Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS34549.roa
File:                     AS34549.roa (raw, json)
Hash identifier:          SDZa9Le7f48qZaX2Neh2KvNij79eJ6QOLZ6GDEowW4o=
Subject key identifier:   4A:50:C6:71:8D:C2:D8:41:96:28:51:86:17:76:11:BB:DD:49:9B:FA
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       3CA9FBF13F1FFA312A195DED9AA82CB869423638
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS34549.roa
Signing time:             Wed 08 Mar 2023 18:45:26 +0000
ROA not before:           Wed 08 Mar 2023 18:40:26 +0000
ROA not after:            Wed 06 Mar 2024 18:45:26 +0000
asID:                     34549
IP address blocks:        2a06:1287:3000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a9:fb:f1:3f:1f:fa:31:2a:19:5d:ed:9a:a8:2c:b8:69:42:36:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:26 2023 GMT
            Not After : Mar  6 18:45:26 2024 GMT
        Subject: CN=4A50C6718DC2D84196285186177611BBDD499BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5f:43:dc:ce:44:39:4d:46:f4:b2:37:3f:27:
                    25:ad:34:08:43:18:4e:4c:22:02:d3:d3:5c:a4:bd:
                    5d:fb:90:3f:e1:5f:36:2c:56:bc:d4:cc:e9:cc:f0:
                    3d:58:0a:5b:f5:37:7b:ce:15:9c:cb:b2:b6:c5:45:
                    28:e6:c6:fd:c1:12:6a:0b:7f:ee:3b:f3:2a:dd:d6:
                    9b:8f:cf:29:4b:b6:1d:d0:93:38:f7:73:06:60:c6:
                    b5:1b:53:7f:ce:d2:5a:74:07:f6:47:2c:53:98:66:
                    eb:79:a4:a3:21:ae:f4:a4:85:65:52:d5:e1:fa:2e:
                    23:31:2a:81:9a:a6:2f:1f:f0:a6:f2:fb:f7:56:8e:
                    74:4d:dd:ec:0a:5d:ed:be:54:80:fa:1a:14:de:c6:
                    8d:d9:75:d9:2b:95:19:b9:66:02:14:2b:16:ef:72:
                    51:54:99:cd:20:fb:32:ef:d5:f1:58:70:01:10:ca:
                    9a:4c:e1:72:04:9d:b0:55:48:15:36:fe:34:39:7e:
                    89:b2:01:72:1a:fa:30:60:05:08:dc:a9:b0:2d:91:
                    ad:3b:38:f1:5e:f5:fb:14:6d:17:e4:4d:41:d2:7c:
                    8c:44:ab:56:db:c7:cd:c8:c6:10:4c:4e:ac:3f:ce:
                    b3:90:1d:0c:46:d7:ec:13:88:e3:9f:c0:01:4f:61:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:50:C6:71:8D:C2:D8:41:96:28:51:86:17:76:11:BB:DD:49:9B:FA
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS34549.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3000::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:18:a8:d1:0c:4a:33:6b:b7:f3:b6:cf:e9:64:d7:b3:58:95:
         fe:8d:f8:77:4c:ad:31:dd:66:06:b0:d7:92:07:aa:6d:c5:2d:
         7f:7a:c9:b0:d1:62:39:10:dd:c6:c6:99:4b:6b:59:2e:49:96:
         ee:2a:3c:be:77:96:78:54:e2:6a:2c:b0:1a:dc:56:6c:d0:f0:
         90:e2:00:da:ec:5a:da:c0:b1:1a:35:dc:db:21:b4:08:35:21:
         2d:d6:2a:9a:df:63:03:c9:d9:5e:01:8a:1e:ae:3c:9e:f5:ec:
         ed:e1:98:d7:75:b1:41:ef:bb:4e:5f:8c:75:71:bd:5f:97:8b:
         67:e7:03:69:ef:8a:82:57:00:9d:26:3c:32:e9:16:9b:5c:3d:
         71:cc:df:cf:03:81:bc:27:84:e1:d5:43:e7:17:c4:33:e2:9d:
         59:5f:97:31:ea:0e:f0:60:38:3a:6c:a9:24:43:3b:0e:c5:4d:
         ca:c9:3c:74:91:65:16:ce:22:da:45:3b:7c:dd:c0:0d:51:cb:
         1d:df:5c:d9:b5:67:a9:12:18:88:8a:d9:bf:e3:8a:a3:25:01:
         2b:81:70:8b:d9:79:c9:63:0c:7c:0d:2d:b7:fc:73:a2:fd:e2:
         5d:db:09:71:93:9f:58:cd:40:ee:fd:9a:7c:3a:e2:e6:76:3d:
         f0:36:40:29
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUPKn78T8f+jEqGV3tmqgsuGlCNjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzAzMDgxODQwMjZaFw0yNDAzMDYxODQ1MjZaMDMxMTAvBgNV
BAMTKDRBNTBDNjcxOERDMkQ4NDE5NjI4NTE4NjE3NzYxMUJCREQ0OTlCRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXX0PczkQ5TUb0sjc/JyWtNAhD
GE5MIgLT01ykvV37kD/hXzYsVrzUzOnM8D1YClv1N3vOFZzLsrbFRSjmxv3BEmoL
f+478yrd1puPzylLth3Qkzj3cwZgxrUbU3/O0lp0B/ZHLFOYZut5pKMhrvSkhWVS
1eH6LiMxKoGapi8f8Kby+/dWjnRN3ewKXe2+VID6GhTexo3ZddkrlRm5ZgIUKxbv
clFUmc0g+zLv1fFYcAEQyppM4XIEnbBVSBU2/jQ5fomyAXIa+jBgBQjcqbAtka07
OPFe9fsUbRfkTUHSfIxEq1bbx83IxhBMTqw/zrOQHQxG1+wTiOOfwAFPYV0hAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUSlDGcY3C2EGWKFGGF3YRu91Jm/owHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMFwGCCsGAQUF
BwELBFAwTjBMBggrBgEFBQcwC4ZAcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzM0NTQ5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgYS
hzAAMA0GCSqGSIb3DQEBCwUAA4IBAQBLGKjRDEoza7fzts/pZNezWJX+jfh3TK0x
3WYGsNeSB6ptxS1/esmw0WI5EN3GxplLa1kuSZbuKjy+d5Z4VOJqLLAa3FZs0PCQ
4gDa7FrawLEaNdzbIbQINSEt1iqa32MDydleAYoerjye9ezt4ZjXdbFB77tOX4x1
cb1fl4tn5wNp74qCVwCdJjwy6RabXD1xzN/PA4G8J4Th1UPnF8Qz4p1ZX5cx6g7w
YDg6bKkkQzsOxU3KyTx0kWUWziLaRTt83cANUcsd31zZtWepEhiIitm/44qjJQEr
gXCL2XnJYwx8DS23/HOi/eJd2wlxk59YzUDu/Zp8OuLmdj3wNkAp
-----END CERTIFICATE-----