Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203913.roa
File:                     AS203913.roa (raw, json)
Hash identifier:          BrX6EEvZ7jNtB9mGVy0yUlxDZ4j1wEHFHT91AG+kT48=
Subject key identifier:   2E:18:18:55:18:58:EA:A9:9D:CF:CF:8E:12:75:8D:FC:93:D7:C4:79
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       3B04BE0F3ACFF68E3ADA28B5968B8DF875190C3A
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203913.roa
Signing time:             Wed 08 Mar 2023 18:45:29 +0000
ROA not before:           Wed 08 Mar 2023 18:40:29 +0000
ROA not after:            Wed 06 Mar 2024 18:45:29 +0000
asID:                     203913
IP address blocks:        2a06:1287:1600::/40 maxlen: 48
                          2a06:1287:1601::/48 maxlen: 48
                          2a06:1287:1602::/48 maxlen: 48
                          2a06:1287:1606::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:04:be:0f:3a:cf:f6:8e:3a:da:28:b5:96:8b:8d:f8:75:19:0c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:29 2023 GMT
            Not After : Mar  6 18:45:29 2024 GMT
        Subject: CN=2E1818551858EAA99DCFCF8E12758DFC93D7C479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:6a:00:ed:cc:1c:03:2d:46:51:a7:db:6c:
                    11:32:4a:c2:a4:33:58:5a:ef:83:3c:77:7d:7a:fc:
                    f1:2d:9a:18:6c:b2:b3:51:25:f5:bd:ad:29:88:91:
                    b9:89:3b:d4:67:18:ed:c2:4d:48:66:cc:62:8f:11:
                    28:6f:2d:d0:27:4f:37:4d:81:46:46:b3:99:55:b2:
                    e8:66:3a:4b:db:c5:36:eb:6e:a6:b9:58:4c:98:04:
                    44:7d:10:9f:46:20:48:4f:9a:8f:de:49:c7:2c:18:
                    d3:01:51:6a:59:62:03:ff:5b:35:8e:3d:8e:eb:9f:
                    db:85:b7:d3:e2:8e:69:d6:40:4b:b6:34:f4:92:45:
                    3d:55:74:81:e1:6c:19:4f:76:90:bc:74:f4:20:ef:
                    58:51:cb:a3:e2:8a:fd:a5:67:ed:a7:9b:d2:60:a3:
                    75:54:f5:80:c6:52:96:0d:78:f1:a8:12:69:92:d7:
                    b0:d1:d5:1a:bc:ba:67:de:a1:d6:48:ca:5c:38:75:
                    23:13:ec:22:0c:4e:72:91:c2:18:12:3a:94:f5:5d:
                    a9:5f:18:17:ef:56:5b:7e:4b:95:9d:77:f8:94:25:
                    bf:5d:09:6a:60:95:35:51:3b:bf:bd:08:f0:66:35:
                    ce:6a:9d:93:3a:1e:4a:03:4a:84:cc:bb:a9:b2:72:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:18:18:55:18:58:EA:A9:9D:CF:CF:8E:12:75:8D:FC:93:D7:C4:79
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         d9:c4:04:78:5b:10:7e:7c:7a:43:26:44:13:68:22:3d:92:5a:
         64:c4:69:59:c8:e8:7f:8e:53:b2:01:9c:46:16:ce:b4:e2:c2:
         65:7c:4f:e4:7c:05:98:b0:db:ef:84:ed:16:a1:a8:cf:c6:11:
         16:28:cf:34:fd:0f:7e:f6:19:e3:b9:da:38:89:1b:2f:13:b1:
         78:a4:42:b6:fb:4d:ed:24:7e:07:90:90:5e:96:05:7f:05:fe:
         13:9b:2a:06:d6:b4:99:79:72:cb:85:33:2d:d4:33:ed:fa:99:
         b7:44:59:51:79:cd:f5:8c:dd:47:c5:c8:8e:af:e8:eb:70:69:
         39:8a:e4:c8:30:24:77:af:e4:9b:51:03:f4:4c:70:1f:0d:04:
         7a:07:f4:a8:98:a7:f7:16:61:48:18:b8:8f:45:07:35:50:0e:
         3a:21:64:23:5a:b2:52:bb:28:1f:62:1a:86:80:e5:6d:8e:79:
         9a:40:cf:60:6c:ab:25:08:78:8f:fe:84:99:3d:f0:d9:be:66:
         da:83:46:d7:a3:22:a3:fd:a6:46:aa:c9:29:08:26:b3:a4:c3:
         78:8a:a5:f1:95:65:95:f1:4f:dc:c1:32:8e:70:92:e3:cc:ac:
         3f:3c:6f:30:35:35:e7:5f:a6:00:45:3f:35:0e:33:3f:a3:df:
         0f:e5:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----