Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212294.roa
File:                     AS212294.roa (raw, json)
Hash identifier:          9XF/sNLKOVPg6PfKYjBOo3GmRUQmFQY/DON3rouSNjs=
Subject key identifier:   91:EA:E8:06:DD:BE:89:4E:01:2E:4C:2A:32:DB:5E:94:85:48:76:10
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       7E1AACFE5587086236BF7FF60D53CF4092D788A7
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212294.roa
Signing time:             Wed 08 Mar 2023 18:45:24 +0000
ROA not before:           Wed 08 Mar 2023 18:40:24 +0000
ROA not after:            Wed 06 Mar 2024 18:45:24 +0000
asID:                     212294
IP address blocks:        2a05:dfc7:8100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1a:ac:fe:55:87:08:62:36:bf:7f:f6:0d:53:cf:40:92:d7:88:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:24 2023 GMT
            Not After : Mar  6 18:45:24 2024 GMT
        Subject: CN=91EAE806DDBE894E012E4C2A32DB5E9485487610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:7d:e7:49:df:95:74:19:c3:ae:fe:42:bd:
                    5b:63:f1:7c:63:da:ee:b2:78:51:ac:a4:4d:b3:e8:
                    d7:48:f9:80:b9:1f:13:21:3e:de:08:34:43:10:b1:
                    6d:33:f9:4f:02:9e:4c:21:64:09:7c:ae:ff:37:e9:
                    5e:f0:5d:99:81:0d:c6:ed:6f:59:41:39:cc:00:17:
                    cf:4f:bd:aa:f6:ba:a7:f2:09:6e:fc:35:f8:83:c8:
                    4c:bb:c5:f6:a1:fd:b2:5b:2a:f5:64:4d:fc:de:e4:
                    02:93:fc:95:15:15:0f:80:6c:4d:83:ce:d8:8a:9f:
                    a2:ec:b3:f4:89:49:68:ca:2c:08:3f:6d:9c:96:e3:
                    e0:b1:12:c0:79:08:49:21:4c:0f:74:e8:50:8f:05:
                    0b:0f:9c:c9:b1:0d:d5:24:dd:88:b1:61:15:5e:28:
                    da:b2:2f:a3:eb:82:62:e3:e4:53:44:55:58:a3:f2:
                    fa:e3:7f:22:88:58:af:8d:2f:96:95:34:b5:51:90:
                    9d:c0:38:8b:f8:19:76:79:4b:8e:40:c3:90:83:a1:
                    07:b1:f7:61:e3:5a:90:ef:76:a3:2f:d5:c2:81:1b:
                    7f:f7:f9:80:f1:07:99:05:d0:0b:28:2e:f6:a2:09:
                    48:53:e3:0c:a9:fb:1c:df:31:61:a6:cc:91:5e:24:
                    fe:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EA:E8:06:DD:BE:89:4E:01:2E:4C:2A:32:DB:5E:94:85:48:76:10
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:02:84:4b:77:ba:88:e3:1d:63:2a:49:de:27:b9:fc:9a:8e:
         3b:b8:94:49:2f:8a:3e:a6:be:02:27:dd:44:59:26:e5:f2:54:
         a8:ca:31:5c:9b:2c:e1:10:ab:2e:09:ec:0a:62:19:a7:39:b5:
         93:af:0c:52:6e:57:1e:e5:dd:96:98:30:9d:9f:40:3a:56:a1:
         c3:7f:41:bc:93:3c:3e:cf:a4:99:bc:c1:29:02:31:5b:24:c6:
         29:76:36:6a:42:f9:07:3f:5a:7c:1c:97:c6:16:1c:7c:54:b9:
         2e:e7:58:03:5c:7c:bc:78:79:b9:5e:e2:43:e6:c5:33:ec:94:
         15:ca:c3:ca:3d:b3:06:42:90:ee:30:76:29:44:24:ca:e1:c7:
         7d:26:8a:ce:e1:8a:a0:9c:05:64:cf:eb:b0:64:b0:51:aa:09:
         78:a3:09:52:a0:87:7a:07:58:63:98:08:00:d7:da:a4:99:a1:
         76:4c:f6:8f:b6:f2:55:24:bf:26:27:01:58:fe:ba:58:bb:cd:
         0a:33:2d:e8:23:62:84:37:92:ea:ac:9d:cd:7d:4d:3f:73:7b:
         3d:cb:d8:64:74:6e:f8:74:ee:3b:33:8d:3f:2b:22:df:be:e8:
         a3:25:d5:02:29:6f:cc:56:4b:84:dc:4d:a4:59:7c:76:b4:8c:
         24:10:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----