Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202990.roa
File:                     AS202990.roa (raw, json)
Hash identifier:          vUPGC5bsw54s9ScCcoL2giNP578hrOfE0ucbxBAztIs=
Subject key identifier:   32:B5:A7:0A:E4:29:E3:B5:21:20:CD:71:DF:92:BE:F5:6E:90:B6:45
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       66304D0E7A2B9F649F74E9E32DAF5C7BCF2FD607
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202990.roa
Signing time:             Wed 08 Mar 2023 18:45:28 +0000
ROA not before:           Wed 08 Mar 2023 18:40:28 +0000
ROA not after:            Wed 06 Mar 2024 18:45:28 +0000
asID:                     202990
IP address blocks:        2a06:1287:8000::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:30:4d:0e:7a:2b:9f:64:9f:74:e9:e3:2d:af:5c:7b:cf:2f:d6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:28 2023 GMT
            Not After : Mar  6 18:45:28 2024 GMT
        Subject: CN=32B5A70AE429E3B52120CD71DF92BEF56E90B645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:04:dc:f8:0c:65:21:84:30:63:92:f3:0c:
                    be:d1:22:eb:06:14:c6:8f:eb:77:d1:d8:57:65:37:
                    6b:c0:a4:b8:c3:fc:5d:57:86:da:33:16:ec:fc:5a:
                    89:4c:88:44:6d:15:4a:f4:7a:01:ae:78:e0:3c:b3:
                    a2:21:fe:42:06:ca:d2:cb:df:28:c5:5d:cc:3b:0e:
                    1f:7a:a9:32:e3:f7:99:09:e2:76:0a:1f:ac:99:3a:
                    1a:fd:b1:45:95:9b:69:a4:07:cd:9b:3c:b1:44:53:
                    b4:d3:bc:15:b7:1e:73:c9:36:15:7e:dd:21:b1:97:
                    bf:46:7c:16:80:38:d9:78:69:73:f9:ca:4a:4d:23:
                    f6:df:64:60:70:05:c8:e1:ed:24:38:b0:d5:f1:6e:
                    dc:bc:5b:57:88:4c:43:6a:31:9f:13:99:98:6e:24:
                    9f:de:07:07:e5:c1:3d:b9:52:32:40:d4:a9:5a:a5:
                    0f:44:7d:94:6e:41:2c:0f:4c:8e:b2:f9:91:4c:b5:
                    74:c9:b5:77:d8:f7:13:26:61:b4:45:0d:65:84:1c:
                    da:27:0c:16:65:21:51:92:49:3c:77:e5:62:94:17:
                    47:bc:96:ef:ac:a8:a3:26:7c:f6:b0:35:ca:c7:1a:
                    45:d2:78:ff:47:10:49:58:a5:86:f9:f0:8a:f5:44:
                    16:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B5:A7:0A:E4:29:E3:B5:21:20:CD:71:DF:92:BE:F5:6E:90:B6:45
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202990.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         74:a4:d1:f0:a4:71:57:35:0a:03:92:a0:a1:0e:0c:6a:00:49:
         be:f1:3d:af:9a:a9:9c:36:7c:2e:7c:72:5c:0a:60:88:64:8d:
         7b:de:f7:09:a0:1a:8d:f0:fa:db:dc:f6:d2:da:5e:e9:23:bd:
         7b:38:d1:84:20:63:0a:0e:a2:0e:78:d9:66:a3:bc:8c:8f:45:
         fc:ef:64:5e:eb:5f:ca:7a:07:e6:cc:d6:06:2c:33:e7:b6:d9:
         da:06:1d:dd:57:cb:aa:1a:ac:39:28:c6:b5:a7:86:2a:07:ce:
         41:fc:15:66:15:da:a9:d5:88:bd:91:fa:52:aa:8c:10:df:35:
         9a:a0:57:95:7f:99:a1:52:1c:4c:bf:a8:27:32:d8:4d:8e:1b:
         49:ff:83:b8:01:a2:87:d6:98:5f:e2:73:ae:54:c6:be:a6:93:
         98:71:d6:c6:8d:2f:78:f7:d5:7a:c0:54:53:c0:36:ed:82:4e:
         43:78:0c:20:f2:ec:9b:32:ce:26:d2:bd:f8:5d:43:3c:47:48:
         43:60:bb:05:e0:fa:a1:87:a7:87:80:b9:38:78:84:58:77:b0:
         2c:f7:b2:c3:01:f0:71:90:90:76:84:3f:b8:c6:a5:9c:40:52:
         1b:4a:e4:07:08:b1:99:fb:93:50:e3:7a:e9:77:49:1a:93:ff:
         fe:a2:96:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----