Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200455.roa
File:                     AS200455.roa (raw, json)
Hash identifier:          m3KmnwqOq/IiLjpaVkhR5Sn9lmlz+G87fGYCmOc6P6o=
Subject key identifier:   28:A6:DC:3C:C1:8F:13:02:6A:85:9B:34:95:AA:57:1F:01:53:6F:F3
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       27D7985D7824910EF8D0E9F5D8B9644C59B89F35
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200455.roa
Signing time:             Wed 21 Dec 2022 16:56:55 +0000
ROA not before:           Wed 21 Dec 2022 16:51:55 +0000
ROA not after:            Wed 20 Dec 2023 16:56:55 +0000
asID:                     200455
IP address blocks:        2a06:a005:ba3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d7:98:5d:78:24:91:0e:f8:d0:e9:f5:d8:b9:64:4c:59:b8:9f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:55 2022 GMT
            Not After : Dec 20 16:56:55 2023 GMT
        Subject: CN=28A6DC3CC18F13026A859B3495AA571F01536FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:d8:10:81:12:f1:75:c7:f1:89:24:f4:d5:
                    6a:1f:25:b7:c6:06:57:35:52:a5:d8:27:a7:10:06:
                    ab:23:ec:2e:03:d2:0d:45:fe:1e:52:f3:12:a2:f0:
                    6e:2c:b3:27:ad:37:08:93:f0:5a:b2:ec:27:69:ff:
                    9f:98:4b:00:f9:bb:d1:b5:21:da:9d:e1:e4:93:81:
                    ad:5a:d0:31:4f:3c:f3:bc:5c:73:62:49:33:77:90:
                    e6:64:07:70:b6:86:0b:0c:74:35:db:44:95:ee:62:
                    c6:6e:bd:b0:bd:3e:a8:ec:09:0f:8f:f1:28:3f:ed:
                    a9:b9:b3:04:c4:22:16:4b:ac:8f:43:f0:74:82:d7:
                    e8:2c:fc:71:3f:65:e3:22:d3:04:51:38:b4:f2:ce:
                    44:e9:9e:f6:c6:3e:fe:30:a1:81:1a:31:3b:f0:88:
                    25:2e:85:d0:fb:a5:81:11:07:da:b0:46:92:6a:9a:
                    98:6b:5c:be:6a:d6:55:6e:b6:14:48:4a:81:2b:b2:
                    dd:05:e0:28:47:85:e4:70:ed:ce:ec:eb:49:08:33:
                    23:1c:79:06:7c:3c:e3:1b:1f:10:dc:3c:4c:ce:55:
                    4c:2a:b9:43:6c:9e:32:c1:c3:f5:75:6e:ac:e9:61:
                    c3:10:e7:29:08:85:d0:67:e2:e8:0b:6c:6b:2d:dd:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A6:DC:3C:C1:8F:13:02:6A:85:9B:34:95:AA:57:1F:01:53:6F:F3
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS200455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:ba3::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:e0:83:b0:01:d6:32:e1:c6:31:7e:e9:77:4a:fa:f4:37:39:
         21:a0:37:d6:b7:2e:76:f7:4b:1a:c5:0b:08:8e:47:97:1b:5c:
         ed:27:17:bc:4a:4f:87:0b:90:f6:34:6a:2d:74:3a:4a:16:11:
         17:8e:28:62:de:d8:34:00:db:ce:fe:e7:61:d4:2b:1c:0f:20:
         6f:d7:6f:c5:7b:b1:2d:e2:7b:01:32:81:bb:9b:63:dd:68:3f:
         df:4c:c6:db:bb:53:20:0f:e3:81:a1:3f:8e:33:ce:fb:14:55:
         b5:e4:b1:c8:98:d5:48:72:88:ec:8a:cc:14:00:24:ed:9f:3a:
         e5:7d:c9:a3:42:53:d6:b8:6b:b6:f6:ba:e9:db:e9:ad:4c:e3:
         0f:1e:ce:fa:6f:ec:da:a2:5b:ec:b7:39:93:23:47:24:2a:e1:
         2a:67:f3:bb:4f:fc:79:bb:6e:c8:82:a6:98:fa:79:81:9a:04:
         3a:ed:33:aa:3f:0d:28:40:a1:27:fb:18:84:64:63:19:08:02:
         ae:4c:5b:19:23:08:67:aa:c8:3c:da:ed:28:53:0f:d3:30:67:
         ac:b9:59:e7:35:4f:fd:a0:45:b9:66:eb:16:bd:49:e2:55:eb:
         a5:63:e0:43:bb:7a:5b:19:4f:22:ab:87:76:32:9c:ac:42:75:
         8e:22:cb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----