933.roa
File:                     326130373a353463353a613030393a3a2f34382d3438203d3e203539393933.roa (raw, json)
Hash identifier:          fDIpMWb2mBWBLWgfWmEkGxIVnbCQvVvbWacxMI5kJic=
Subject key identifier:   7B:25:0A:6B:98:34:9B:EF:A8:4B:30:8B:8F:38:94:9F:CD:C4:B9:53
Certificate issuer:       /CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
Certificate serial:       09548B936490C2B6708D9D4F2E469C50F000E5D9
Authority key identifier: F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a613030393a3a2f34382d3438203d3e203539393933.roa
Signing time:             Mon 18 Sep 2023 15:33:00 +0000
ROA not before:           Mon 18 Sep 2023 15:28:00 +0000
ROA not after:            Mon 16 Sep 2024 15:33:00 +0000
asID:                     59993
IP address blocks:        2a07:54c5:a009::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:54:8b:93:64:90:c2:b6:70:8d:9d:4f:2e:46:9c:50:f0:00:e5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB
        Validity
            Not Before: Sep 18 15:28:00 2023 GMT
            Not After : Sep 16 15:33:00 2024 GMT
        Subject: CN=7B250A6B98349BEFA84B308B8F38949FCDC4B953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:31:ef:10:a9:b7:85:87:d3:f2:74:a7:bc:
                    c6:b9:ef:d2:d5:56:d4:83:a1:91:8b:e0:83:70:9c:
                    41:87:e7:63:39:3c:7c:60:51:29:b2:b1:49:04:6d:
                    95:42:bb:f0:61:65:a0:fc:ae:51:c9:eb:1e:15:6c:
                    a5:37:50:33:0b:e5:96:95:f0:2a:29:57:26:0e:cb:
                    d5:ef:d5:c8:61:cb:97:9b:fc:8f:c9:6b:5e:3a:4e:
                    21:98:c9:b8:12:a0:43:45:54:f4:12:ea:02:d2:21:
                    29:e1:b1:1d:f8:c9:f4:08:fd:9f:79:12:eb:87:6d:
                    fd:f8:d0:da:37:78:64:de:29:b3:f7:39:ef:7c:9d:
                    b9:ce:a0:87:ad:3a:c8:f8:7f:85:a1:44:5b:a4:1f:
                    37:4c:e1:24:66:1a:72:c4:d0:df:e1:73:ea:d0:9a:
                    28:9b:28:70:43:ea:55:9f:e4:b2:a2:5e:86:50:35:
                    31:24:4e:a0:58:28:84:cb:44:be:82:0e:3a:bb:4f:
                    76:2b:a1:87:33:76:8f:13:4a:4f:1b:91:98:b8:d7:
                    15:c9:6b:85:22:18:17:db:44:d9:97:60:e3:04:92:
                    a5:47:20:8a:60:4d:52:19:66:ae:a1:0c:8e:e3:62:
                    de:3f:46:09:25:0b:28:f7:e0:4b:56:a0:1d:5c:25:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:25:0A:6B:98:34:9B:EF:A8:4B:30:8B:8F:38:94:9F:CD:C4:B9:53
            X509v3 Authority Key Identifier:
                keyid:F3:64:8E:FD:78:D6:BE:1E:E2:CE:BC:E8:91:40:A2:F2:D1:45:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F3648EFD78D6BE1EE2CEBCE89140A2F2D14570CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/16/326130373a353463353a613030393a3a2f34382d3438203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:a009::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:00:ca:0d:46:0a:8d:db:5e:7a:44:8c:43:fd:6b:a7:45:f7:
         87:32:50:fe:ef:c1:99:37:ab:3a:92:76:6a:38:87:65:34:8d:
         fe:f2:54:ae:1a:b7:fe:76:11:9f:c5:f0:d8:8b:ac:ef:56:3a:
         35:4e:2d:e2:3a:9a:ee:4d:f8:3c:76:2a:9d:f0:b6:61:00:13:
         c7:c1:36:3a:e1:0a:65:fa:e2:87:65:29:34:95:30:b5:26:37:
         96:31:e9:66:15:3b:93:a5:bc:06:ab:7f:53:bf:21:df:12:af:
         a8:c2:ea:46:6f:85:a4:28:bb:91:17:29:01:f5:bf:4c:df:11:
         8f:b3:07:8b:16:0c:2e:00:68:6f:b9:8e:cd:54:ca:fb:d1:70:
         29:61:94:b1:67:f8:c2:16:cb:46:d6:8a:55:e7:8c:41:07:f8:
         7d:56:c8:0e:27:6f:fa:16:08:6f:5a:ed:73:a9:24:cf:88:cb:
         98:b9:9f:fc:b6:b4:40:89:68:b3:33:b6:3f:5e:a3:0a:21:17:
         6a:d4:03:f4:ef:7b:59:dd:2c:db:d6:c1:64:fa:51:17:2f:54:
         bc:1e:ee:51:2f:29:51:4e:fe:6a:f6:3a:3d:5b:f5:a0:c2:5f:
         b0:ec:5b:c3:34:f3:45:cd:19:43:3c:62:13:e1:20:f8:e1:8a:
         cc:d3:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----