Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS205980.roa
File:                     AS205980.roa (raw, json)
Hash identifier:          ee9s0TIcY8qB0YpAgC7sH8gtwnujeWWntrRF3UVUWkk=
Subject key identifier:   B9:65:AC:1D:8C:7F:E2:DF:B3:07:BE:48:CB:31:0F:BC:94:C7:7F:C1
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       01038FA491EB2E3C7183949B8EAFA63E12E48A52
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS205980.roa
Signing time:             Wed 08 Mar 2023 18:45:22 +0000
ROA not before:           Wed 08 Mar 2023 18:40:22 +0000
ROA not after:            Wed 06 Mar 2024 18:45:22 +0000
asID:                     205980
IP address blocks:        2a06:9f45:2800::/37 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:03:8f:a4:91:eb:2e:3c:71:83:94:9b:8e:af:a6:3e:12:e4:8a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:22 2023 GMT
            Not After : Mar  6 18:45:22 2024 GMT
        Subject: CN=B965AC1D8C7FE2DFB307BE48CB310FBC94C77FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:84:97:f9:a5:64:86:db:35:22:1a:d5:ee:
                    ef:de:95:71:07:0a:39:d8:a5:28:ba:77:ca:25:8a:
                    25:97:e8:e9:87:df:97:28:36:5a:35:17:0c:db:a8:
                    35:72:6c:21:2a:73:93:1e:f3:98:d3:5f:16:00:1e:
                    4f:49:3e:5d:f2:69:e9:61:99:68:d9:46:7f:35:09:
                    32:c8:0a:6f:cc:94:1e:c2:a1:62:1a:4e:cb:db:eb:
                    af:d9:0b:44:da:c7:9d:87:00:ba:f2:b8:3f:f2:c9:
                    14:e4:11:69:d7:c7:82:e7:a3:1f:dc:6d:82:a0:c1:
                    a1:6b:de:fb:51:db:ca:c1:21:e1:7d:cf:cc:a1:08:
                    52:d4:bc:c0:ae:63:b2:7b:44:a1:ea:61:0c:b3:29:
                    12:cd:83:07:07:96:09:e6:33:2c:6c:88:b7:3a:8d:
                    cf:6c:a4:24:08:4e:af:b3:ea:56:62:8b:12:3d:95:
                    8f:56:10:ca:4b:00:6a:27:e4:4a:2b:9f:f8:ce:54:
                    61:52:1f:f6:55:f3:83:23:89:5b:70:3d:88:44:4e:
                    63:3b:dd:38:4d:65:6f:04:cb:7b:5f:8c:aa:d8:25:
                    9d:de:22:28:fb:74:64:29:bf:5b:65:60:03:80:51:
                    64:02:79:22:55:65:55:a4:8c:cd:8b:76:6a:e4:de:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:65:AC:1D:8C:7F:E2:DF:B3:07:BE:48:CB:31:0F:BC:94:C7:7F:C1
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS205980.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f45:2800::/37

    Signature Algorithm: sha256WithRSAEncryption
         a6:82:98:46:b3:41:0a:92:73:5f:5f:d5:49:8f:8f:67:9f:f3:
         11:67:ad:37:2a:96:01:e9:b6:58:1f:05:69:4c:5a:19:8b:d5:
         a2:b6:0b:09:dd:cc:ef:d0:fc:44:7e:7d:ef:15:20:c6:9d:d4:
         0f:7f:08:37:e5:fe:eb:8d:0a:c6:88:7c:ff:3d:3f:a4:c4:ea:
         98:0c:1a:13:94:30:9c:ba:01:3a:78:6f:c3:33:21:87:4a:a0:
         11:76:6e:eb:9b:bf:02:63:5a:fb:d3:48:64:49:e2:01:7d:58:
         94:35:a5:67:7b:91:00:47:f7:85:f8:f8:17:85:d1:58:3f:bf:
         18:60:77:8d:ac:c4:57:94:e3:5a:97:bd:c5:ff:c2:10:b7:07:
         a2:a3:fd:81:75:f4:cc:36:5a:60:3a:85:c8:a2:d0:35:cc:9d:
         90:d5:29:56:bc:16:a7:17:3c:3c:fe:65:0e:da:21:84:18:97:
         37:7f:ad:3c:db:69:f1:da:77:f2:c8:ee:a7:21:51:e2:5e:23:
         b5:5c:36:0a:1f:22:fa:21:5f:e0:6a:be:c9:7b:fb:0f:1c:58:
         bd:89:69:81:c2:9f:ad:af:aa:11:52:76:34:22:26:63:6e:c7:
         51:be:f1:16:d4:70:6a:c9:b7:f0:aa:ba:6b:1b:d6:de:3e:9e:
         2e:49:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----