Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202559.roa
File:                     AS202559.roa (raw, json)
Hash identifier:          GCRWDZkaGRVGD4Ty4sigbycf6AggmFFeFbclrFZNfug=
Subject key identifier:   D0:25:EC:C6:EB:CB:69:51:79:DC:24:A8:F8:44:28:E5:0B:5A:B9:9B
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       6EAB58696E5AFCE51312947DFE8087E7DE5F4AFE
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202559.roa
Signing time:             Wed 08 Mar 2023 18:45:29 +0000
ROA not before:           Wed 08 Mar 2023 18:40:29 +0000
ROA not after:            Wed 06 Mar 2024 18:45:29 +0000
asID:                     202559
IP address blocks:        2a05:dfc7:5000::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ab:58:69:6e:5a:fc:e5:13:12:94:7d:fe:80:87:e7:de:5f:4a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:29 2023 GMT
            Not After : Mar  6 18:45:29 2024 GMT
        Subject: CN=D025ECC6EBCB695179DC24A8F84428E50B5AB99B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:24:0c:bd:87:71:2f:5d:84:bd:49:b9:7d:
                    f1:75:67:28:61:0c:a5:e6:80:f5:4f:9a:d8:72:23:
                    2b:ad:32:0c:f9:2d:5d:48:3b:39:cd:d3:de:9d:0b:
                    0a:a9:27:ed:85:33:bc:71:ae:a1:bc:d0:41:dc:4c:
                    18:e8:b1:7a:24:2c:6f:02:bd:7c:05:58:7c:b6:fd:
                    43:31:39:00:ad:44:e4:29:52:d9:62:a2:99:e4:c0:
                    a7:1b:71:c7:9a:ab:8f:85:9b:fa:bc:12:c5:96:64:
                    39:de:d3:ee:89:5d:0e:5b:a5:ee:8f:ee:8c:2f:3b:
                    6b:10:08:a3:9c:f3:04:1a:fe:5c:04:2c:8a:e6:53:
                    20:d6:da:b0:a7:4c:f8:30:07:3b:99:18:0a:6a:78:
                    fe:b5:fa:ca:a2:07:ca:8b:2d:63:52:0f:f3:ad:b8:
                    c3:b5:51:32:22:b4:5c:df:68:46:ee:57:bd:bc:80:
                    59:df:0d:bc:09:49:2a:41:9d:a6:c1:f9:4e:fa:ed:
                    a4:36:90:46:2f:23:61:ce:35:6b:83:e2:65:08:c1:
                    f7:94:56:97:b7:7f:5b:e5:66:6f:e3:5c:4d:c5:32:
                    fe:ee:53:13:07:5c:97:99:06:6e:5d:90:66:e0:4d:
                    e6:a2:90:8a:50:d1:bc:61:9e:b4:50:c6:ba:5c:e1:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:25:EC:C6:EB:CB:69:51:79:DC:24:A8:F8:44:28:E5:0B:5A:B9:9B
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202559.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:5000::/39

    Signature Algorithm: sha256WithRSAEncryption
         9b:a4:dd:9a:43:1e:65:bd:26:27:b9:de:62:bc:82:4e:1c:f1:
         67:e0:0c:53:68:ec:31:22:08:cc:5d:56:8d:57:fc:2c:52:4d:
         1b:38:f2:1b:9a:79:c7:78:51:bd:ea:dc:8d:a5:3e:01:7d:1a:
         a3:98:3e:c4:83:01:30:05:6a:09:df:f2:25:23:2f:8f:33:df:
         b3:e9:ee:68:e6:84:34:0f:d8:36:07:a3:73:bc:b8:14:a2:09:
         1e:74:a4:95:bd:96:af:67:b7:69:b4:d1:b2:a4:63:5b:7a:fc:
         54:5c:5f:bc:3d:60:2e:91:e0:9f:05:7e:f1:2e:7b:1f:3a:27:
         d0:ea:3e:0a:3b:3c:ea:38:f6:32:cf:a5:13:0e:16:af:a6:30:
         3d:86:1c:44:38:c9:8f:e9:a4:03:12:e6:ff:bb:01:14:40:9e:
         dc:53:7b:06:f4:2d:31:4e:28:5c:59:52:11:6a:b6:80:e1:e5:
         d2:63:31:91:23:d8:89:cc:13:5b:f0:fe:cb:21:58:8c:c4:cd:
         15:90:76:b7:6a:be:c5:2e:2d:ee:76:f1:bd:84:69:99:e1:71:
         bf:ab:1b:87:8b:a0:c7:f5:aa:0e:54:07:51:4d:33:af:6c:ef:
         19:2c:ad:f3:11:32:39:c5:c1:10:17:6b:d7:3a:44:c0:4d:81:
         62:02:ba:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----