Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS200952.roa
File:                     AS200952.roa (raw, json)
Hash identifier:          SK8fSP7eS3XDomp+lA9NiZUzsQ6oIL6cXyBNfZ3Xy7I=
Subject key identifier:   D2:88:C9:6E:6D:46:BA:3F:EE:2C:F8:38:2C:C0:50:AB:4F:8E:24:71
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       576E12BBA32FAEC533D7560E9959364C2F28FBF2
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS200952.roa
Signing time:             Wed 08 Mar 2023 18:45:19 +0000
ROA not before:           Wed 08 Mar 2023 18:40:19 +0000
ROA not after:            Wed 06 Mar 2024 18:45:19 +0000
asID:                     200952
IP address blocks:        2a05:dfc7:2600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6e:12:bb:a3:2f:ae:c5:33:d7:56:0e:99:59:36:4c:2f:28:fb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:19 2023 GMT
            Not After : Mar  6 18:45:19 2024 GMT
        Subject: CN=D288C96E6D46BA3FEE2CF8382CC050AB4F8E2471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:f4:a6:4d:6e:c4:6e:d9:be:37:e9:01:bc:
                    66:a5:e7:48:42:86:a1:8c:70:06:f3:00:ee:40:ed:
                    81:d1:1d:67:c2:5b:e7:ab:27:ed:3e:e8:ee:aa:24:
                    45:b0:19:f2:94:a2:56:d0:7a:50:47:23:1b:07:50:
                    7d:92:1c:65:e7:10:fa:58:b7:f8:31:93:68:34:11:
                    00:61:80:91:7d:23:b4:9a:db:a0:c9:46:2d:49:f4:
                    6c:94:f8:47:61:d7:6c:e7:39:31:5e:ce:ab:81:9b:
                    8f:46:a9:1e:7c:5a:81:d3:dc:17:6f:a8:22:51:d1:
                    82:01:ee:3d:09:ef:2e:85:79:28:a2:55:f0:5f:4f:
                    41:72:4e:3a:b2:f9:82:47:9b:f4:e7:da:80:a0:89:
                    b1:64:12:99:c2:6f:66:e3:b8:8d:45:5b:96:71:70:
                    55:61:aa:b4:7e:61:24:7f:cf:ea:7f:6b:1b:9f:ff:
                    37:cf:87:8b:8d:d9:1d:bb:b9:d6:6f:c1:1c:ac:5f:
                    1a:4c:1c:3c:c5:3b:83:70:8f:16:fb:d1:41:25:0f:
                    77:2f:fb:a8:7d:8a:8f:e4:4c:36:d2:a1:4f:61:c5:
                    29:e1:ae:1a:3e:79:b3:a1:2e:da:2b:68:bd:d0:2e:
                    b8:ed:09:e8:0a:3c:3d:66:6a:8b:b7:03:aa:3a:1d:
                    9b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:88:C9:6E:6D:46:BA:3F:EE:2C:F8:38:2C:C0:50:AB:4F:8E:24:71
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS200952.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2600::/39

    Signature Algorithm: sha256WithRSAEncryption
         56:b9:6a:d4:13:f8:15:9e:eb:4c:b4:fa:1d:00:d2:44:5a:cd:
         14:64:65:84:f3:92:0b:6a:a4:cb:1c:bc:0d:ae:6d:64:1e:19:
         54:5d:09:fb:d7:20:fd:bb:d8:ff:49:8e:bf:84:9b:ab:e2:5d:
         03:a4:32:03:0b:61:2f:49:82:7d:ab:c9:85:2a:46:23:6c:ad:
         94:91:eb:0a:b1:43:a0:6b:cf:aa:ea:3a:32:3c:48:e2:fc:12:
         df:3f:b6:cf:05:0e:3d:70:df:34:3e:a2:4a:52:e0:13:b5:1c:
         79:6d:17:24:b9:65:ff:e3:4f:01:86:46:26:0d:61:bf:f8:0f:
         52:db:32:cf:58:b3:1b:09:bd:82:dd:98:5a:c2:d3:4d:29:72:
         d5:24:5e:40:86:1a:b4:ad:ed:63:64:d4:2a:89:ee:ca:46:11:
         33:4f:34:7b:77:45:e9:7f:e2:9b:fc:d6:f1:5e:14:fd:a2:b8:
         1e:51:b8:ab:cf:15:ff:ae:da:74:bb:a1:dd:68:c0:a5:17:1e:
         34:ec:ca:79:d3:32:f4:94:6d:23:e8:3f:be:a6:c9:ee:58:eb:
         5b:38:71:69:a7:0b:67:05:23:79:3f:7c:7e:ad:26:67:9b:07:
         98:8f:49:89:86:22:35:85:aa:98:28:28:31:51:52:7b:c0:c8:
         7c:9c:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----