Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS62485.roa
File:                     AS62485.roa (raw, json)
Hash identifier:          AJ1p5wK4euftvdUal8gUJaZprFlCrQU+yk4w/+OXnfs=
Subject key identifier:   1C:AC:FA:1E:A9:68:0E:55:01:E5:F9:85:2E:C4:42:03:49:61:D4:7A
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       394E32CD028DC46232E443260C9405502ECBF361
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS62485.roa
Signing time:             Wed 21 Dec 2022 16:56:52 +0000
ROA not before:           Wed 21 Dec 2022 16:51:52 +0000
ROA not after:            Wed 20 Dec 2023 16:56:52 +0000
asID:                     62485
IP address blocks:        2a06:a005:150e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4e:32:cd:02:8d:c4:62:32:e4:43:26:0c:94:05:50:2e:cb:f3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:52 2022 GMT
            Not After : Dec 20 16:56:52 2023 GMT
        Subject: CN=1CACFA1EA9680E5501E5F9852EC442034961D47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:88:b6:ad:fb:d9:6d:09:91:00:82:fe:11:f5:
                    ec:95:c0:d5:fb:33:ce:ef:aa:58:8b:f4:5f:64:fb:
                    1b:5d:7a:46:ff:80:e6:9e:83:55:9d:83:0b:8b:a7:
                    04:0f:f3:b0:41:1b:56:cd:98:b4:3c:1f:53:3d:30:
                    94:08:7e:df:98:a0:fe:5e:0d:0d:f8:6d:70:dc:16:
                    e8:13:32:ef:38:24:f1:67:b7:3d:7e:9a:1e:73:f0:
                    44:95:7a:2b:45:d3:7d:6f:4a:3c:0c:df:7c:b9:2b:
                    69:11:ac:3a:9f:5f:fc:73:26:af:91:55:37:a9:91:
                    18:ca:9e:c3:3f:d5:b7:6b:9d:e2:fc:0e:fc:55:1f:
                    66:5f:2c:05:d0:7c:16:21:bd:fe:93:52:1f:fb:70:
                    19:ed:3d:b5:1f:71:4d:a0:f5:48:9f:8f:f0:4b:b1:
                    03:a2:45:0b:36:48:7d:2d:9e:42:a7:db:18:66:c9:
                    ad:3e:7a:ee:f3:eb:7e:eb:09:ea:de:00:8d:27:11:
                    81:a0:98:ab:0b:93:53:b3:f7:e2:4b:87:ee:9e:47:
                    97:b5:46:da:10:1a:81:c3:69:4e:b7:1b:42:88:60:
                    0f:c1:b1:27:7d:6d:e4:5a:ed:32:f2:d1:16:f7:8f:
                    1f:55:4d:43:6a:dd:20:f0:4a:46:e9:6f:43:73:41:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AC:FA:1E:A9:68:0E:55:01:E5:F9:85:2E:C4:42:03:49:61:D4:7A
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS62485.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:150e::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:be:b4:df:22:8a:85:e1:da:05:e5:12:5a:17:21:36:46:84:
         b7:6b:5f:08:ca:bf:01:bb:35:8a:1b:95:e6:26:a0:8f:c4:82:
         64:61:62:18:34:34:53:09:34:6a:ba:51:fc:ae:a5:21:e9:0a:
         30:e1:9a:73:43:76:3c:91:b2:ea:88:d9:48:f8:3f:f6:d2:e1:
         3a:7e:c9:98:fa:c4:15:e4:8e:05:37:80:09:09:ec:a9:62:78:
         10:46:8c:68:a4:ec:1e:41:18:54:14:22:ed:48:ad:78:96:2e:
         11:7b:f8:2b:43:ca:97:1a:03:a6:dc:54:b7:b1:6a:ba:30:07:
         4a:94:ce:2a:34:2c:1a:49:bc:a9:d3:b8:a3:45:80:67:61:cc:
         33:1e:fa:e0:66:12:4c:01:95:fc:e6:29:cb:4d:97:10:a9:31:
         7c:0f:43:8d:e8:b0:7e:bb:f2:f2:5e:4e:94:d6:5e:af:af:59:
         09:78:d1:58:39:11:7e:bf:9b:a7:b7:84:80:d7:00:49:53:ba:
         b4:5e:3a:fb:cd:dd:3f:3c:6a:d6:28:01:fa:10:14:38:9f:d8:
         08:fb:39:2e:0e:76:ff:0d:e0:f0:a2:59:31:bb:a0:3c:06:8d:
         c0:51:10:5e:1c:b3:61:d4:69:1a:ea:56:49:05:0e:1b:ce:0f:
         e3:d4:c1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----