Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204446.roa
File:                     AS204446.roa (raw, json)
Hash identifier:          XQ5LvXTxfU3/9jcfdqMoAYXl6PeoTg/fYLfBnK4M9Aw=
Subject key identifier:   8B:E1:78:CB:A2:79:7A:85:96:4A:17:5E:55:9E:F9:D8:C0:3A:A3:6D
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       368913B913657AAA5157D8A8504DEAD86AE845E0
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204446.roa
Signing time:             Wed 28 Dec 2022 23:05:21 +0000
ROA not before:           Wed 28 Dec 2022 23:00:21 +0000
ROA not after:            Wed 27 Dec 2023 23:05:21 +0000
asID:                     204446
IP address blocks:        2a06:a005:a20::/44 maxlen: 48
                          2a06:a005:1320::/44 maxlen: 48
                          2a06:a005:15d0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:89:13:b9:13:65:7a:aa:51:57:d8:a8:50:4d:ea:d8:6a:e8:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 28 23:00:21 2022 GMT
            Not After : Dec 27 23:05:21 2023 GMT
        Subject: CN=8BE178CBA2797A85964A175E559EF9D8C03AA36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:cc:0e:28:d4:27:24:6c:47:fb:97:54:33:
                    17:b6:91:3f:bd:ac:25:c1:52:17:b3:e4:82:4a:eb:
                    ff:09:38:d6:58:33:52:ea:6d:9c:71:64:7f:0f:c5:
                    5e:18:ab:b3:8e:46:a0:ae:68:9f:5c:9f:84:dd:f5:
                    15:da:7b:04:2e:07:49:a0:56:ac:94:7d:d5:1e:01:
                    52:e6:19:2e:15:d1:16:b9:a8:c0:98:8e:a7:4a:2c:
                    4d:14:30:6f:f4:a2:dc:a9:f1:5b:29:61:f4:df:12:
                    1a:d3:1a:a0:4c:e1:83:c1:f7:40:d3:75:aa:aa:80:
                    66:e5:df:ce:21:4c:2c:10:d8:b4:77:3b:c4:54:46:
                    81:e9:a9:e6:a5:e0:04:25:a9:15:5e:c6:35:ad:be:
                    0e:01:63:18:c3:46:9e:0e:64:cb:2f:a2:0a:c0:06:
                    c5:46:1c:1d:1d:da:a5:ee:48:85:3c:46:b1:14:29:
                    19:03:94:77:da:7b:42:41:c8:1f:b2:2a:fd:0c:25:
                    3e:62:03:28:02:75:e1:ee:d8:39:9a:3d:6a:88:f2:
                    22:1b:1e:18:52:3a:7b:65:4d:86:4a:66:b9:7d:4d:
                    ae:3b:9f:a7:25:7c:d6:3a:d2:ef:8b:ec:ff:4c:84:
                    34:fe:d4:a8:83:fe:cf:79:94:6b:7f:e0:0b:95:9e:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:78:CB:A2:79:7A:85:96:4A:17:5E:55:9E:F9:D8:C0:3A:A3:6D
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204446.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a20::/44
                  2a06:a005:1320::/44
                  2a06:a005:15d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d8:7a:1a:86:4c:bc:6a:3f:7b:a0:48:74:7c:ba:9a:16:68:b1:
         91:21:e2:a6:65:12:c4:4c:ce:2a:70:3f:c2:38:0f:43:51:c8:
         eb:f4:7b:e5:9f:c2:5f:37:a5:e4:41:dc:92:9a:24:80:2e:95:
         68:af:83:ba:cb:17:52:cc:ff:88:d6:a5:db:77:2a:f0:d0:78:
         ff:4d:c6:26:e7:31:51:1f:89:62:66:bc:93:30:6c:4c:5d:17:
         cb:33:5b:3a:e1:77:1f:5a:78:2b:fb:a8:e3:1c:b3:9b:5f:68:
         97:b9:39:aa:ba:b3:1a:0e:36:5b:3e:1c:08:27:3d:dc:3e:77:
         38:7d:43:03:39:3f:4b:c1:03:b1:bc:8c:5d:7c:3b:06:e0:e5:
         06:c4:20:d5:1e:da:ed:c7:23:52:a1:9b:af:6c:da:cc:c4:60:
         ba:7c:66:5a:ac:55:9b:de:7d:7b:c2:ba:28:5b:e2:38:31:26:
         89:f9:f3:4f:e4:43:b0:f5:8b:a4:3d:57:99:0f:50:60:3c:62:
         73:de:66:b9:b3:d5:5c:96:f9:49:f8:3a:c3:0b:f7:58:af:20:
         50:87:e3:69:a0:35:ca:e4:6c:9c:dd:3b:7a:46:1e:03:fb:8e:
         53:19:24:90:68:af:60:66:ba:57:b4:f6:1c:00:85:da:c2:70:
         59:4a:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----