Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS207150.roa
File:                     AS207150.roa (raw, json)
Hash identifier:          Ijii5UcBCqYt0XEGn9WtRPjcy7LWQ7U/Y49Q5W0VqzY=
Subject key identifier:   06:EA:79:14:C7:DC:38:80:34:99:E6:83:75:F6:18:4E:60:C2:D5:14
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       29C0E8CEE857082DEE1F53CB40F86FFF7D208D78
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS207150.roa
Signing time:             Wed 08 Mar 2023 18:45:20 +0000
ROA not before:           Wed 08 Mar 2023 18:40:20 +0000
ROA not after:            Wed 06 Mar 2024 18:45:20 +0000
asID:                     207150
IP address blocks:        2a06:1287:2900::/48 maxlen: 48
                          2a06:1287:2901::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c0:e8:ce:e8:57:08:2d:ee:1f:53:cb:40:f8:6f:ff:7d:20:8d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:20 2023 GMT
            Not After : Mar  6 18:45:20 2024 GMT
        Subject: CN=06EA7914C7DC38803499E68375F6184E60C2D514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:7e:39:0d:3c:ec:3f:e4:e0:ee:d0:d9:4e:
                    10:87:52:c1:d0:36:1b:10:05:ff:dd:2f:36:cc:80:
                    3f:be:1e:0b:4e:33:56:18:ec:71:a7:45:93:e7:b7:
                    a5:ec:3b:04:5c:5c:e9:8c:02:28:fb:5a:0a:21:0c:
                    71:16:b3:4c:57:29:33:cf:de:63:79:bf:70:f5:0f:
                    e5:9a:ce:78:18:fa:8f:b2:13:4d:9d:d2:5b:1e:2e:
                    62:fa:99:79:a4:76:3e:4d:0f:29:53:3a:c6:fe:de:
                    17:9c:4a:13:2a:fe:86:4c:78:2b:c2:e5:09:2f:22:
                    9f:6d:f0:62:1b:e2:a1:47:eb:78:7d:00:37:d8:17:
                    87:cb:75:ae:b8:b9:ff:46:7e:be:b6:87:50:be:43:
                    c7:bf:f8:c4:a2:0f:86:72:1c:03:a5:67:c7:87:39:
                    10:9a:01:aa:1c:92:e6:35:69:f5:6c:e7:0e:3e:6b:
                    00:1f:05:1d:e8:40:c1:24:e4:4e:ec:13:92:0a:5e:
                    ee:77:58:62:6e:2e:3d:d0:c6:34:73:d8:a0:2c:2e:
                    4e:d4:20:fe:ff:7c:42:d3:46:a3:4d:6d:0b:a9:f4:
                    26:37:1f:6c:2a:d4:ca:49:2f:64:73:28:f4:b9:a7:
                    3f:c2:b1:95:9a:c7:59:38:64:ea:e3:2b:e6:5e:1c:
                    c7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EA:79:14:C7:DC:38:80:34:99:E6:83:75:F6:18:4E:60:C2:D5:14
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS207150.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:2900::/47

    Signature Algorithm: sha256WithRSAEncryption
         04:2d:ba:80:da:85:db:9f:72:da:18:51:33:d1:1c:47:8b:85:
         fb:5e:0c:47:0c:e8:11:4c:f3:9f:96:44:ca:4a:29:f5:40:1b:
         54:d6:f3:8f:dd:41:68:fd:24:5d:58:6f:20:3f:e9:88:a2:bb:
         ff:7b:61:03:1f:8b:bf:c4:95:d7:be:4a:25:c8:85:88:87:b8:
         3d:a6:cc:8e:63:7a:b6:44:c5:f5:dc:c5:a1:2e:0e:64:be:50:
         64:2b:b1:b8:73:21:1a:36:de:88:ee:45:93:39:5d:38:7c:73:
         3b:13:3e:89:bd:41:d7:b6:af:e1:d1:dc:14:dc:bc:29:0f:12:
         26:8d:0e:92:f8:51:29:b5:4b:56:72:15:db:6d:16:76:25:37:
         7c:45:be:52:21:57:a5:76:d1:d6:3e:09:c0:1d:11:7e:89:cb:
         22:66:74:66:7b:c8:6c:28:7b:a0:c4:2f:10:74:db:b7:91:ea:
         39:83:95:6c:2a:59:c1:aa:88:ca:dc:63:91:b5:c9:0d:3e:63:
         6d:5d:62:c3:41:25:6d:2f:d6:07:a9:b4:ee:a1:26:c0:a7:67:
         3d:c5:a7:00:19:ac:e8:c4:dc:30:f0:57:b2:d5:84:28:b1:d1:
         31:ec:5e:9a:43:35:24:f2:29:31:04:85:9c:53:fb:f3:4d:f0:
         ef:fc:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----