Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206569.roa
File:                     AS206569.roa (raw, json)
Hash identifier:          3IbgHxc9r/BNLoDkkXgcQbP77BvEx8bl3DgcEHDsOzE=
Subject key identifier:   8E:3B:3F:C4:1B:E9:94:F7:17:CA:09:83:EB:32:0A:D8:6B:B6:F0:C0
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       76E55F1F33E0CBA6899493256E5532323DE3F94B
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206569.roa
Signing time:             Wed 21 Dec 2022 16:56:47 +0000
ROA not before:           Wed 21 Dec 2022 16:51:47 +0000
ROA not after:            Wed 20 Dec 2023 16:56:47 +0000
asID:                     206569
IP address blocks:        2a06:a005:2000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e5:5f:1f:33:e0:cb:a6:89:94:93:25:6e:55:32:32:3d:e3:f9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:47 2022 GMT
            Not After : Dec 20 16:56:47 2023 GMT
        Subject: CN=8E3B3FC41BE994F717CA0983EB320AD86BB6F0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:b6:92:7f:62:d5:99:17:45:af:a5:c1:81:
                    db:aa:cd:7c:d2:63:cb:73:e5:f4:ea:3c:03:5b:4f:
                    90:36:9e:2f:a5:65:6c:3c:85:77:8c:7e:08:11:05:
                    95:b0:be:11:bf:22:37:b8:40:a5:ac:49:56:20:7e:
                    2e:93:72:01:aa:3e:5f:19:87:d1:08:b7:be:d8:5b:
                    a5:a2:19:cb:28:a9:ed:1f:06:d3:5f:40:d2:43:a8:
                    b0:b8:45:63:48:f6:ef:3f:79:d8:35:7f:99:9d:9c:
                    d1:6f:2c:6d:8c:56:69:40:7f:b9:c4:d6:61:cc:de:
                    c9:c5:a8:76:37:bc:96:6e:8d:89:b1:69:bb:80:37:
                    dd:e4:26:0c:21:36:71:1c:e3:c9:01:ff:fa:be:70:
                    cc:ec:e6:cb:73:dd:82:0d:18:93:eb:96:47:bf:43:
                    f2:f0:ce:17:2c:8a:71:44:37:84:c5:3c:70:0f:5b:
                    ca:52:c3:ff:9d:e4:12:d3:98:46:10:d5:82:8b:20:
                    ca:8a:73:3b:08:0c:ff:c4:13:3c:26:60:cb:09:cb:
                    ad:8e:17:2a:45:35:61:70:04:41:23:88:25:e5:5c:
                    3b:ca:7c:e5:d9:09:19:3e:b0:17:f0:ef:80:85:e6:
                    55:ff:26:dd:01:b4:3a:46:53:d5:3c:83:4e:fd:c8:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3B:3F:C4:1B:E9:94:F7:17:CA:09:83:EB:32:0A:D8:6B:B6:F0:C0
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS206569.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2000::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:6e:44:c4:d9:42:3f:89:97:b5:f2:5a:bd:52:4e:e9:89:27:
         41:2e:25:be:c4:5b:04:fe:67:53:18:6a:72:8a:22:de:bb:81:
         c5:3c:29:b1:21:d9:0b:f8:28:93:3b:d8:96:c8:7e:2e:3c:26:
         e5:39:eb:80:4b:fd:27:17:af:ea:52:99:43:33:e7:fc:9a:35:
         e9:2a:69:7a:12:95:4c:8c:f4:e4:14:98:c7:d8:eb:12:a8:9e:
         a7:40:86:64:a2:70:94:53:dd:3d:35:57:d9:71:c2:68:fc:6f:
         4c:a1:9d:8c:97:6d:e1:bb:5e:36:9c:96:72:85:12:0f:c6:cc:
         ad:d9:b1:22:61:cd:6c:9e:e9:2e:4d:f4:4c:3b:7d:0a:49:0f:
         95:34:56:48:c5:87:a1:54:98:50:b2:9f:d9:dd:74:66:dc:70:
         85:ec:9d:8a:9c:d6:23:3b:8c:3a:00:e5:21:d3:30:cb:75:09:
         7b:42:89:af:ad:56:6d:4d:76:2e:27:3a:ff:5d:56:d8:ea:d8:
         32:f3:6a:eb:0e:ef:3a:73:ab:04:22:1f:8e:bd:e3:a2:0a:bb:
         33:b4:92:ba:8b:c3:0e:90:57:f9:1c:96:72:6c:1e:78:a3:90:
         fe:24:b4:ee:4c:52:49:48:51:bb:67:46:68:93:b8:64:7c:28:
         07:ad:37:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----