Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203333.roa
File:                     AS203333.roa (raw, json)
Hash identifier:          HeNuMVG5oHurJaPHt37l/1ls5NNlGvW8j4BeP49DLg8=
Subject key identifier:   61:AA:C6:15:A8:EF:0B:71:91:93:77:44:61:DD:44:1B:19:AC:43:28
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       2B92F2BC30BC423F247342F01E2F0A423AC92ECA
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203333.roa
Signing time:             Wed 21 Dec 2022 16:56:52 +0000
ROA not before:           Wed 21 Dec 2022 16:51:52 +0000
ROA not after:            Wed 20 Dec 2023 16:56:52 +0000
asID:                     203333
IP address blocks:        2a06:a005:d25::/48 maxlen: 48
                          2a06:a005:1860::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:92:f2:bc:30:bc:42:3f:24:73:42:f0:1e:2f:0a:42:3a:c9:2e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:52 2022 GMT
            Not After : Dec 20 16:56:52 2023 GMT
        Subject: CN=61AAC615A8EF0B719193774461DD441B19AC4328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:9a:37:9b:a8:11:08:11:51:e7:38:1e:fa:
                    24:72:c9:48:5b:51:03:16:63:0b:9b:d2:57:5c:0a:
                    f4:a3:9f:bc:fd:47:47:ca:02:4d:42:b0:36:e9:59:
                    f0:aa:82:52:50:0a:9d:16:52:ce:31:40:90:af:c7:
                    28:bf:ed:3c:ed:ba:52:0d:d1:2f:bf:89:db:ad:5f:
                    52:f7:ae:38:63:5a:b7:52:d9:29:b0:cf:82:01:13:
                    d7:7d:97:87:f4:d1:fe:f2:ef:a5:d8:01:9c:4a:a7:
                    76:da:8d:f8:22:f9:0d:e0:b1:0d:a0:0f:e4:50:06:
                    fe:be:9e:6c:43:4f:7c:81:96:3d:4c:22:37:c3:4f:
                    ab:01:2e:a6:7a:ac:13:a4:13:f8:30:6e:cc:de:5b:
                    f5:2f:f0:dd:4c:6d:6b:a6:6a:f1:fc:29:21:24:c9:
                    2f:0a:06:52:24:b8:5d:fb:fd:30:7f:c8:83:f1:1c:
                    98:fe:e3:22:2c:8e:5b:68:1d:94:f2:80:9b:25:69:
                    43:b6:be:70:16:21:45:df:3e:6b:4e:66:f2:4a:bd:
                    04:c3:2b:51:b4:89:5b:93:16:90:2e:66:57:51:9e:
                    8b:29:5b:08:fb:20:48:06:dd:1e:e6:47:ac:e9:0b:
                    79:cb:24:e5:ca:81:3b:72:3f:41:74:e0:5c:4b:e6:
                    56:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:C6:15:A8:EF:0B:71:91:93:77:44:61:DD:44:1B:19:AC:43:28
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS203333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d25::/48
                  2a06:a005:1860::/44

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:9f:87:e6:ff:76:fb:ab:26:02:4a:98:6a:ba:1e:28:fb:
         e3:0c:9c:81:c6:bc:80:51:51:fb:a2:33:9b:86:e0:a0:2e:0b:
         4b:a9:44:ed:c1:ce:f2:3b:e8:6a:85:09:0d:01:f9:d7:7f:23:
         9c:4c:fb:a6:99:32:df:ba:41:94:ad:be:dc:9a:41:be:db:cf:
         d7:3b:01:ae:49:ba:98:3e:6c:b3:cc:cf:ed:ad:4f:8b:ef:94:
         6a:db:28:51:b4:3d:ec:12:a5:86:58:4d:aa:b3:8a:46:26:87:
         ae:51:db:7a:6b:a2:98:a7:49:64:a5:68:2c:42:76:12:2d:42:
         78:e9:e6:a8:6d:58:de:24:86:c9:dd:94:44:71:af:db:99:37:
         8d:99:85:68:99:d8:ac:0c:2e:37:cd:f8:28:43:87:d0:c9:65:
         e2:df:48:14:17:ef:5b:b7:e7:a6:6f:5b:81:ba:b6:14:ea:e2:
         f3:3b:25:d7:76:01:0c:d8:fd:05:78:4e:8d:e8:84:ca:35:06:
         6f:4b:63:27:30:4e:49:92:07:db:14:fa:44:f3:63:4b:56:33:
         2e:2b:a4:fc:b9:3d:39:7b:81:24:8a:e6:70:44:84:72:1f:fc:
         5a:f9:2f:dc:9b:6c:b6:52:d2:49:2a:b2:48:0c:57:2e:e4:b3:
         9b:48:21:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----