Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200766.roa
File:                     AS200766.roa (raw, json)
Hash identifier:          oKyzff7BOiiP9PYY55irv33S64LIFyolwbt7WIKph0g=
Subject key identifier:   AE:6E:7A:09:47:D0:B3:35:DF:FF:DD:2F:D7:76:7C:E8:F1:1B:25:C7
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       07D61D7B0F7C1D0714DFA47F977920B59F24CA91
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200766.roa
Signing time:             Wed 21 Dec 2022 16:56:43 +0000
ROA not before:           Wed 21 Dec 2022 16:51:43 +0000
ROA not after:            Wed 20 Dec 2023 16:56:43 +0000
asID:                     200766
IP address blocks:        2a06:a005:116b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d6:1d:7b:0f:7c:1d:07:14:df:a4:7f:97:79:20:b5:9f:24:ca:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:43 2022 GMT
            Not After : Dec 20 16:56:43 2023 GMT
        Subject: CN=AE6E7A0947D0B335DFFFDD2FD7767CE8F11B25C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:ee:22:66:ff:25:84:04:e0:02:5c:ba:2b:
                    a6:99:b2:c1:51:3e:2a:16:f9:af:be:6b:3a:07:99:
                    05:34:d7:57:0f:a9:3d:9e:ea:aa:e6:fd:3e:3a:84:
                    81:6d:d4:9a:9c:b2:b4:f5:dc:71:c1:f3:77:ad:b6:
                    18:f8:cb:2d:56:ff:7c:d0:65:62:b5:9d:36:84:03:
                    2a:c8:f0:31:29:d0:9a:93:1b:22:91:d9:ed:af:63:
                    a7:70:3f:60:56:01:63:a7:49:54:1f:61:32:f4:56:
                    a1:15:2e:b0:7b:25:a6:3c:d7:11:ba:8b:e7:25:d0:
                    e0:84:67:e7:a9:49:75:1a:d3:ed:e1:84:42:f2:df:
                    d1:ee:e5:f5:f3:ae:72:4a:3f:6b:f6:95:e8:a6:d4:
                    0d:2f:d9:96:71:3e:e5:c0:ee:5c:ca:f8:f4:ec:70:
                    8f:73:03:6b:74:3d:7b:11:f7:2b:35:10:c5:05:f2:
                    ce:0a:6b:f3:66:ea:22:16:88:81:5e:b3:d2:66:8a:
                    0f:00:b4:8d:4c:6c:26:01:7b:21:27:13:7e:6a:1c:
                    61:b8:26:5b:8a:c2:ca:8d:53:61:af:0e:39:4f:b6:
                    0f:b2:a6:a0:53:98:26:d3:f9:54:6e:de:a6:2a:0d:
                    85:c9:87:ab:f3:78:09:8b:ac:fa:14:9d:cc:c8:3a:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6E:7A:09:47:D0:B3:35:DF:FF:DD:2F:D7:76:7C:E8:F1:1B:25:C7
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200766.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:116b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:e3:da:2b:51:af:0a:8e:ea:cd:46:29:2f:16:fa:5e:e3:04:
         9d:70:de:73:5a:60:5c:04:7c:ef:3d:6b:7a:18:3a:db:e3:d5:
         37:45:54:e7:6a:94:b2:7b:16:26:a3:7a:ab:f5:41:d2:7a:69:
         e2:5d:1d:c9:4e:ad:9b:bf:7d:80:23:ac:00:17:7f:46:b2:58:
         e0:db:b8:8c:74:5b:f5:82:c4:1b:e0:5d:06:fc:db:a2:90:c7:
         b5:00:2a:87:dc:81:28:50:5a:46:e6:35:8e:e8:89:a4:45:bf:
         aa:5f:a4:79:8b:45:97:42:b5:f4:64:2b:39:0b:46:af:e9:11:
         6f:9a:38:a4:84:77:e6:9b:28:57:ad:a2:8f:8b:7b:99:42:0d:
         9b:5d:06:08:3e:d4:ba:96:f4:3e:63:7f:b6:37:66:4d:a2:91:
         ee:2f:21:47:e2:b7:01:76:8e:d6:e7:9d:d5:61:55:45:bf:e2:
         f4:90:d2:78:14:e6:01:d0:d7:91:9a:57:e2:2a:41:99:0b:13:
         88:98:de:f5:79:44:97:2c:76:f9:22:fb:82:45:ee:75:77:4a:
         c1:ad:c7:6a:ef:ba:72:64:52:a5:01:11:2e:06:74:12:15:e8:
         d0:21:0d:6a:f0:b3:01:ff:90:64:53:c0:ce:d3:1b:ab:9c:45:
         3e:a3:1c:0e
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUB9Ydew98HQcU36R/l3kgtZ8kypEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDNaFw0yMzEyMjAxNjU2NDNaMDMxMTAvBgNV
BAMTKEFFNkU3QTA5NDdEMEIzMzVERkZGREQyRkQ3NzY3Q0U4RjExQjI1QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsIu4iZv8lhATgAly6K6aZssFR
PioW+a++azoHmQU011cPqT2e6qrm/T46hIFt1JqcsrT13HHB83etthj4yy1W/3zQ
ZWK1nTaEAyrI8DEp0JqTGyKR2e2vY6dwP2BWAWOnSVQfYTL0VqEVLrB7JaY81xG6
i+cl0OCEZ+epSXUa0+3hhELy39Hu5fXzrnJKP2v2leim1A0v2ZZxPuXA7lzK+PTs
cI9zA2t0PXsR9ys1EMUF8s4Ka/Nm6iIWiIFes9Jmig8AtI1MbCYBeyEnE35qHGG4
JluKwsqNU2GvDjlPtg+ypqBTmCbT+VRu3qYqDYXJh6vzeAmLrPoUnczIOsJfAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUrm56CUfQszXf/90v13Z86PEbJccwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAw
NzY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKgagBRFrMA0GCSqGSIb3DQEBCwUAA4IBAQB649orUa8K
jurNRikvFvpe4wSdcN5zWmBcBHzvPWt6GDrb49U3RVTnapSyexYmo3qr9UHSemni
XR3JTq2bv32AI6wAF39Gsljg27iMdFv1gsQb4F0G/NuikMe1ACqH3IEoUFpG5jWO
6ImkRb+qX6R5i0WXQrX0ZCs5C0av6RFvmjikhHfmmyhXraKPi3uZQg2bXQYIPtS6
lvQ+Y3+2N2ZNopHuLyFH4rcBdo7W553VYVVFv+L0kNJ4FOYB0NeRmlfiKkGZCxOI
mN71eUSXLHb5IvuCRe51d0rBrcdq77pyZFKlAREuBnQSFejQIQ1q8LMB/5BkU8DO
0xurnEU+oxwO
-----END CERTIFICATE-----