Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203635.roa
File:                     AS203635.roa (raw, json)
Hash identifier:          RQJdgbcHzs1vLoo5+pIQgcFBnwi5kClt+tVHsCwkoOY=
Subject key identifier:   D0:A4:C6:6C:91:B1:7D:4C:32:50:EB:BB:7E:3B:29:DB:CD:29:9C:99
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       5FE0C912E0AF7FA9D50AD49FE8329427628A1DDB
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203635.roa
Signing time:             Wed 08 Mar 2023 18:45:17 +0000
ROA not before:           Wed 08 Mar 2023 18:40:17 +0000
ROA not after:            Wed 06 Mar 2024 18:45:17 +0000
asID:                     203635
IP address blocks:        2a05:dfc7:1600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e0:c9:12:e0:af:7f:a9:d5:0a:d4:9f:e8:32:94:27:62:8a:1d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:17 2023 GMT
            Not After : Mar  6 18:45:17 2024 GMT
        Subject: CN=D0A4C66C91B17D4C3250EBBB7E3B29DBCD299C99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:b6:8c:80:89:6d:22:5c:13:f2:d6:4e:2d:
                    57:1c:94:b5:f0:c1:03:b4:a7:09:42:2e:d8:be:95:
                    ca:42:d6:43:2b:e6:e6:ea:01:5c:a5:0c:37:3f:79:
                    ab:06:1b:5b:e2:1a:11:48:d1:15:4f:96:d5:4f:de:
                    68:8d:d3:77:f0:47:6f:ef:d6:07:da:91:da:51:95:
                    85:2b:21:fd:77:6e:31:d9:16:65:1f:27:26:5b:40:
                    a5:44:5b:96:e6:a1:62:36:3a:d2:bb:e1:89:e6:dc:
                    4b:83:40:3d:3a:68:00:2d:85:ef:5d:87:ec:30:95:
                    b5:fb:b0:58:fc:8a:6f:74:e6:72:99:5c:a4:d5:56:
                    d1:29:7f:8e:81:61:cf:e3:26:4e:58:5f:1f:69:ff:
                    ba:44:18:ba:ab:e1:c5:fc:63:db:15:a8:05:26:96:
                    9e:86:55:8a:93:a9:be:54:6d:84:2e:fc:c3:87:f2:
                    01:63:a0:8f:99:3b:78:0a:c2:c4:32:28:cd:f8:9b:
                    3e:96:b6:8e:86:0c:c2:5e:07:7f:a3:da:99:65:c9:
                    2b:41:b0:41:49:97:8a:fc:1a:54:c9:ce:58:f2:b6:
                    cd:a8:02:c9:e7:6d:40:dc:cb:68:95:7e:48:f8:02:
                    31:73:3d:f7:75:38:71:a4:e6:2e:a0:79:c8:aa:d1:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A4:C6:6C:91:B1:7D:4C:32:50:EB:BB:7E:3B:29:DB:CD:29:9C:99
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:38:d6:ab:1c:89:cb:78:2a:6e:38:51:bb:be:79:59:92:b1:
         8e:e1:83:a6:2d:f8:e4:ed:bd:05:a3:84:67:a4:19:d1:c3:ec:
         b3:71:e1:fa:ee:5f:71:50:92:de:18:1b:06:39:0d:67:f1:9d:
         87:b4:01:57:fc:f0:82:36:31:90:c3:b4:6d:60:29:36:8f:d4:
         12:e0:11:f6:c5:43:40:d2:4e:85:e0:4a:83:90:6a:67:a6:37:
         a7:dc:7b:bd:ec:fb:23:b1:a5:2c:86:85:30:79:5c:22:9b:02:
         43:1f:0f:03:41:71:5e:8a:a9:75:63:92:81:ea:7c:07:4a:e2:
         8c:0a:1b:c0:7a:88:66:95:8d:8d:f8:f2:a5:e0:bd:14:c9:b3:
         ea:8a:df:4a:89:08:84:d7:14:b5:fa:7d:09:94:d2:bb:f7:37:
         b7:99:0f:2a:3f:f0:aa:71:f9:0b:f6:58:57:2b:2a:b5:28:d8:
         2d:88:18:5b:d1:9b:e9:c5:f3:d0:a6:b3:54:f8:82:29:c1:dc:
         47:f2:a7:3b:80:2f:c0:28:56:51:c4:98:19:0b:0b:3c:1f:f1:
         40:02:6b:11:36:61:64:0f:6e:c1:68:cf:e5:0e:a4:4b:a0:4d:
         ae:b4:d0:b6:72:e7:a9:2c:06:da:d9:60:f5:49:5d:aa:a1:d7:
         d6:e9:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----