Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa
File:                     3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa (raw, json)
Hash identifier:          Rl95FojK36ihk/cqm2o/xROZnQIRWkK3GBm2AIt68k0=
Subject key identifier:   7C:66:B6:7F:B6:96:24:AB:94:FC:AE:5A:98:FB:73:AC:A3:E0:41:9D
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       23B2002923202EE48533320763F41D73CA18ECC9
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa
Signing time:             Wed 21 Dec 2022 16:56:39 +0000
ROA not before:           Wed 21 Dec 2022 16:51:39 +0000
ROA not after:            Wed 20 Dec 2023 16:56:39 +0000
asID:                     204136
IP address blocks:        103.230.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b2:00:29:23:20:2e:e4:85:33:32:07:63:f4:1d:73:ca:18:ec:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:39 2022 GMT
            Not After : Dec 20 16:56:39 2023 GMT
        Subject: CN=7C66B67FB69624AB94FCAE5A98FB73ACA3E0419D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:ff:e5:0b:79:3d:43:8c:70:9d:16:8c:e1:
                    c4:4b:8d:1a:a8:19:09:a6:1b:47:83:9c:3d:fe:7f:
                    52:4b:6d:78:ef:6d:8d:b2:29:bf:a7:16:5e:2b:51:
                    19:0d:52:d3:d5:7a:70:de:ed:9b:bd:21:15:6a:e3:
                    58:32:4b:8e:81:4f:c5:08:32:ab:de:b9:26:56:4f:
                    ce:bd:7d:03:a1:6c:ec:f4:54:e1:fa:dc:29:b7:3d:
                    d5:cd:5c:17:1a:e7:d9:82:38:e7:1f:90:3d:7a:e8:
                    ed:f8:1d:37:55:e7:d2:2e:4b:bf:d4:68:fb:61:ef:
                    d4:3a:76:84:b5:6f:56:25:09:2e:77:88:ed:5f:47:
                    e8:9d:a5:1a:1c:91:c0:72:8c:f1:9b:18:00:3b:fd:
                    92:dc:b1:86:ff:20:4b:9e:23:19:5c:eb:62:ad:83:
                    07:07:9a:74:c9:d1:5e:37:80:21:e3:b7:5e:92:fa:
                    ce:f9:18:9d:4d:30:2c:31:07:f3:71:ba:ac:63:06:
                    a7:b2:c1:9f:83:0d:d1:97:ea:88:2f:30:74:d3:73:
                    54:88:79:8e:5e:40:ec:05:d8:2e:31:2e:52:2e:48:
                    f4:6b:9c:80:ab:5b:ff:3e:8a:35:01:51:ab:19:3e:
                    63:bb:c1:62:5b:b6:b6:d1:ee:c6:c7:a6:2b:4a:a1:
                    aa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:66:B6:7F:B6:96:24:AB:94:FC:AE:5A:98:FB:73:AC:A3:E0:41:9D
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3233302e3134312e302f32342d3234203d3e20323034313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d3:5c:2b:b5:b8:d5:e4:19:7b:ec:20:68:37:48:5b:0b:46:
         93:6b:e5:41:79:75:70:27:2e:3b:a6:d1:05:33:85:14:56:39:
         ef:1c:d0:53:c0:6e:b9:8a:b2:86:13:95:c9:51:de:62:9d:fd:
         24:d5:ff:6f:ee:5c:b7:c7:81:84:fe:d2:a2:49:e4:7b:9e:c8:
         68:5a:42:b6:2b:12:9e:16:57:71:0b:4b:b3:59:19:18:ab:e7:
         b5:3b:bc:f3:29:f5:f7:dd:00:11:83:0e:45:9a:a1:ba:2e:7b:
         0f:48:45:9e:c0:0d:64:75:ef:e5:1f:47:e8:80:6e:5a:2a:5e:
         d1:d1:4e:bd:06:a4:b7:7c:8c:02:cd:18:6e:0b:54:50:0b:ba:
         8e:6f:69:57:95:84:8d:c7:0e:8d:e5:fb:00:97:33:35:04:41:
         f0:09:47:30:34:49:f7:97:d1:c8:30:b1:19:a3:25:63:e6:3f:
         2a:09:3c:7b:6c:4f:5a:2d:6d:05:17:95:94:14:2e:c6:3b:d4:
         2c:4f:8f:74:1e:1a:48:03:67:ad:51:4b:80:04:e4:bc:66:75:
         fb:c8:39:9b:e4:d0:a5:b1:36:70:af:7a:50:3f:99:6b:49:92:
         9b:05:ff:ee:9b:21:fd:ce:7f:a7:46:c1:3a:74:98:fc:bc:41:
         bf:a5:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----