Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205152.roa
File:                     AS205152.roa (raw, json)
Hash identifier:          7S1rHPc3dP+EggZNS3OkZsE1LJK8+6OjADEZTWA0p+U=
Subject key identifier:   97:E3:2F:D5:FF:42:DD:3A:4E:52:B2:C8:EB:2F:BB:42:ED:65:94:B8
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       20A394441D0D2B4D8F8EAB66B33F0EB47672EB53
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205152.roa
Signing time:             Wed 21 Dec 2022 16:56:43 +0000
ROA not before:           Wed 21 Dec 2022 16:51:43 +0000
ROA not after:            Wed 20 Dec 2023 16:56:43 +0000
asID:                     205152
IP address blocks:        2a06:a005:1a80::/44 maxlen: 48
                          2a06:a005:1a90::/44 maxlen: 48
                          2a06:a005:1aa0::/44 maxlen: 48
                          2a06:a005:1ab0::/44 maxlen: 48
                          2a06:a005:1ac0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a3:94:44:1d:0d:2b:4d:8f:8e:ab:66:b3:3f:0e:b4:76:72:eb:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:43 2022 GMT
            Not After : Dec 20 16:56:43 2023 GMT
        Subject: CN=97E32FD5FF42DD3A4E52B2C8EB2FBB42ED6594B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:8d:7d:ed:3a:85:e1:fa:e5:39:b7:57:28:
                    3c:e1:45:a8:f8:61:d2:5a:be:0d:4c:48:cf:5f:67:
                    08:75:5a:da:d4:49:6e:ac:89:ed:f7:2e:20:b7:cf:
                    07:ab:ba:0b:d9:1f:c2:8c:6f:61:11:a4:78:52:aa:
                    01:37:06:da:1a:fe:9e:56:7d:7f:cc:30:49:9d:3c:
                    a0:77:c8:ac:9f:53:1e:41:f1:ab:aa:83:62:e4:05:
                    f7:d0:a6:30:2d:32:0c:a6:d7:ac:80:f0:52:de:48:
                    38:3a:35:c4:4b:90:d3:7b:cc:13:7e:01:c1:9c:88:
                    f1:96:85:23:b5:2b:b4:f5:e2:1b:7f:fc:66:26:13:
                    cf:6b:ec:35:22:bd:8b:c0:16:4f:71:4c:9c:b6:84:
                    a1:e2:be:88:b6:8c:84:0d:0a:13:76:b3:a1:32:f9:
                    c7:2f:d2:f5:d3:4d:09:56:6b:39:63:8c:e8:57:96:
                    08:2c:50:d0:f5:45:4f:5d:cc:85:65:23:86:f7:df:
                    c6:70:b7:ac:10:4f:2a:91:f6:c2:cd:a6:08:50:c5:
                    74:60:2b:80:4f:64:b0:36:9c:3a:d9:56:da:77:ee:
                    6a:f6:9f:75:6d:64:04:59:10:82:86:f5:b3:58:5d:
                    a9:12:5c:7e:d3:a6:a2:63:a7:11:fc:36:81:db:bd:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E3:2F:D5:FF:42:DD:3A:4E:52:B2:C8:EB:2F:BB:42:ED:65:94:B8
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS205152.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1a80::-2a06:a005:1acf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         77:78:04:2a:22:f2:e9:ec:5d:b6:35:0f:71:ef:42:f0:a3:5f:
         78:52:aa:ea:2b:21:04:74:d3:1c:13:c6:aa:b7:e1:97:80:0d:
         f5:bf:43:58:ec:59:5d:bb:00:50:ca:d3:38:58:c6:96:4c:e0:
         b4:1f:f3:5d:13:2c:4d:cd:e6:1e:f3:c9:79:f2:22:49:f9:d9:
         52:e3:e2:8e:e3:b9:5d:44:ba:a3:63:d4:d3:25:97:9a:b9:24:
         ac:6e:e3:a8:38:3c:f0:2d:3a:9d:6a:2b:e2:9d:1b:9a:17:c0:
         b3:a5:7a:55:62:a0:47:d8:db:7e:bf:44:67:a2:2c:89:da:c1:
         6d:d1:0b:68:28:6d:8d:29:3c:70:6d:ae:4c:23:9a:58:58:21:
         ce:e9:c8:8d:5f:9c:8c:1f:1a:75:d6:fe:87:79:0c:02:28:af:
         49:f7:c9:0e:75:83:fb:9d:60:8d:01:52:c6:64:b3:a4:3b:1f:
         da:72:16:bd:5d:5b:80:29:65:28:eb:cc:50:04:b6:f4:89:7d:
         ee:7b:4e:ad:67:1f:b3:28:b0:fb:ff:c9:72:71:ca:c4:85:da:
         6b:54:5f:5c:81:c4:6c:75:d5:fb:d7:35:36:ab:19:20:0d:f1:
         f1:7d:44:82:ac:c5:3b:0a:42:90:1d:1d:18:db:ca:02:12:e1:
         6a:94:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----