Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210825.roa
File:                     AS210825.roa (raw, json)
Hash identifier:          tRVnug+PcQVz+xMZQAqtnrEo8kuK/ZCWts2zk3PrBYs=
Subject key identifier:   82:CE:3D:9B:F2:A4:DD:E7:7A:65:67:D2:1F:83:54:C2:4D:72:81:22
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       07A8F4964A898CD740D118646442362B20FB570F
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210825.roa
Signing time:             Wed 21 Dec 2022 16:56:49 +0000
ROA not before:           Wed 21 Dec 2022 16:51:49 +0000
ROA not after:            Wed 20 Dec 2023 16:56:49 +0000
asID:                     210825
IP address blocks:        2a06:a005:5a1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a8:f4:96:4a:89:8c:d7:40:d1:18:64:64:42:36:2b:20:fb:57:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:49 2022 GMT
            Not After : Dec 20 16:56:49 2023 GMT
        Subject: CN=82CE3D9BF2A4DDE77A6567D21F8354C24D728122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:9c:9f:20:02:12:aa:fe:32:ac:46:f1:1e:
                    09:7a:f8:92:bc:9f:33:9c:72:15:d2:ac:5d:29:27:
                    c2:5b:48:d0:c6:5b:44:50:ef:38:67:35:f4:01:6a:
                    4e:69:a5:5f:73:5f:a6:69:1f:e9:ba:38:97:85:1c:
                    70:4b:04:29:1c:25:da:39:8f:f6:f8:fc:6c:8a:fc:
                    80:b2:be:4a:6c:b3:70:c3:74:cf:7b:b7:c0:83:bd:
                    a2:ab:9c:cd:23:9e:bc:11:d5:3f:50:26:3e:16:e3:
                    bc:f5:54:30:6a:59:32:d1:9a:fc:84:18:ed:5a:b3:
                    34:c1:2f:0b:c6:2b:2b:1e:a9:59:75:36:22:f3:b0:
                    b2:6a:9f:64:68:8b:d6:04:00:bd:ca:92:be:57:c2:
                    2a:11:37:38:d9:0c:31:73:89:16:37:5e:9d:28:d5:
                    07:db:18:26:79:b4:f5:b4:da:18:50:12:2f:24:4c:
                    cb:70:89:78:cd:5b:28:b7:7b:d9:92:d8:e9:5f:68:
                    66:5e:68:13:cf:61:73:0d:1b:67:35:7e:39:d0:97:
                    8f:3c:ce:08:9b:85:91:3c:ac:12:5d:76:df:f7:85:
                    ee:23:2c:2d:10:5a:a9:0b:3f:29:a8:37:34:fb:62:
                    4c:16:4f:ee:eb:5c:d7:d1:26:1e:5b:15:a4:e6:e4:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:3D:9B:F2:A4:DD:E7:7A:65:67:D2:1F:83:54:C2:4D:72:81:22
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210825.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:34:c1:3e:f2:97:7d:d8:32:15:c8:b3:0b:d5:04:7f:82:b6:
         2f:79:ff:b5:30:6e:3d:f4:60:6d:2c:fc:a6:07:6b:83:20:7a:
         4b:f5:05:51:9d:c7:14:ee:88:ff:7f:1f:c6:e1:7b:09:3f:18:
         4b:75:0a:95:72:eb:5f:89:96:31:5a:06:78:c6:2c:a2:8d:15:
         29:3f:d5:87:12:9f:bb:dd:a5:e6:52:86:0d:0b:94:ef:a2:48:
         13:81:c3:92:04:36:68:8d:b1:95:8e:f6:78:d6:b8:d7:2c:3b:
         78:c5:dc:01:ed:86:a6:a0:4d:96:e8:02:b3:b1:fb:13:64:60:
         06:dc:a3:47:6a:89:aa:46:51:e0:04:35:b7:6b:3f:45:22:82:
         b4:08:1a:90:c0:82:78:e9:ef:09:35:94:50:5b:14:aa:2c:ba:
         ab:8d:ea:63:e2:fc:75:18:2c:aa:f8:08:59:4a:b3:63:18:1c:
         c7:5f:94:3c:af:8a:f2:ae:b2:85:11:c3:68:fd:3e:56:a5:38:
         99:45:8e:76:40:d0:96:4a:5d:20:76:5a:f7:70:7c:4e:92:ec:
         a6:2c:84:ee:0c:6e:9a:bb:00:54:68:c3:9e:53:07:c3:49:1d:
         f1:3b:59:91:55:8e:7a:6d:b3:97:db:df:b7:98:08:ac:09:15:
         12:00:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----