Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207445.roa
File:                     AS207445.roa (raw, json)
Hash identifier:          tugMbmnArQKCK9QMdiraSsOXarglpfbLS2kDVME1mfg=
Subject key identifier:   78:E3:4D:E1:B6:AE:BD:8F:FC:AA:49:A2:57:68:39:17:D5:31:99:86
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       5DDA1D378B0DA92EF532B3EA13D56BA09C099F9D
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207445.roa
Signing time:             Wed 21 Dec 2022 16:56:53 +0000
ROA not before:           Wed 21 Dec 2022 16:51:53 +0000
ROA not after:            Wed 20 Dec 2023 16:56:53 +0000
asID:                     207445
IP address blocks:        2a06:a005:f90::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:da:1d:37:8b:0d:a9:2e:f5:32:b3:ea:13:d5:6b:a0:9c:09:9f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:53 2022 GMT
            Not After : Dec 20 16:56:53 2023 GMT
        Subject: CN=78E34DE1B6AEBD8FFCAA49A257683917D5319986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:33:69:30:50:99:32:59:ab:56:0d:a0:b3:
                    5d:9b:79:6a:ff:1e:b0:b1:5c:cd:1b:76:0b:40:a7:
                    2c:c7:49:b7:eb:e0:40:41:db:d6:32:70:41:dc:ff:
                    88:81:b6:ab:e2:27:3d:e1:9a:77:2c:43:a0:4d:e9:
                    b8:94:aa:0d:96:28:67:58:89:a5:5d:89:4a:ca:f7:
                    c7:e1:7d:e7:bf:75:02:d3:66:e3:8a:b7:87:74:8e:
                    0c:a3:b7:32:2f:fa:ca:44:09:0c:71:ee:5f:b7:5f:
                    cd:ed:0e:4f:8b:06:84:03:f8:70:7a:f0:f9:24:02:
                    25:26:58:d8:c6:70:3f:c5:f3:7c:b0:69:af:c7:8e:
                    07:69:39:ba:8f:32:3f:90:74:0d:4b:e4:69:20:e8:
                    23:9f:d4:d7:6f:50:55:30:95:36:15:6f:0b:7d:51:
                    09:5e:46:08:13:68:ca:6f:eb:52:4c:0e:f3:d7:bc:
                    52:01:48:c7:19:cb:4a:87:e9:e9:8d:c5:7b:25:62:
                    d5:0f:00:32:31:80:bf:3d:90:46:9f:85:6d:e3:72:
                    35:f1:46:68:c4:77:7e:1a:71:c5:b4:cb:a7:e4:48:
                    01:15:08:cd:2e:bb:c4:27:c6:fa:af:a0:65:f1:1e:
                    5b:85:24:fc:01:82:cb:91:76:0f:aa:e1:98:4e:3d:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E3:4D:E1:B6:AE:BD:8F:FC:AA:49:A2:57:68:39:17:D5:31:99:86
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS207445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:f90::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:34:6a:cc:17:f1:1e:5b:f8:53:2b:52:53:38:45:b4:6f:1c:
         d7:85:6d:ab:79:92:88:dd:89:a1:d0:f9:ab:c3:19:57:f2:37:
         f1:0a:82:24:f3:07:e9:fd:d3:b3:63:f4:a5:0e:18:98:46:67:
         ba:7d:1b:45:72:12:8b:1b:15:14:f9:e2:87:e4:72:8d:96:53:
         10:33:f6:2a:ee:ca:86:4d:e6:ea:1f:73:3f:37:67:d9:8d:4d:
         94:47:ad:c2:34:c2:b6:9a:06:a5:8f:d0:7b:9a:52:f5:ad:c5:
         fb:6f:02:d1:e4:43:4d:1a:33:39:fa:f4:4f:d0:9f:5d:0a:fb:
         d5:10:6a:73:62:bf:97:a9:29:8d:fa:a0:60:2e:f8:a8:4c:91:
         ba:0f:62:1a:31:1c:1e:7d:fa:68:23:96:47:15:d9:d7:59:fa:
         85:a1:06:89:2d:cb:d6:41:34:5f:20:fb:15:84:dd:bd:6b:3b:
         65:bc:29:51:4e:e8:4d:ba:50:37:92:2a:f5:12:af:4f:8f:33:
         fb:5b:3d:a7:ad:19:c5:6f:c8:c1:33:e8:e8:53:72:c0:11:0c:
         2e:9d:fb:95:73:52:89:5e:92:13:be:99:81:bc:87:ec:dd:da:
         60:74:44:20:c6:55:5c:5e:6d:c9:a6:ca:bd:56:b2:6a:8e:b8:
         4b:35:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----