Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204693.roa
File:                     AS204693.roa (raw, json)
Hash identifier:          YCMnKUXLJPaETROagZHPAGD61Wkup2H47QMekmYmXe8=
Subject key identifier:   1F:69:51:9A:89:87:8F:00:CB:84:A6:77:DD:A3:52:57:FE:C7:88:ED
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       0BBBB1A35A4F872E9D02B8D91047D14075F494A1
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204693.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     204693
IP address blocks:        2a06:a005:ce0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bb:b1:a3:5a:4f:87:2e:9d:02:b8:d9:10:47:d1:40:75:f4:94:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=1F69519A89878F00CB84A677DDA35257FEC788ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:d1:d8:59:95:ed:8b:96:b4:41:75:55:b3:
                    f4:fa:f4:ef:a0:97:e5:67:c1:23:60:cb:e7:f8:8e:
                    49:ee:61:6a:06:09:ff:f6:3f:79:b3:cd:8f:da:52:
                    2a:5c:4e:e1:7d:70:29:da:52:17:f1:ff:d4:bc:21:
                    54:24:69:40:1a:ce:d3:60:d1:80:e6:f6:5c:a8:cf:
                    b9:ef:40:4b:1c:91:50:27:2a:0f:d9:f5:01:2b:9f:
                    d0:4d:59:ce:6a:25:11:2c:ee:3a:73:99:e3:28:e6:
                    10:05:75:29:76:23:2c:97:ac:4e:75:62:67:21:50:
                    25:f9:cb:eb:f6:f9:6c:fc:b3:a0:76:31:8d:27:88:
                    6b:eb:19:a8:51:9b:5a:b7:c3:84:ae:59:0e:4c:94:
                    6d:0b:91:c5:d9:6b:10:dd:78:64:75:30:61:d2:0c:
                    2c:15:66:42:e3:63:71:ec:90:6b:7d:bd:00:d1:83:
                    f3:ac:1a:bc:30:0f:96:2b:8e:5a:2f:d2:c4:94:3a:
                    59:f9:3a:3b:ba:65:47:a5:ce:c6:01:9e:7b:30:2f:
                    aa:d1:f3:31:c4:d6:e9:6c:c0:46:fb:b6:6a:be:4e:
                    14:fc:05:a5:64:54:d8:79:65:a1:d8:c2:4e:a1:f8:
                    22:53:e7:84:83:d9:47:e7:bc:8e:ad:39:8c:14:81:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:69:51:9A:89:87:8F:00:CB:84:A6:77:DD:A3:52:57:FE:C7:88:ED
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204693.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:ce0::/44

    Signature Algorithm: sha256WithRSAEncryption
         df:7d:d7:05:1a:66:29:64:fe:07:96:f2:06:91:51:9a:e3:bc:
         8a:fc:0c:40:4a:66:a4:05:ba:96:fc:e7:a5:97:8a:26:e8:89:
         72:da:c0:cc:73:7a:f5:7d:ad:c3:31:cb:ee:dc:d2:7b:a7:85:
         a9:f7:d5:e6:e6:22:5a:1c:16:9c:53:f0:f9:25:58:a0:01:32:
         db:e3:b7:ef:cf:f8:cd:f4:26:e8:97:7d:ca:f4:d2:33:d3:c0:
         1a:ab:ec:5d:96:23:ea:76:2d:0b:79:95:f8:36:3e:83:28:f7:
         ca:15:16:c1:90:a0:64:79:8e:a4:e9:df:ea:fb:99:50:c8:7d:
         fc:38:27:9c:9c:82:9f:69:76:33:c3:b8:48:b0:89:d4:52:11:
         16:34:3e:f5:5c:2b:a9:c3:ca:2d:bf:72:a4:25:df:a3:58:87:
         d9:6a:4b:d1:e9:97:d3:d3:95:5d:d4:dd:f8:f1:30:15:67:5e:
         ac:0b:7a:6e:14:aa:d7:03:59:66:dd:d5:e0:a0:1e:09:3b:ae:
         59:e4:b6:36:6f:10:da:51:48:f4:b9:e5:e4:74:48:4d:1b:31:
         24:2e:5a:e1:d9:d5:77:cd:ea:df:df:05:f5:e8:d9:bf:18:ba:
         58:53:75:dc:c3:0c:1c:54:7f:24:29:2a:b9:60:73:6a:46:99:
         e0:a9:80:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----