Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204136.roa
File:                     AS204136.roa (raw, json)
Hash identifier:          /xfY4Y6WZ7a93sMiwZ4dkLcm3dEROJRH5Nc9ZMLaQk8=
Subject key identifier:   8D:3E:0A:91:E2:F5:39:F2:5E:F7:DE:A7:30:5A:29:54:9C:24:91:1D
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       42D3A7ED0A1601F3566E3E6575E2434C1226158D
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204136.roa
Signing time:             Wed 08 Mar 2023 18:45:28 +0000
ROA not before:           Wed 08 Mar 2023 18:40:28 +0000
ROA not after:            Wed 06 Mar 2024 18:45:28 +0000
asID:                     204136
IP address blocks:        2a05:dfc7:dfc7::/48 maxlen: 48
                          2a05:dfc7:dfc8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:d3:a7:ed:0a:16:01:f3:56:6e:3e:65:75:e2:43:4c:12:26:15:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:28 2023 GMT
            Not After : Mar  6 18:45:28 2024 GMT
        Subject: CN=8D3E0A91E2F539F25EF7DEA7305A29549C24911D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:1f:6f:4a:ca:e0:f5:32:fb:e0:84:86:14:
                    0c:3a:e1:b3:70:d9:1d:2a:de:bc:8d:61:c4:19:51:
                    a4:84:ad:e3:da:fd:c1:6a:20:de:42:f5:70:ae:d7:
                    6e:b3:2a:b4:0e:c8:64:66:ac:cf:85:d0:8f:e2:d2:
                    cc:b2:98:4a:0a:43:00:9d:49:97:bc:62:fe:17:21:
                    fa:40:e0:60:ca:ab:fd:3a:74:6b:94:43:6a:af:56:
                    df:97:f4:62:6a:d0:9e:d0:4f:54:78:ad:ee:52:a4:
                    15:63:93:b3:13:d1:40:16:70:e6:f9:a9:e3:6c:69:
                    e0:e7:22:c9:82:c7:58:8c:9a:a4:96:22:5f:70:ee:
                    04:ce:ef:a0:d8:5d:79:8d:9c:09:a6:82:2f:cf:7a:
                    49:6a:4d:22:36:bb:ea:62:a4:31:6c:ad:f0:c8:61:
                    d3:ad:6a:27:60:20:c2:8b:43:dc:88:1c:19:e1:2f:
                    47:e3:12:32:ac:b1:f1:18:46:1c:b0:37:a4:62:fc:
                    42:81:20:b2:3c:ee:34:27:94:1f:c9:41:c9:5a:30:
                    0b:4a:12:73:61:de:e6:f5:9d:4f:c7:f3:c8:20:b7:
                    6d:8c:9a:c0:fe:0e:2c:ed:98:0e:a1:06:33:e6:32:
                    9a:49:53:50:e3:3c:7d:d1:4a:17:10:74:bf:34:a2:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3E:0A:91:E2:F5:39:F2:5E:F7:DE:A7:30:5A:29:54:9C:24:91:1D
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:dfc7::-2a05:dfc7:dfc8:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2a:dd:b9:8c:49:55:60:cb:fc:f8:b4:0c:42:30:b6:d5:8a:40:
         f2:7f:ce:44:43:42:0c:1e:fb:64:18:01:22:cb:cf:c7:3d:07:
         38:7c:ac:3c:1d:d3:99:48:0e:b5:ae:10:28:36:73:53:c3:72:
         31:71:34:19:74:d6:32:42:2c:9b:b5:f2:66:8c:bd:a5:14:48:
         d3:2f:fa:88:72:d5:17:28:71:4a:ba:f5:d2:0d:4d:c6:c0:91:
         04:51:91:37:e1:96:85:cc:90:97:0c:c3:ab:66:12:5c:9e:6b:
         c3:2b:e5:02:e3:e1:1b:00:f5:59:4a:6e:46:8c:56:db:04:94:
         ef:fc:2f:c6:36:aa:49:73:be:7e:64:c7:37:4b:48:7a:17:7c:
         ff:da:ae:17:e4:f3:9f:77:8e:1e:dd:fe:37:48:cc:1f:4d:95:
         70:a4:84:77:7b:7c:97:f3:56:dc:9d:2c:de:bb:27:33:fe:06:
         bb:e3:c6:23:75:7f:5d:d9:d8:db:02:f3:f7:95:ca:0c:29:79:
         1b:71:f3:fb:a5:d5:0a:0a:9e:9f:ab:2d:ca:61:81:a7:1b:36:
         51:d2:f3:b7:0e:40:0c:9f:3b:68:a8:91:10:03:bc:61:4e:ae:
         20:f8:15:95:1e:7e:5c:eb:6d:60:f5:4e:8b:04:03:78:31:c6:
         e6:91:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----