Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS207941.roa
File:                     AS207941.roa (raw, json)
Hash identifier:          TNIE84Vjoq5If/bkvZxXv9cp+o3Myi0x3FgmK9RCDI8=
Subject key identifier:   76:C4:5F:5D:76:AF:BA:00:AA:6A:FA:93:C2:58:7F:18:F6:85:CF:6F
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       16911AED1BB8836F2B699EE5046660CD7B26352A
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS207941.roa
Signing time:             Wed 08 Mar 2023 18:45:27 +0000
ROA not before:           Wed 08 Mar 2023 18:40:27 +0000
ROA not after:            Wed 06 Mar 2024 18:45:27 +0000
asID:                     207941
IP address blocks:        2a05:dfc7:8200::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:91:1a:ed:1b:b8:83:6f:2b:69:9e:e5:04:66:60:cd:7b:26:35:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:27 2023 GMT
            Not After : Mar  6 18:45:27 2024 GMT
        Subject: CN=76C45F5D76AFBA00AA6AFA93C2587F18F685CF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:3f:e0:ce:be:57:78:19:39:6a:2a:09:42:
                    35:c2:f5:4c:c0:37:5e:5f:d8:3e:b7:44:3d:ac:ea:
                    b5:c5:0d:e2:07:85:70:66:c6:02:d2:01:9e:c4:57:
                    48:80:d1:a1:99:00:65:ba:8f:49:2a:36:ab:4c:71:
                    e8:62:33:33:0f:22:b0:7c:eb:82:85:00:98:7c:bb:
                    d2:86:43:b9:0f:23:dc:fa:59:76:04:75:4d:a1:e8:
                    d5:c9:18:e8:ef:28:e8:75:4a:94:a9:06:b8:d3:43:
                    65:40:51:68:12:63:aa:c5:8e:3a:1e:45:24:8c:a0:
                    a0:aa:8e:1a:9c:f8:e2:88:78:9a:e4:a6:15:17:ca:
                    f8:3a:33:17:e9:a1:dc:87:3a:a9:3c:75:8a:60:eb:
                    e7:4f:87:a7:fb:91:e5:a1:5d:c4:ea:f0:95:3e:a5:
                    81:16:1c:62:56:6b:d2:07:3f:37:ac:66:a5:90:66:
                    53:28:12:8b:d9:9b:95:e5:e7:bd:45:b7:08:33:b8:
                    3c:86:03:4f:a9:12:e9:c6:25:29:19:f0:1a:39:ba:
                    06:0a:f4:b1:0c:40:be:65:d9:60:88:19:f4:29:2c:
                    91:9e:92:e9:00:70:3d:53:2d:cc:bb:57:41:9b:d3:
                    28:ab:65:c3:37:a0:f2:9c:7c:b3:64:ed:18:3a:99:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C4:5F:5D:76:AF:BA:00:AA:6A:FA:93:C2:58:7F:18:F6:85:CF:6F
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS207941.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8200::/39

    Signature Algorithm: sha256WithRSAEncryption
         9e:ba:28:67:40:5c:dd:9c:19:3c:cb:5f:14:2b:4a:a4:89:69:
         2a:c7:df:38:31:ce:8c:c4:68:c5:1c:37:9f:97:e7:a0:38:18:
         2d:5e:9d:00:67:2a:08:12:20:d5:0c:53:8a:db:4b:a7:16:1f:
         cd:0a:5c:c3:ba:9b:68:b5:e3:f0:77:31:2f:fe:7c:c7:99:0e:
         73:8d:c3:f9:0f:77:d3:d0:50:c6:f3:dd:f6:a0:73:64:f7:e1:
         a5:85:83:1f:07:90:ab:af:fc:ab:11:89:ab:3c:52:3a:61:ff:
         41:7f:80:05:d1:cd:99:4f:63:2b:1a:eb:b5:1c:45:6e:51:ba:
         cd:55:bc:0d:7f:7e:9a:8a:e1:1c:5a:e3:25:b6:d8:22:a6:7a:
         1b:47:b1:a2:86:f6:10:0a:d0:29:ab:c8:0c:7d:e0:58:ed:02:
         f5:e4:a2:1f:1a:63:02:d1:76:64:ab:a1:d7:4e:63:2b:21:9f:
         e9:ae:10:03:e9:40:12:60:77:bc:0f:10:39:2d:8e:d9:b2:cd:
         8f:20:e6:4f:ce:8c:22:71:50:74:7e:b8:2e:b7:39:09:54:d4:
         6e:0c:43:ef:46:4b:67:35:7c:da:87:80:01:08:4e:3d:ae:64:
         1e:ae:7f:ac:9e:a8:d8:fa:7a:2f:fd:e0:a7:d9:70:c0:39:eb:
         88:95:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----