Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204660.roa
File:                     AS204660.roa (raw, json)
Hash identifier:          ffCnRDcT7ZXtuRbWocJ7LM1g83LoH/JiD2zzI+0Fwgc=
Subject key identifier:   CF:0F:BA:05:0C:33:ED:04:8C:3F:3A:22:31:AE:33:C7:08:19:D4:21
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       15094C06057C70772C3F7DEADC0CC0ADB855076A
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204660.roa
Signing time:             Wed 21 Dec 2022 16:56:45 +0000
ROA not before:           Wed 21 Dec 2022 16:51:45 +0000
ROA not after:            Wed 20 Dec 2023 16:56:45 +0000
asID:                     204660
IP address blocks:        2a06:a005:d23::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:09:4c:06:05:7c:70:77:2c:3f:7d:ea:dc:0c:c0:ad:b8:55:07:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:45 2022 GMT
            Not After : Dec 20 16:56:45 2023 GMT
        Subject: CN=CF0FBA050C33ED048C3F3A2231AE33C70819D421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:71:65:cf:fe:81:44:a1:24:b3:d5:90:fe:
                    75:a2:5e:c0:c5:a0:7a:75:03:98:75:d7:3a:4a:9b:
                    06:cd:f8:85:c7:d9:4f:ba:af:fb:2a:7d:6a:7d:fd:
                    f8:e0:d7:1d:00:12:97:31:51:34:b6:bf:fe:8d:27:
                    9d:c1:78:a0:51:3e:09:b4:49:1b:f0:30:9f:bd:91:
                    dc:bf:cc:e0:11:f4:b8:e8:23:82:08:b8:ef:32:35:
                    f5:6d:10:66:f2:dd:ff:00:a8:16:11:d0:4d:88:ff:
                    f1:2a:59:94:16:93:5f:9e:4c:55:c4:b8:ce:09:96:
                    3a:d6:46:53:32:15:45:b0:60:21:0b:09:a6:9c:87:
                    76:9b:01:06:f7:f7:d3:ba:b0:ab:5d:e8:d6:7c:67:
                    fd:53:47:f9:8f:ed:4b:b9:09:ff:5c:87:2d:f2:77:
                    12:db:aa:04:69:5b:c9:78:3b:9b:a7:43:bd:4a:f9:
                    dc:cc:c9:2a:dc:c7:2a:9f:6c:bf:ad:5d:1a:2f:b1:
                    53:d7:e9:37:c0:37:5a:ff:bf:84:db:7d:1f:b8:a1:
                    eb:de:ad:30:4b:8d:13:f8:9f:84:31:85:e2:1a:8c:
                    08:78:95:82:6d:b6:9c:15:c6:ce:44:bc:48:c5:9b:
                    2f:e4:3e:d3:04:ac:ab:83:4e:fb:9a:15:42:cb:1b:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0F:BA:05:0C:33:ED:04:8C:3F:3A:22:31:AE:33:C7:08:19:D4:21
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS204660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d23::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:bb:64:75:b1:a3:ef:76:cd:8c:22:e9:fe:01:18:2a:c0:
         50:93:18:35:b2:c6:42:cc:f8:14:c5:ed:3e:63:e7:db:e2:16:
         1b:9d:b2:37:da:53:ae:15:19:43:89:6b:56:ed:98:c1:70:d2:
         0c:49:ba:e8:6a:d4:32:20:21:8b:7c:0d:79:7f:6e:b3:9b:e3:
         7c:a1:46:29:48:11:e2:06:fd:ce:3f:72:97:85:a7:6b:1e:64:
         7e:dc:49:c6:bc:33:5c:84:f1:5d:37:d9:cf:9f:1b:5c:eb:b8:
         ab:9e:9f:b8:0d:62:34:c4:ba:1c:18:e4:66:7d:b3:02:bb:1b:
         d9:15:e1:c2:39:c9:7f:f8:cd:88:e9:cb:a0:eb:96:33:49:14:
         c0:bf:37:2f:87:3e:b5:27:68:39:10:46:0e:84:84:b1:43:d4:
         63:f7:4f:f4:51:4c:cc:bf:b0:00:78:fb:8f:4a:d1:0c:ef:a6:
         29:2a:45:fe:56:1b:b1:9e:2a:6f:86:93:9c:6e:e7:d5:3e:cf:
         1f:51:02:60:18:19:17:36:f6:40:b6:57:eb:a8:99:e3:4c:99:
         14:60:13:8b:42:43:fa:d9:12:d4:1f:aa:d2:e7:03:3a:c8:64:
         49:c7:12:fe:f4:f3:7f:e6:2c:31:f6:b2:02:5e:a7:dc:90:af:
         76:87:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----