Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202340.roa
File:                     AS202340.roa (raw, json)
Hash identifier:          SbdhprRTfdgl+G2Edh+Z1B5SgcLFlWl3bvb86eZLsUI=
Subject key identifier:   1B:84:99:96:04:1D:B0:B9:BF:2F:CB:9D:42:17:2B:D0:62:32:1E:8A
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       411E5611F81D6560BB4A44A736A9300201207C00
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202340.roa
Signing time:             Wed 21 Dec 2022 16:56:43 +0000
ROA not before:           Wed 21 Dec 2022 16:51:43 +0000
ROA not after:            Wed 20 Dec 2023 16:56:43 +0000
asID:                     202340
IP address blocks:        2a06:a005:45c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1e:56:11:f8:1d:65:60:bb:4a:44:a7:36:a9:30:02:01:20:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:43 2022 GMT
            Not After : Dec 20 16:56:43 2023 GMT
        Subject: CN=1B849996041DB0B9BF2FCB9D42172BD062321E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:37:55:62:a8:4b:b1:59:b7:ff:25:18:b4:
                    13:c4:8a:fa:cc:86:0a:2a:07:cf:a2:25:a6:18:5d:
                    47:e7:0c:17:54:4c:6f:38:9e:89:84:3b:de:99:3e:
                    71:3a:1c:d3:29:63:34:0b:4c:7a:1f:a1:cc:5f:81:
                    ed:5e:ee:e8:97:16:db:5f:0d:f6:dd:aa:da:33:55:
                    24:56:c3:dd:68:4e:30:fe:0d:59:80:3d:7b:46:31:
                    b2:21:ae:42:42:8c:99:ac:17:d2:a3:fa:14:69:a0:
                    fc:c9:b3:41:43:f6:da:41:5b:e9:8b:fd:8f:87:a8:
                    25:48:e7:d4:b6:43:fa:eb:dc:39:3d:e8:9b:73:93:
                    e8:7d:48:1f:ef:50:9d:ea:17:7d:52:02:f5:1f:97:
                    ca:c1:50:48:cf:c2:c0:ff:b5:9a:77:20:2f:a8:cd:
                    66:d9:1c:cf:1d:05:6b:17:92:9e:2d:61:ad:b0:60:
                    ef:dc:de:47:43:bc:cd:4b:51:65:37:a9:dd:06:6d:
                    63:0b:dc:47:2d:a2:3b:0f:18:a7:11:70:52:83:8d:
                    d8:0d:08:10:3c:77:ec:27:70:32:f1:1d:96:b0:e0:
                    f5:b5:53:2a:e8:90:25:fd:8e:f8:31:5d:8c:22:f2:
                    b0:47:c7:ec:10:e3:27:7c:83:cd:82:eb:26:e5:d4:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:84:99:96:04:1D:B0:B9:BF:2F:CB:9D:42:17:2B:D0:62:32:1E:8A
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202340.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:45c::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:02:49:f3:4e:c1:bc:0d:25:36:85:f6:6e:72:ec:2e:e2:
         a9:2e:e4:33:25:d4:f0:75:bc:a1:cb:15:9d:f6:33:74:f5:f8:
         90:f0:4c:59:36:14:b7:00:10:44:5d:ef:7f:d9:21:de:f2:db:
         a0:a4:ae:ef:bb:8d:8a:47:51:dd:87:6e:74:33:58:2c:c8:31:
         a4:d4:92:13:b1:05:14:d9:01:e6:d3:db:1b:26:62:e9:6f:dd:
         93:5e:c4:74:77:67:13:9b:ba:f7:24:38:19:27:13:ee:97:9d:
         fc:3d:70:cc:6e:11:e8:eb:d5:f0:e5:19:3c:e0:99:d1:a6:05:
         23:37:c9:da:7d:00:79:23:db:26:d1:23:8e:a3:2b:d2:1f:66:
         b5:c7:fc:45:2e:90:96:8e:84:23:08:ac:5e:ad:52:ce:0f:b1:
         e6:fa:5d:9b:b1:9f:ab:8c:1c:6d:51:83:69:8e:b8:2a:d0:9b:
         04:48:a5:c9:2c:c4:a6:a6:25:64:b1:ce:8d:6e:d8:f5:06:40:
         89:39:71:a4:fd:25:36:04:f3:9e:d0:ce:27:3b:64:eb:84:e9:
         ec:c2:d6:75:31:36:f9:69:2d:a9:d7:55:23:8c:0a:9c:7a:0d:
         aa:d9:12:94:76:a6:2b:98:ec:36:b0:8a:6e:bd:a7:a4:29:b7:
         a5:2d:02:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----