Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS199762.roa
File:                     AS199762.roa (raw, json)
Hash identifier:          XxO5yhs/ytM0PsRefMt2ddTbaD+l2Fg54tmzacUhwFA=
Subject key identifier:   28:00:26:A1:A1:F7:7E:F0:33:93:52:ED:4A:DE:6F:01:20:C5:30:C1
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       1CEF6A483E510B41DE5C74F87CDCB37461EA5408
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS199762.roa
Signing time:             Tue 04 Apr 2023 14:51:20 +0000
ROA not before:           Tue 04 Apr 2023 14:46:20 +0000
ROA not after:            Tue 02 Apr 2024 14:51:20 +0000
asID:                     199762
IP address blocks:        2a06:1287:5400::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ef:6a:48:3e:51:0b:41:de:5c:74:f8:7c:dc:b3:74:61:ea:54:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Apr  4 14:46:20 2023 GMT
            Not After : Apr  2 14:51:20 2024 GMT
        Subject: CN=280026A1A1F77EF0339352ED4ADE6F0120C530C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:37:95:8e:c3:24:2b:f7:d5:00:8e:4d:45:
                    6b:54:4e:a3:5c:5a:27:4f:7a:36:c2:a8:2c:15:a6:
                    bc:66:c9:32:2f:54:92:1d:9e:03:7b:4f:c4:18:93:
                    42:06:d4:c8:85:d5:fa:51:39:3d:c5:3d:08:82:29:
                    8c:e3:6b:63:79:14:86:50:3c:3f:57:b2:20:a2:f8:
                    84:11:31:71:e9:4a:56:3b:88:f4:94:1a:8a:0d:00:
                    e3:52:36:23:36:32:54:7a:83:d2:6b:66:4c:21:67:
                    47:f9:00:c4:0c:cf:e2:07:95:cb:c5:8c:a1:8e:c6:
                    c9:a1:79:77:fb:59:e7:e6:2f:6e:a6:08:aa:29:47:
                    79:58:dd:32:8d:a4:f3:48:0b:f2:78:2b:46:a7:60:
                    40:85:e2:aa:17:74:50:1e:ff:49:62:02:de:e7:3b:
                    a6:48:e9:55:ae:d6:0c:5d:61:99:32:c6:bf:e7:29:
                    9f:41:98:df:d8:7c:fb:07:87:29:ec:13:56:e6:56:
                    4b:7c:ee:ab:aa:3a:2a:6a:ce:10:08:42:23:cb:84:
                    07:8c:ea:44:e9:ca:45:9e:95:83:49:c0:b0:70:89:
                    74:55:e6:f6:13:74:2c:5f:98:8a:32:31:74:00:2e:
                    af:00:4f:db:3a:d2:c4:4a:b8:43:bc:1f:33:14:c0:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:00:26:A1:A1:F7:7E:F0:33:93:52:ED:4A:DE:6F:01:20:C5:30:C1
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS199762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5400::/39

    Signature Algorithm: sha256WithRSAEncryption
         1a:63:7b:3f:96:f8:5b:c2:b5:78:09:02:5a:bb:f0:90:2f:33:
         15:c0:71:ee:21:de:2e:90:54:f7:b4:24:bc:b4:d7:9e:aa:3b:
         ef:84:69:9d:bb:f8:11:00:15:62:09:9e:7d:0b:9c:16:e8:64:
         a5:55:ed:da:3b:92:e9:8f:82:3b:38:f4:2e:8d:ea:21:cb:e4:
         9c:09:fc:d9:90:12:47:0b:e1:51:83:d0:60:98:c8:fc:38:21:
         c9:c6:b2:7c:b1:7d:01:aa:79:0f:d1:f0:46:3e:bd:37:cf:f1:
         0f:32:ab:24:c8:75:0c:5d:17:c4:d4:bb:30:1d:3b:32:ea:f8:
         17:8f:55:c0:cf:77:ab:67:5f:07:30:19:f3:61:a8:c3:11:77:
         dd:f3:75:d4:e1:9f:1a:d2:05:ea:32:04:16:20:e9:e9:5b:ea:
         a4:90:f7:ab:7b:01:9e:1c:18:60:9b:1c:05:ee:ab:e9:08:86:
         b4:b6:ec:22:ec:a4:60:e2:91:a8:dd:7f:da:94:7f:b1:16:27:
         cd:28:79:4b:73:7c:69:47:23:7d:81:e7:28:1b:ee:48:5b:af:
         8e:f2:9e:ca:5a:74:b4:e4:4a:e2:41:42:34:55:7f:34:7d:26:
         05:96:4d:7a:e7:b1:c0:7a:2d:dd:4d:a2:de:d7:3b:16:aa:d4:
         84:88:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----