Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206216.roa
File:                     AS206216.roa (raw, json)
Hash identifier:          x+uFdI4qJYr2CmFlQOkForldaVyFibIpNUU5bYQAg9M=
Subject key identifier:   24:43:27:7A:68:42:5D:79:AE:02:93:1E:6C:BE:8F:0F:41:9F:69:E2
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       10ADF379EF2DD7DA12137D0DDB38BC35CD9A8D3E
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206216.roa
Signing time:             Wed 21 Dec 2022 16:56:48 +0000
ROA not before:           Wed 21 Dec 2022 16:51:48 +0000
ROA not after:            Wed 20 Dec 2023 16:56:48 +0000
asID:                     206216
IP address blocks:        2a06:a005:4d1::/48 maxlen: 48
                          2a06:a005:853::/48 maxlen: 48
                          2a06:a005:1d51::/48 maxlen: 48
                          2a06:a005:1d53::/48 maxlen: 48
                          2a06:a005:1d58::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ad:f3:79:ef:2d:d7:da:12:13:7d:0d:db:38:bc:35:cd:9a:8d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:48 2022 GMT
            Not After : Dec 20 16:56:48 2023 GMT
        Subject: CN=2443277A68425D79AE02931E6CBE8F0F419F69E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:c5:69:14:2c:ab:40:f1:ed:e8:5e:bb:dd:
                    95:08:23:83:0a:ac:f9:12:6d:e4:66:ee:8d:ba:e7:
                    dc:aa:99:d8:85:b2:f1:33:e4:d5:bc:f9:71:2d:3e:
                    6a:d1:4a:09:3c:39:f9:ed:22:56:b5:96:f3:df:67:
                    e3:0c:68:1b:80:3d:63:13:79:54:33:e5:b2:9f:a6:
                    63:bf:53:01:ff:eb:8a:df:62:8b:14:e7:01:3a:e1:
                    e4:f3:47:44:3a:26:17:c6:5b:ab:46:2a:68:00:c7:
                    11:2c:2d:91:95:44:8e:9c:cb:35:27:49:56:0c:02:
                    87:37:63:26:ac:a1:81:1f:0b:7a:df:eb:5f:ae:7b:
                    d8:c6:59:d7:39:a9:b0:33:e0:a3:70:d1:f3:da:ce:
                    bc:bc:4f:81:d1:4e:78:63:93:91:91:0c:bd:8d:8a:
                    07:58:e0:e3:f7:58:6f:4b:de:a4:a7:51:60:2e:39:
                    84:5b:d0:21:70:d1:a6:bd:bb:e7:6b:fc:fa:7c:9f:
                    ab:d5:e3:7d:e8:ca:5e:60:05:31:e8:ff:79:76:25:
                    b3:e6:e6:24:36:60:54:68:a3:a7:39:10:63:5f:04:
                    6a:7f:1a:ee:29:29:23:7c:28:2f:97:18:f7:2c:16:
                    ca:8f:c6:bd:b8:b1:1e:79:51:2c:04:0b:6e:a0:cb:
                    cc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:43:27:7A:68:42:5D:79:AE:02:93:1E:6C:BE:8F:0F:41:9F:69:E2
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206216.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d1::/48
                  2a06:a005:853::/48
                  2a06:a005:1d51::/48
                  2a06:a005:1d53::/48
                  2a06:a005:1d58::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:21:61:96:d9:6b:4c:3c:42:eb:27:1d:b5:1d:bf:30:80:06:
         b9:c1:32:fe:18:9b:a2:e5:d4:fa:ca:4d:82:d8:f7:e8:af:bf:
         ae:d2:f9:ff:1d:10:9e:40:8f:22:79:df:d2:5f:3d:fe:de:bb:
         0e:3c:84:00:0f:c9:20:b4:6e:80:b9:57:36:61:6e:d7:6d:ed:
         79:cd:06:af:38:3a:0c:91:7a:8b:55:5d:35:2e:88:2c:a3:37:
         ae:0b:1e:b0:99:1f:25:fa:2f:08:2b:5b:dc:3f:1b:15:bb:f4:
         0a:e4:0f:5c:84:78:03:77:4c:af:9d:35:81:68:76:9d:01:dc:
         f9:3c:ce:26:c7:58:40:8f:14:b0:2b:07:50:1d:9b:d9:80:d8:
         67:c2:36:3c:fa:45:e5:7a:f8:21:9d:86:77:79:93:ec:e4:f3:
         e9:42:29:cf:3e:af:1e:88:9a:34:94:ea:5b:92:d8:cb:16:51:
         49:1b:37:ee:86:77:df:dd:4a:c3:05:9d:80:fb:ff:7b:05:71:
         7b:1b:ad:a0:2e:e6:57:b0:9a:d0:69:c2:46:ac:da:46:14:f5:
         af:70:8b:e4:2b:23:79:71:d3:0d:50:e9:59:53:30:44:d0:28:
         fe:2b:10:f9:3e:8a:21:7e:50:69:7d:1b:72:3e:b5:5e:51:63:
         4b:d6:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----