Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212828.roa
File:                     AS212828.roa (raw, json)
Hash identifier:          iw3Ifa28PRTsr22KWdNIB2kvjosoNpFbIiTLneT2b48=
Subject key identifier:   95:77:F2:16:AD:D8:38:44:AF:5A:2B:8F:0F:9C:16:46:19:2F:5A:CF
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       76A0A13470ADFF4DDD03FD1E692A116FDB920CDF
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212828.roa
Signing time:             Wed 08 Mar 2023 18:45:23 +0000
ROA not before:           Wed 08 Mar 2023 18:40:23 +0000
ROA not after:            Wed 06 Mar 2024 18:45:23 +0000
asID:                     212828
IP address blocks:        2a05:dfc7:5800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a0:a1:34:70:ad:ff:4d:dd:03:fd:1e:69:2a:11:6f:db:92:0c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:23 2023 GMT
            Not After : Mar  6 18:45:23 2024 GMT
        Subject: CN=9577F216ADD83844AF5A2B8F0F9C1646192F5ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:af:d2:fa:f1:72:48:b8:82:6a:78:6a:6b:
                    e1:3c:a6:00:5b:4d:8f:d5:2a:b9:45:1e:b0:88:cb:
                    b9:59:4a:ad:44:23:63:42:81:5c:f0:ba:b9:f8:44:
                    35:45:26:57:61:54:6d:57:83:fb:82:14:21:e8:89:
                    cf:12:99:ea:ca:5b:72:fe:64:1f:1b:1a:31:17:3f:
                    2a:1c:40:fc:32:1f:2f:df:d7:01:a8:ab:df:9d:ef:
                    20:c3:3b:8e:a4:b3:31:5b:79:b4:d0:bd:61:b5:75:
                    59:49:bb:db:cc:c4:70:67:1f:22:e2:28:75:f9:15:
                    d0:5b:af:f2:43:9e:81:54:67:4b:19:2e:04:0a:e5:
                    1d:df:6e:93:e6:88:b5:55:2d:0f:37:3f:bb:ae:1e:
                    c2:87:fa:42:be:9d:90:c7:85:d3:f4:11:c8:d3:c1:
                    b3:3e:a7:e2:63:97:de:e7:de:3b:e9:20:ba:14:6e:
                    c9:6d:2e:b2:31:30:99:32:4b:1c:2d:a2:a6:09:c4:
                    4e:5e:b4:d2:f5:de:84:bf:e6:44:e8:68:90:16:52:
                    1b:00:25:9d:2f:99:7f:19:53:d3:e1:95:ab:ff:04:
                    a2:ed:8e:80:45:b5:f4:46:3a:7a:68:7b:4c:64:4c:
                    c8:d9:98:6d:73:d9:f4:27:ac:75:22:27:fe:31:44:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:77:F2:16:AD:D8:38:44:AF:5A:2B:8F:0F:9C:16:46:19:2F:5A:CF
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212828.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:5800::/39

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:e2:21:31:bd:ca:1b:32:5c:a9:b3:b5:df:cb:16:a2:85:
         74:7c:98:6b:e6:4d:42:41:32:d8:8e:9b:04:ef:f9:35:d0:66:
         09:0c:36:1e:fd:ce:08:ba:b1:2d:e5:8c:f8:a6:18:93:9c:ff:
         f2:2b:95:40:2d:7c:8e:9d:ae:04:63:bb:70:a2:0b:02:fb:31:
         24:dd:a1:d7:dc:c8:3b:33:3e:24:53:2e:bd:7a:78:35:69:3e:
         1c:a5:57:5f:c9:3a:85:cc:67:58:7e:cd:e1:6b:d0:e9:52:3d:
         24:a9:b2:e3:82:fc:95:d5:43:2a:f7:50:73:ae:1a:7e:79:21:
         06:ba:4b:07:2e:ec:fa:c6:48:87:6d:1e:50:97:be:64:62:86:
         b4:08:bf:d9:18:c6:25:97:69:44:8c:16:6c:cb:49:bd:a0:eb:
         1d:37:e4:ef:b3:ca:3e:fa:85:89:63:50:02:fd:44:c4:8a:33:
         91:7b:d9:58:ea:8f:47:04:18:69:36:3a:a8:cc:4f:25:a4:8b:
         94:a0:12:43:30:96:61:19:6b:cf:a6:23:65:8e:5e:13:ba:02:
         4e:e3:e2:e0:ba:20:31:35:18:06:01:4f:58:40:4c:5b:da:7a:
         d4:77:64:9f:cb:8b:45:5e:a8:1e:cc:61:3e:4b:3d:f9:bd:a6:
         f1:a8:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----