Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203062.roa
File:                     AS203062.roa (raw, json)
Hash identifier:          PDZ0krT+7UATZJili6eTLKgxbLJvvYTNNPRYsvCh6/8=
Subject key identifier:   DE:F4:3C:BE:7B:DF:5F:A8:5A:85:05:0C:D7:AA:1E:7E:B4:C6:0B:D6
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       35811C3F2EAEE8883DE24CAC71E277088FA9D7B8
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203062.roa
Signing time:             Wed 08 Mar 2023 18:45:23 +0000
ROA not before:           Wed 08 Mar 2023 18:40:23 +0000
ROA not after:            Wed 06 Mar 2024 18:45:23 +0000
asID:                     203062
IP address blocks:        2a05:dfc7:1300::/40 maxlen: 48
                          2a05:dfc7:89ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:81:1c:3f:2e:ae:e8:88:3d:e2:4c:ac:71:e2:77:08:8f:a9:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:23 2023 GMT
            Not After : Mar  6 18:45:23 2024 GMT
        Subject: CN=DEF43CBE7BDF5FA85A85050CD7AA1E7EB4C60BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:0e:a3:1f:7b:be:53:61:47:2f:5c:d8:d5:
                    b0:52:a0:06:fe:1c:27:6c:12:2f:09:11:e6:3b:94:
                    90:aa:bc:17:5a:88:6b:5f:29:db:b0:c2:53:2c:85:
                    68:b8:13:1c:16:8d:2d:cd:0b:1e:3d:3c:a8:f6:30:
                    2b:51:10:79:83:92:3e:6e:7b:bc:db:35:2d:2d:09:
                    0a:f3:de:65:a0:b7:04:3b:29:53:67:5e:a2:d3:57:
                    02:53:6e:72:d7:40:9a:10:c7:77:2e:c7:cf:49:d0:
                    29:1b:f3:33:5e:9b:f5:45:53:e8:d3:59:6d:22:89:
                    f7:05:c5:a9:f5:66:b7:b6:9a:43:0f:b7:11:e7:8c:
                    a9:e4:6a:5f:dc:46:6d:8e:f8:ae:06:58:2f:1b:bd:
                    e7:21:ec:45:bf:24:79:bb:44:0f:a1:b8:e1:86:62:
                    42:f5:5d:f1:23:b0:a7:54:2d:01:4b:23:36:01:ff:
                    a8:14:5e:50:13:15:64:6d:d1:14:2e:80:26:a0:4f:
                    ae:33:cc:e5:c7:10:c5:05:4c:a5:a8:10:78:8f:d6:
                    e9:77:6a:9b:71:9d:d1:45:df:3e:02:0e:22:9f:db:
                    68:47:0c:73:85:46:cb:01:cc:9e:13:66:b7:c0:b2:
                    bb:53:c9:dc:1e:59:34:17:92:bf:8a:da:ae:6e:6a:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F4:3C:BE:7B:DF:5F:A8:5A:85:05:0C:D7:AA:1E:7E:B4:C6:0B:D6
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1300::/40
                  2a05:dfc7:89ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:b6:b5:b3:8a:2d:e7:68:e9:24:83:d5:f1:b4:91:80:06:06:
         e1:aa:2e:7e:db:9d:45:84:37:bc:fd:99:74:dc:16:1f:df:40:
         14:3f:8a:76:a1:3f:07:62:52:e4:a8:9a:ac:9e:32:9c:1b:ce:
         b0:35:59:38:7c:e2:69:cb:06:4b:58:c7:41:dc:e3:fa:03:36:
         69:3b:5c:a9:1e:78:82:a4:5f:fc:1f:eb:72:42:e2:4f:65:74:
         ba:8e:ef:d0:4b:d9:87:c7:61:e6:6e:c0:37:27:b7:00:3a:f1:
         bd:3e:e7:b1:f8:32:35:c7:ca:77:0c:aa:69:79:ba:95:6d:19:
         a1:f2:84:76:7a:9c:79:f1:7c:e2:82:2d:da:66:27:c5:b6:10:
         66:a8:5f:96:0a:e4:7b:2a:cb:75:31:7e:9c:70:b0:21:11:b3:
         2e:fd:8d:1b:b0:18:4b:90:87:a9:1e:3e:2a:b9:1c:af:db:75:
         d6:8c:db:cb:22:e9:fc:5e:2f:c2:3a:c8:78:6e:eb:7c:78:73:
         dd:b5:d2:36:3c:09:e3:69:4d:f8:63:71:7a:8b:1d:d8:77:a9:
         e5:f4:3a:03:64:82:d3:19:d0:cc:0b:c7:dd:98:bd:d0:f1:b0:
         88:c4:24:31:68:ef:4f:f5:2d:31:2d:12:23:96:c5:d5:89:fa:
         80:6e:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----