Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204789.roa
File:                     AS204789.roa (raw, json)
Hash identifier:          dwI4WcnnTdeXZEqTTJgCkPg4LGnkvqttZgwPBjbzE1w=
Subject key identifier:   B1:8D:D0:CF:9B:26:E0:E0:00:1E:69:35:89:17:F1:B5:62:F1:DC:EF
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       6E9D89CDFC48F68B2D8F2133DF2D8E07F1DD66A2
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204789.roa
Signing time:             Wed 08 Mar 2023 18:45:17 +0000
ROA not before:           Wed 08 Mar 2023 18:40:17 +0000
ROA not after:            Wed 06 Mar 2024 18:45:17 +0000
asID:                     204789
IP address blocks:        2a05:dfc7:4700::/40 maxlen: 48
                          2a06:1287:9000::/36 maxlen: 48
                          2a06:1287:b000::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9d:89:cd:fc:48:f6:8b:2d:8f:21:33:df:2d:8e:07:f1:dd:66:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:17 2023 GMT
            Not After : Mar  6 18:45:17 2024 GMT
        Subject: CN=B18DD0CF9B26E0E0001E69358917F1B562F1DCEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:37:e1:a7:77:bf:ee:5b:d7:2a:10:3e:b0:7e:
                    63:24:eb:4b:fd:ac:aa:c3:25:f2:1d:60:ec:43:ab:
                    28:08:8e:b2:7c:bd:16:96:63:40:0d:d2:9b:14:5c:
                    aa:c4:15:cc:a2:7e:ac:6b:1b:8c:db:c3:cc:39:7c:
                    b1:78:92:84:3b:61:9a:45:25:74:18:53:ca:e0:7c:
                    4b:45:02:2b:c2:8c:e9:16:eb:c4:1e:6e:53:4b:f4:
                    01:2e:7d:e1:f1:bd:02:1b:58:5e:e7:ff:0e:c3:12:
                    3a:bf:cd:ed:dd:85:45:b4:7d:14:83:7d:83:88:49:
                    85:99:d3:76:03:0c:25:91:09:cf:e1:80:95:a4:f7:
                    9a:c8:96:5e:d5:e3:0e:b3:1b:fa:c8:fb:9c:cd:4b:
                    61:2d:28:a2:ea:ae:31:66:80:58:ee:90:db:ec:d8:
                    6d:4c:ca:66:73:50:08:c5:57:58:28:93:6b:93:4c:
                    d5:e2:03:2a:be:31:e7:7b:d1:42:99:65:c6:d5:6d:
                    62:a8:0d:bf:cd:36:5a:ee:02:da:d5:31:95:35:20:
                    e8:fc:0c:6a:23:33:87:97:a3:63:2d:7f:c2:a1:0f:
                    2d:48:19:75:ee:1f:f5:52:fd:51:dc:64:e0:c2:9f:
                    16:49:27:fb:1a:9c:d7:74:b9:fb:9a:2a:35:29:4d:
                    83:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8D:D0:CF:9B:26:E0:E0:00:1E:69:35:89:17:F1:B5:62:F1:DC:EF
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204789.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4700::/40
                  2a06:1287:9000::/36
                  2a06:1287:b000::/39

    Signature Algorithm: sha256WithRSAEncryption
         b7:fb:9d:e6:e8:ef:6a:d7:7f:e6:5b:d5:4d:1e:a4:e5:78:4a:
         c1:38:1e:da:53:e9:c3:42:50:b7:86:4e:6d:98:4a:f4:d3:f1:
         0b:a5:65:25:ff:32:65:9d:94:07:f7:96:8d:3e:cf:84:d1:f7:
         f9:60:b3:4d:c8:e2:dc:01:ce:e0:a1:b6:06:8e:53:bf:2f:3a:
         df:40:cd:14:ec:e9:ab:ad:d2:be:c7:b1:2f:3c:c3:d4:8a:17:
         94:d1:45:21:21:d0:23:8f:ba:19:e6:98:9c:8a:0d:c8:1f:d8:
         ec:bf:82:8c:e4:8a:ba:60:b1:19:a8:ac:7e:9e:93:d9:76:54:
         d5:27:2a:48:5d:b2:71:fe:a6:4c:e4:86:d7:de:8a:b6:43:73:
         c6:ba:41:5f:85:c0:b7:59:1b:f8:a6:72:5d:31:05:1d:7c:d1:
         57:7a:1e:d6:9d:33:6d:9b:23:f1:69:62:30:0f:fd:27:67:ae:
         22:14:04:6d:94:c7:1c:27:59:b7:60:cd:69:0c:6b:2c:f2:bd:
         a4:a4:d9:1d:19:0c:e4:39:b4:ce:1d:fb:84:dd:bb:90:35:3d:
         4b:ed:7b:4a:9e:e7:c5:40:92:30:83:73:bf:66:dd:86:ae:40:
         90:67:18:82:b5:e0:87:3b:50:ce:fd:af:cb:1c:87:47:8d:9c:
         6b:e7:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----