Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233322e302f32322d3234203d3e203631313338.roa
File:                     32372e302e3233322e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          ftiSdw3vZYugQIZJs7AWQLcGCcxTTomLQ/xWK5I9xpQ=
Subject key identifier:   19:3D:4E:15:26:36:41:59:98:78:FE:DC:6E:E8:0B:65:B8:D1:BF:DE
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       04AB9988978BF6AA9E23A57706842DB81E8EF539
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233322e302f32322d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:56:38 +0000
ROA not before:           Wed 21 Dec 2022 16:51:38 +0000
ROA not after:            Wed 20 Dec 2023 16:56:38 +0000
asID:                     61138
IP address blocks:        27.0.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ab:99:88:97:8b:f6:aa:9e:23:a5:77:06:84:2d:b8:1e:8e:f5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:38 2022 GMT
            Not After : Dec 20 16:56:38 2023 GMT
        Subject: CN=193D4E15263641599878FEDC6EE80B65B8D1BFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:37:26:92:8b:d5:76:b1:bd:01:a2:be:e2:
                    ef:ef:88:3c:91:3f:4f:ec:ed:b2:74:c8:80:01:86:
                    5d:ae:a3:34:82:16:bd:a0:81:f3:d6:c9:e4:5a:f1:
                    88:2b:64:9d:5f:05:9d:64:af:96:a2:26:7b:b2:eb:
                    13:33:0b:23:ad:6d:f1:f5:cf:9e:f4:d7:dc:59:70:
                    7b:30:c9:85:e2:fb:68:86:95:7b:94:35:79:1c:bb:
                    a2:9c:70:0d:ae:e9:ce:8a:f3:e9:16:ed:df:42:ef:
                    91:2a:df:ac:bc:b1:36:61:9d:6e:7a:42:de:b9:78:
                    27:de:76:29:a3:57:75:fa:68:8d:f6:3d:f3:95:01:
                    f9:76:83:ea:0f:12:15:03:54:c1:7e:2a:17:fd:7d:
                    e2:51:67:64:7e:e3:5a:db:c3:d7:7d:91:2e:3d:a8:
                    c4:32:29:f2:0f:93:dc:2a:63:4f:7a:a3:7c:c0:8e:
                    e6:04:69:e2:a4:c7:45:b2:12:31:c8:f9:6e:cd:4f:
                    51:4d:69:d3:ff:15:54:b0:02:8b:5b:f9:a9:90:0b:
                    77:5f:e2:85:ef:e8:2d:4f:a4:6f:5c:c1:12:54:d8:
                    3a:c4:16:0e:15:07:06:00:57:a0:53:b8:04:91:c1:
                    21:07:be:57:c5:df:b1:2e:17:07:10:8f:5d:c8:79:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3D:4E:15:26:36:41:59:98:78:FE:DC:6E:E8:0B:65:B8:D1:BF:DE
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/32372e302e3233322e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:28:4e:ed:03:2a:ff:cf:60:ee:df:4c:bd:b4:e3:5f:32:ae:
         0f:4f:90:c4:b0:46:d1:d6:41:46:d0:7e:0d:57:2b:28:6d:46:
         5f:8c:d9:6f:69:d7:52:f7:81:4f:3c:c8:fd:35:37:c9:d2:74:
