Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211869.roa
File:                     AS211869.roa (raw, json)
Hash identifier:          tMW4baCYV6Bc+47uE6aCEmjBRGtWtsUYKTM0kkYKkUY=
Subject key identifier:   21:AF:88:65:2D:52:5C:A0:93:66:7F:E5:5A:88:13:BF:FE:75:CF:DC
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       0C19CC3B3418953644967F9CA4DE918D78011AA3
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211869.roa
Signing time:             Wed 21 Dec 2022 16:56:49 +0000
ROA not before:           Wed 21 Dec 2022 16:51:49 +0000
ROA not after:            Wed 20 Dec 2023 16:56:49 +0000
asID:                     211869
IP address blocks:        2a06:a005:458::/48 maxlen: 48
                          2a06:a005:459::/48 maxlen: 48
                          2a06:a005:1300::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:19:cc:3b:34:18:95:36:44:96:7f:9c:a4:de:91:8d:78:01:1a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:49 2022 GMT
            Not After : Dec 20 16:56:49 2023 GMT
        Subject: CN=21AF88652D525CA093667FE55A8813BFFE75CFDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1d:dc:86:be:d5:97:47:6a:2d:d5:03:1c:09:
                    a2:32:bb:f2:e2:2f:a9:e0:ac:00:1f:8e:6b:93:12:
                    60:6b:cf:fe:0c:ff:05:55:c7:6f:dd:f4:95:51:4a:
                    8f:ba:50:90:85:d6:c2:67:fd:57:e8:f5:ec:93:98:
                    30:cb:f7:e8:61:6c:16:6e:e5:13:5a:1a:1a:92:db:
                    7a:78:76:d1:80:7d:11:dc:03:db:10:db:f8:60:62:
                    6c:21:c0:41:98:ea:3b:b0:62:8c:df:50:db:f5:6e:
                    40:cf:7d:1b:fd:35:8b:4d:1d:05:3d:e2:e9:31:b0:
                    a2:23:f6:78:7c:79:23:c7:32:8c:08:e3:d4:8b:54:
                    c6:11:a8:94:5a:b3:27:4e:b2:d3:89:1a:3f:77:6e:
                    74:1f:91:79:76:8b:f8:b6:c2:1e:7f:fd:69:cb:c1:
                    12:cf:28:72:b1:7f:51:ff:02:99:0a:84:48:b7:a2:
                    86:ae:7e:f9:ec:f5:ac:9d:8d:71:e7:2f:60:34:8c:
                    e6:9b:a6:db:45:99:2b:b0:47:e4:48:a3:89:90:9d:
                    ae:b7:1c:2f:15:7e:c9:c0:df:3e:25:4e:8d:28:3c:
                    00:af:00:66:e6:88:25:29:9b:c9:83:68:4a:7f:d6:
                    44:6e:d1:a4:4d:6f:20:fd:b0:de:d6:58:22:cc:44:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AF:88:65:2D:52:5C:A0:93:66:7F:E5:5A:88:13:BF:FE:75:CF:DC
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211869.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:458::/47
                  2a06:a005:1300::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:9a:f6:e7:14:c2:44:4b:f1:c3:72:e7:30:98:21:97:c7:b9:
         87:9c:f9:99:ec:d1:c9:d2:7b:c1:22:9d:9b:a5:32:1c:2e:ab:
         ce:b7:dd:91:db:71:66:5d:85:42:ca:ee:ba:7c:cc:85:de:b9:
         31:6c:43:68:cc:9f:28:37:18:a7:67:65:b2:d3:ba:66:4b:55:
         84:2a:3e:19:df:10:e0:48:52:08:ac:dd:40:bf:4a:b1:5c:d4:
         79:25:7c:5d:e2:a3:f0:51:53:bb:0c:73:c6:39:e5:ed:bf:f3:
         b7:df:26:7d:7f:cf:4b:df:ab:07:dd:86:50:66:41:f9:ea:40:
         b5:3d:3e:98:eb:5b:ed:86:7f:06:46:e8:aa:40:00:68:4f:51:
         8a:23:fa:ad:e8:96:8a:64:93:b7:a7:83:44:f2:39:70:54:f4:
         f6:88:23:fe:f3:17:3c:b7:56:4f:25:7c:7d:f3:f6:6e:cc:c5:
         56:97:33:18:b6:fc:0b:ba:11:3f:fc:72:e4:64:19:fd:f1:97:
         64:8e:0d:3f:7a:b2:d1:ce:dc:e6:25:9d:fb:90:f1:78:73:3f:
         79:90:c9:0c:14:6c:22:9c:41:e8:f0:aa:97:14:f4:bb:36:c4:
         06:9a:ce:6c:b4:5e:55:2a:3b:6c:63:d2:13:c8:69:1e:17:dd:
         a0:26:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----