Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS199459.roa
File:                     AS199459.roa (raw, json)
Hash identifier:          jAOp50vva0rvtNfzDVrwK8j/k7D25nZhwVKxtoVrJmE=
Subject key identifier:   BD:77:9E:30:18:14:4D:3C:76:29:EB:D8:68:B4:5B:F4:B7:03:3F:88
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       320AEC6D519DAC3062BC73D85C20CF0458B2D3F3
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS199459.roa
Signing time:             Tue 04 Apr 2023 14:33:58 +0000
ROA not before:           Tue 04 Apr 2023 14:28:58 +0000
ROA not after:            Tue 02 Apr 2024 14:33:58 +0000
asID:                     199459
IP address blocks:        2a06:1287:8800::/39 maxlen: 48
                          2a06:1287:aa00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0a:ec:6d:51:9d:ac:30:62:bc:73:d8:5c:20:cf:04:58:b2:d3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Apr  4 14:28:58 2023 GMT
            Not After : Apr  2 14:33:58 2024 GMT
        Subject: CN=BD779E3018144D3C7629EBD868B45BF4B7033F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:58:11:dd:86:bd:47:f0:c2:28:47:07:36:
                    8a:40:2e:91:ed:b9:2a:60:7b:5e:5f:ea:b6:4a:3c:
                    ac:cb:97:d6:71:d4:6d:ab:bc:bd:d2:87:f8:02:13:
                    2e:65:2c:e5:01:a0:11:4f:92:95:83:02:52:7a:7a:
                    e2:8a:37:56:a3:c0:45:c7:5c:f8:57:83:79:42:5c:
                    b4:0d:71:a1:e9:e8:c6:6a:35:7d:48:c7:6f:2c:15:
                    4f:cf:2b:8b:db:19:7e:4c:76:81:47:6f:91:87:ad:
                    28:44:db:e2:63:12:98:78:41:5f:11:4e:28:fe:89:
                    2f:f3:e9:82:cb:79:59:2d:91:1c:be:ce:05:2d:89:
                    bd:b8:a5:c8:03:01:71:e7:e7:af:61:fd:8b:75:09:
                    51:98:65:5b:e1:c6:ef:73:a7:4d:5c:4d:f9:de:3b:
                    9d:da:15:d9:ba:ff:a8:49:a9:d4:e7:36:24:2d:05:
                    ae:f6:07:42:05:45:cb:6b:66:11:bb:b8:c4:93:62:
                    80:18:65:4a:56:66:f7:b3:8d:6f:72:4a:19:df:1a:
                    63:d8:6e:44:f3:45:a9:6d:9b:0f:b9:9e:09:15:e6:
                    ab:cc:4e:f3:9a:e7:0b:17:e9:71:f8:47:2c:1d:4a:
                    1e:8a:f7:b4:fb:71:ac:8e:56:d2:cb:7e:12:c0:dd:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:77:9E:30:18:14:4D:3C:76:29:EB:D8:68:B4:5B:F4:B7:03:3F:88
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS199459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:8800::/39
                  2a06:1287:aa00::/39

    Signature Algorithm: sha256WithRSAEncryption
         1e:06:b4:6a:35:37:13:75:e8:f2:1c:09:5c:17:c6:49:75:28:
         5c:1c:72:01:c2:12:aa:fd:d8:94:bb:a8:bd:ae:9a:d1:f5:6a:
         dc:13:7d:d0:51:29:8d:e0:d4:6e:1e:0e:43:af:30:1a:3a:35:
         e9:f2:65:3b:a2:c2:e4:be:e0:a2:5d:c9:33:f5:39:e5:d0:b8:
         b6:71:fa:e4:91:89:44:8d:0e:a5:4f:72:9a:34:d3:ea:d6:9f:
         17:11:99:48:8e:a4:3d:c1:49:1b:6f:59:47:6f:63:72:b0:b9:
         29:f6:78:67:06:34:bd:51:e1:fb:15:60:18:db:63:50:bf:2f:
         d1:75:06:47:3c:7f:42:01:d0:0f:eb:5c:db:8f:24:ce:3e:26:
         5d:15:52:13:2c:1f:c1:bf:8b:6d:e9:f9:19:cb:cb:32:c7:3b:
         7d:b0:8a:b0:6d:c5:8f:2e:c4:bf:19:36:53:3a:81:3c:cf:8a:
         bc:30:29:fd:50:8d:45:46:52:74:e1:27:9d:95:8b:2e:f1:d0:
         52:6f:1c:9d:5f:64:d2:eb:b3:d7:23:96:df:49:be:f3:ac:ed:
         07:ff:e1:66:e9:fd:48:16:19:67:5e:9e:ed:65:49:a6:3e:35:
         01:a9:2d:05:d6:63:2c:f0:67:5c:c8:84:1a:30:05:06:31:6c:
         5b:89:01:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----