         06:a2:db:3b:12:41:cb:10:5d:8b:b9:c4:d1:52:75:28:24:21:
         95:3e:68:71:af:f8:56:22:09:86:fe:c7:aa:48:97:80:9c:bb:
         18:a2:60:67:ce:4a:45:4e:bb:de:98:d0:b7:6a:ba:61:f6:b0:
         56:ed:15:80:3a:c3:67:3a:63:f6:95:0f:9e:e6:2f:d0:0e:2a:
         42:56:bb:76:38:6e:02:78:2c:54:24:2b:36:82:54:4a:68:3f:
         9d:5f:2b:57:45:ae:7d:0b:08:a3:ba:ab:8e:65:2c:51:e7:e1:
         e3:b2:2c:59:51:a9:36:d0:24:6d:83:8d:c5:94:2f:42:73:90:
         ba:7f:ff:4f:a5:b0:03:16:1b:ff:3f:4a:0b:a6:ec:d9:a8:a8:
         c6:24:da:b8:32:7d:e6:57:6e:41:da:fc:3b:e7:de:a6:5f:45:
         b4:0c:fd:cd:1e:11:d1:68:7e:1c:e6:42:3b:4f:f7:1e:55:a5:
         5c:ff:e8:fb:e3:07:cc:eb:6a:7b:96:cd:bd:93:db:cf:45:9b:
         bb:63:8e:18
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUBKuZiJeL9qqeI6V3BoQtuB6O9TkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEygxN0ZGQkFDNDU5
QTRDQTI5MDk5MTJGNDY0QTA4QjFGODFEQTNEOUY2MB4XDTIyMTIyMTE2NTEzOFoX
DTIzMTIyMDE2NTYzOFowMzExMC8GA1UEAxMoMTkzRDRFMTUyNjM2NDE1OTk4NzhG
RURDNkVFODBCNjVCOEQxQkZERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMl0NyaSi9V2sb0Bor7i7++IPJE/T+ztsnTIgAGGXa6jNIIWvaCB89bJ5Frx
iCtknV8FnWSvlqIme7LrEzMLI61t8fXPnvTX3FlwezDJheL7aIaVe5Q1eRy7opxw
Da7pzorz6Rbt30LvkSrfrLyxNmGdbnpC3rl4J952KaNXdfpojfY985UB+XaD6g8S
FQNUwX4qF/194lFnZH7jWtvD132RLj2oxDIp8g+T3CpjT3qjfMCO5gRp4qTHRbIS
Mcj5bs1PUU1p0/8VVLACi1v5qZALd1/ihe/oLU+kb1zBElTYOsQWDhUHBgBXoFO4
BJHBIQe+V8XfsS4XBxCPXch5occCAwEAAaOCAgEwggH9MB0GA1UdDgQWBBQZPU4V
JjZBWZh4/txu6AtluNG/3jAfBgNVHSMEGDAWgBQX/7rEWaTKKQmRL0ZKCLH4HaPZ
9jAOBgNVHQ8BAf8EBAMCB4AwbAYDVR0fBGUwYzBhoF+gXYZbcnN5bmM6Ly9ycGtp
LnphcHBpZWhvc3QuY29tL3JlcG8vWkFQUElFLVJQS0kvMy8xN0ZGQkFDNDU5QTRD
QTI5MDk5MTJGNDY0QTA4QjFGODFEQTNEOUY2LmNybDB+BggrBgEFBQcBAQRyMHAw
bgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9C
NTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GXy02eEZta3lpa0prUzlH
U2dpeC1CMmoyZlkuY2VyMIGBBggrBgEFBQcBCwR1MHMwcQYIKwYBBQUHMAuGZXJz
eW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pBUFBJRS1SUEtJLzMvMzIz
NzJlMzAyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzEzMTMzMzgu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAIbAOgwDQYJKoZIhvcNAQELBQADggEBAG0oTu0DKv/PYO7fTL20
418yrg9PkMSwRtHWQUbQfg1XKyhtRl+M2W9p11L3gU88yP01N8nSdAai2zsSQcsQ
XYu5xNFSdSgkIZU+aHGv+FYiCYb+x6pIl4CcuxiiYGfOSkVOu96Y0LdqumH2sFbt
FYA6w2c6Y/aVD57mL9AOKkJWu3Y4bgJ4LFQkKzaCVEpoP51fK1dFrn0LCKO6q45l
LFHn4eOyLFlRqTbQJG2DjcWUL0JzkLp//0+lsAMWG/8/Sgum7NmoqMYk2rgyfeZX
bkHa/Dvn3qZfRbQM/c0eEdFofhzmQjtP9x5VpVz/6PvjB8zranuWzb2T289Fm7tj
jhg=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org