Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204291.roa
File:                     AS204291.roa (raw, json)
Hash identifier:          7z+uO9ji0TRZOYD910spQBNEISrNG+jBcOratgYiL+M=
Subject key identifier:   46:0C:DA:E4:D5:12:8B:28:41:56:2C:28:9F:20:7E:4E:B9:8B:31:41
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       0F8CC86B2E08D8DBDBBA6923B2A84E99F3F7C7E5
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204291.roa
Signing time:             Wed 21 Dec 2022 16:56:45 +0000
ROA not before:           Wed 21 Dec 2022 16:51:45 +0000
ROA not after:            Wed 20 Dec 2023 16:56:45 +0000
asID:                     204291
IP address blocks:        2a06:a005:1740::/44 maxlen: 48
                          2a06:a005:1750::/44 maxlen: 48
                          2a06:a005:1760::/44 maxlen: 48
                          2a06:a005:1770::/44 maxlen: 48
                          2a06:a005:1780::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8c:c8:6b:2e:08:d8:db:db:ba:69:23:b2:a8:4e:99:f3:f7:c7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:45 2022 GMT
            Not After : Dec 20 16:56:45 2023 GMT
        Subject: CN=460CDAE4D5128B2841562C289F207E4EB98B3141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ba:eb:aa:70:b3:b6:06:0a:5d:2c:39:73:14:
                    b4:64:98:50:5f:91:fb:7d:95:98:f9:29:ec:28:a8:
                    46:1d:1d:ee:9f:aa:a3:d7:38:e1:f5:df:7c:22:9a:
                    3e:6a:52:80:9f:5e:64:b6:0e:05:97:f2:47:38:64:
                    03:34:bd:7e:8f:a2:97:97:0c:34:19:b7:31:a8:51:
                    ac:96:36:2a:a3:1d:b8:be:14:06:9e:de:84:95:a0:
                    50:6c:ef:d7:87:1f:40:13:5b:f5:1b:f3:f1:d2:73:
                    e8:aa:9a:78:5c:79:73:12:f4:38:b7:f2:2d:49:6e:
                    59:6f:2c:c0:01:56:e7:a1:9e:e4:21:2f:b8:d7:60:
                    67:ed:03:81:21:fa:ea:8b:66:c6:7e:9c:3f:60:12:
                    96:71:b5:43:76:9a:60:e2:ef:b5:9c:63:f6:5d:5c:
                    ef:36:5d:30:c1:5a:a1:df:8a:88:bc:a6:88:dd:95:
                    45:1b:a4:26:0c:ac:fc:3a:a0:c3:2d:64:23:ae:8f:
                    68:5e:40:70:22:9b:27:47:d8:c5:47:64:db:00:c9:
                    22:e7:ec:d0:59:76:f8:d1:4b:02:a3:c8:5b:15:50:
                    f6:ed:a0:92:3f:1e:ac:88:68:46:99:3c:a5:e6:5e:
                    cd:e1:7a:ff:19:cd:38:44:31:12:a3:56:ef:de:8f:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0C:DA:E4:D5:12:8B:28:41:56:2C:28:9F:20:7E:4E:B9:8B:31:41
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204291.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1740::-2a06:a005:178f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         04:11:36:2d:d9:38:ad:bb:51:a9:2b:d9:da:a8:44:9c:f5:45:
         0e:35:74:b5:7b:20:32:70:96:64:7f:9f:83:d4:88:d4:ab:12:
         d7:c4:0b:8a:c5:c7:c4:85:64:18:f7:95:3d:ef:b8:a3:06:f6:
         d0:01:a3:7c:14:c9:cd:c3:d1:3c:1c:01:95:9a:9d:04:13:d8:
         e0:08:0b:94:cd:1b:79:b8:dd:ac:74:c3:e5:29:6f:70:09:50:
         6a:f5:fc:37:f2:be:72:47:fc:84:88:1b:9a:cc:0d:c7:e6:8e:
         07:5c:e6:ec:c4:81:3c:b6:84:e8:60:a8:aa:94:ec:34:e8:19:
         00:07:48:1d:e2:27:0c:80:f0:30:d5:ba:c8:4f:e4:57:c3:09:
         48:9b:20:27:d1:a7:ef:97:53:34:93:f4:e4:e7:cb:d2:a7:4a:
         f9:65:19:73:92:e0:4b:e8:ed:e0:ba:6a:08:bd:42:26:e6:03:
         94:4e:3b:b5:88:3f:a1:8b:48:39:ea:07:b3:9f:d3:83:f5:bf:
         1e:ff:b8:85:1d:2d:f4:60:fa:77:9e:80:7c:c6:04:fa:8d:bc:
         0e:aa:86:44:86:43:ea:b9:74:89:c8:f0:c8:bc:11:38:18:6a:
         f3:69:ce:81:00:b2:01:2d:81:91:1e:2e:cd:85:01:3d:e1:cd:
         e8:c9:3a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----