Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS59474.roa
File:                     AS59474.roa (raw, json)
Hash identifier:          bgAFr8s46twYPkIKA6yoVQ54k87G5JgSwfn+gRAbbp8=
Subject key identifier:   74:C4:C7:61:60:07:B0:E5:99:BA:E9:69:A2:0B:B9:7D:16:B2:13:72
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       4C68B4E65774D56065CE392763F7D38BF9289CA3
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS59474.roa
Signing time:             Wed 21 Dec 2022 16:56:55 +0000
ROA not before:           Wed 21 Dec 2022 16:51:55 +0000
ROA not after:            Wed 20 Dec 2023 16:56:55 +0000
asID:                     59474
IP address blocks:        2a06:a005:f30::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:68:b4:e6:57:74:d5:60:65:ce:39:27:63:f7:d3:8b:f9:28:9c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:55 2022 GMT
            Not After : Dec 20 16:56:55 2023 GMT
        Subject: CN=74C4C7616007B0E599BAE969A20BB97D16B21372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:48:34:67:e4:32:d9:58:7b:ab:6f:f5:28:ea:
                    e6:d4:9b:8c:7d:d6:ba:fe:61:be:e8:c5:9e:4d:bb:
                    23:ec:f9:6e:ba:42:40:2c:b8:23:c4:5c:18:1f:64:
                    c3:81:8d:b2:56:a1:31:48:92:b5:f4:3f:b1:73:a8:
                    9d:30:a7:98:89:3c:79:01:a2:bc:40:43:37:ea:cd:
                    20:ae:4e:4d:65:61:2e:92:e8:0a:3b:e1:a7:88:25:
                    35:db:bb:fa:85:11:c6:12:c9:e5:a2:4e:e2:ab:34:
                    68:70:75:73:c1:36:05:da:ab:d6:05:86:6c:b0:a7:
                    40:b9:b2:ca:19:49:c0:3c:7a:7f:f8:d2:e0:be:1a:
                    8c:7a:aa:91:68:24:d1:64:9e:61:ca:bb:10:94:63:
                    c4:54:3d:fe:6c:6f:ea:cf:44:8b:ed:e8:66:89:21:
                    1e:e2:6f:4d:41:6b:39:2e:f3:3a:80:c1:0d:16:5b:
                    1d:4a:36:a3:05:13:7e:9c:29:40:14:70:de:1c:2d:
                    1a:3c:22:99:d6:0f:fb:b5:84:1c:82:47:3a:8b:3d:
                    56:80:48:9f:6b:42:4c:a3:97:3f:ce:a1:02:47:c5:
                    21:fc:e5:04:e0:89:71:92:02:01:61:3b:d5:5d:8c:
                    3f:5c:46:27:15:8d:f8:b8:a3:90:fa:34:83:5a:db:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C4:C7:61:60:07:B0:E5:99:BA:E9:69:A2:0B:B9:7D:16:B2:13:72
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS59474.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:f30::/44

    Signature Algorithm: sha256WithRSAEncryption
         c6:2c:4d:84:1c:ba:f8:2d:cd:22:75:a5:6b:5d:5e:6a:f3:29:
         6c:9d:b2:f9:59:bf:cb:65:e4:05:b9:bf:89:13:f5:49:9e:88:
         67:f6:b8:7b:67:bd:63:d0:20:36:32:a6:f6:29:7d:1f:93:cd:
         aa:68:43:e6:6e:fe:66:46:ae:91:d6:d6:a5:cb:a8:c6:f7:75:
         6a:6a:ae:08:5c:ce:08:d0:85:0d:f1:df:38:6d:29:49:0c:80:
         b8:b4:7f:88:20:21:23:f4:84:f2:10:fc:5f:65:00:0e:f9:0e:
         0c:ad:80:61:0c:da:81:f2:06:50:2b:4b:9f:5f:2b:b1:9e:f1:
         40:12:f4:97:ca:f0:43:72:84:6a:01:aa:79:f4:85:68:64:a4:
         6e:f1:f6:d8:59:df:ec:4a:1c:1a:6e:4f:0a:71:6f:bb:7e:db:
         0d:3b:ce:67:e4:05:4f:dc:70:ca:77:d4:99:0f:af:10:ba:d0:
         c0:27:3b:64:b2:21:61:b5:52:ff:e0:9d:41:af:aa:74:31:d6:
         02:95:2a:f6:89:87:a8:e1:e8:1c:40:a9:29:b3:e6:a0:6b:11:
         47:92:85:e7:7f:2c:1a:a9:42:b5:5c:87:77:d0:20:8a:92:70:
         63:77:24:d9:90:50:5f:eb:6a:67:0f:d9:db:ff:12:ad:2d:f5:
         c9:55:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----