Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202939.roa
File:                     AS202939.roa (raw, json)
Hash identifier:          zT08XhLx5/P8FEVtrV31hPO5D6phFQsAvbfX2wrwI6A=
Subject key identifier:   8E:14:A1:EE:E9:F7:C0:9B:87:EC:B8:51:05:F1:E1:39:C7:82:A1:7D
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       61CB132B06E73156D8D4DDE18665B6CF1F20A78F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202939.roa
Signing time:             Wed 21 Dec 2022 16:56:55 +0000
ROA not before:           Wed 21 Dec 2022 16:51:55 +0000
ROA not after:            Wed 20 Dec 2023 16:56:55 +0000
asID:                     202939
IP address blocks:        2a06:a005:1ba0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cb:13:2b:06:e7:31:56:d8:d4:dd:e1:86:65:b6:cf:1f:20:a7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:55 2022 GMT
            Not After : Dec 20 16:56:55 2023 GMT
        Subject: CN=8E14A1EEE9F7C09B87ECB85105F1E139C782A17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:21:56:45:af:16:ec:01:ba:07:dc:18:bc:fc:
                    d3:16:90:e6:77:4f:92:6e:48:21:1c:5a:18:51:49:
                    68:14:67:ae:e8:09:c2:ec:c5:be:22:af:f5:96:65:
                    ad:d6:cb:d6:9b:d6:03:42:eb:8b:df:48:91:47:e3:
                    c0:57:78:4b:8c:22:ea:b8:f7:b8:f5:c3:c1:c1:7f:
                    32:f9:a3:a2:e2:11:90:91:9f:2c:d5:dd:10:39:ec:
                    0e:51:73:73:bb:88:ce:c5:fc:55:69:18:04:b1:d6:
                    e3:ba:b5:d0:11:40:d9:76:70:98:b6:e4:5e:7a:c6:
                    03:37:92:5d:28:16:70:bf:b7:49:27:01:62:92:1f:
                    aa:19:c5:06:46:bb:3d:eb:a8:42:a9:88:d7:8a:8e:
                    3e:08:fd:d9:88:b0:5a:17:0f:cc:9d:f3:c7:21:45:
                    f9:2c:00:06:b8:e0:53:19:ef:51:d9:c7:1a:0f:93:
                    7c:7a:b4:19:19:02:f8:7e:5b:74:49:e5:dc:98:8d:
                    3b:a3:a9:d8:d1:aa:36:2e:4a:ec:be:f6:7f:d7:bd:
                    d3:78:85:89:27:71:a6:e1:a9:7f:c5:34:bd:84:5d:
                    51:82:c6:54:ea:ac:54:44:c7:a1:5f:80:31:ae:89:
                    06:7b:52:56:73:71:c9:71:1f:8f:a9:af:2a:e5:2a:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:A1:EE:E9:F7:C0:9B:87:EC:B8:51:05:F1:E1:39:C7:82:A1:7D
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS202939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1ba0::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:54:a5:5d:8a:72:38:44:49:51:27:d6:09:73:b4:69:c0:8c:
         29:0f:54:9e:2d:3f:9c:e4:a0:2c:da:2f:83:c2:91:11:40:99:
         af:e0:cc:7c:48:85:e0:c9:d2:48:39:9d:7f:44:d9:7a:ba:d8:
         4c:5b:e5:e2:67:73:93:13:3f:b4:33:42:b9:7e:b8:7a:fa:4b:
         e2:6f:84:4f:19:f0:45:f4:b4:d8:69:58:c3:15:6b:1c:2f:01:
         4c:3d:6b:56:2c:fb:56:ed:76:f2:86:f7:bb:a1:64:3f:8a:87:
         a8:1b:38:1d:97:bd:03:7a:c7:08:b4:b8:b6:29:54:c5:ba:31:
         fd:52:66:92:8d:20:4b:3a:4a:82:fa:78:c5:9d:1c:d3:4b:84:
         78:51:55:1e:58:f0:03:d7:17:dd:25:19:16:96:a2:dc:49:75:
         29:b0:3b:ea:44:22:42:ca:fd:a4:c7:7b:ed:ca:96:a3:f6:a8:
         16:46:bd:9d:a0:15:82:63:0f:1a:cd:dc:25:54:37:ce:93:30:
         81:88:84:ec:c7:85:0f:da:27:18:fb:2e:d4:ae:f5:11:59:8f:
         35:e5:26:37:58:b0:3a:9d:6a:d0:89:6b:2c:6e:28:b6:10:34:
         9a:5e:49:57:6d:90:61:25:ad:35:94:fa:cc:50:33:8a:52:9f:
         99:ed:31:ba
-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIUYcsTKwbnMVbY1N3hhmW2zx8gp48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTVaFw0yMzEyMjAxNjU2NTVaMDMxMTAvBgNV
BAMTKDhFMTRBMUVFRTlGN0MwOUI4N0VDQjg1MTA1RjFFMTM5Qzc4MkExN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjIVZFrxbsAboH3Bi8/NMWkOZ3
T5JuSCEcWhhRSWgUZ67oCcLsxb4ir/WWZa3Wy9ab1gNC64vfSJFH48BXeEuMIuq4
97j1w8HBfzL5o6LiEZCRnyzV3RA57A5Rc3O7iM7F/FVpGASx1uO6tdARQNl2cJi2
5F56xgM3kl0oFnC/t0knAWKSH6oZxQZGuz3rqEKpiNeKjj4I/dmIsFoXD8yd88ch
RfksAAa44FMZ71HZxxoPk3x6tBkZAvh+W3RJ5dyYjTujqdjRqjYuSuy+9n/XvdN4
hYkncabhqX/FNL2EXVGCxlTqrFREx6FfgDGuiQZ7UlZzcclxH4+pryrlKhHLAgMB
AAGjggG/MIIBuzAdBgNVHQ4EFgQUjhSh7un3wJuH7LhRBfHhOceCoX0wHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjAy
OTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcEKgagBRugMA0GCSqGSIb3DQEBCwUAA4IBAQAIVKVdinI4
RElRJ9YJc7RpwIwpD1SeLT+c5KAs2i+DwpERQJmv4Mx8SIXgydJIOZ1/RNl6uthM
W+XiZ3OTEz+0M0K5frh6+kvib4RPGfBF9LTYaVjDFWscLwFMPWtWLPtW7Xbyhve7
oWQ/ioeoGzgdl70DescItLi2KVTFujH9UmaSjSBLOkqC+njFnRzTS4R4UVUeWPAD
1xfdJRkWlqLcSXUpsDvqRCJCyv2kx3vtypaj9qgWRr2doBWCYw8azdwlVDfOkzCB
iITsx4UP2icY+y7UrvURWY815SY3WLA6nWrQiWssbii2EDSaXklXbZBhJa01lPrM
UDOKUp+Z7TG6
-----END CERTIFICATE-----