add OpenBSD TA constraints and localhost TLS examples

docker/examples/validate-localhost.toml

@@ -0,0 +1,21 @@
+# Use with docker/compose.localhost.yaml or docker run --network host.
+# The fixture is mounted at /fixture and is created by
+# tests/support/generate_repository.py.
+config-version = 1
+mode = "validate"
+out = "/output"
+rrdp-state-dir = "/state/repository"
+rrdp-sync-mode = "snapshot"
+ccr-out = "/output/result.ccr"
+http-timeout-secs = 5
+# This is the CA for the fixture's HTTPS RRDP server, not an RPKI TA.
+http-root-cert = ["/fixture/certs/rrdp-ca.pem"]
+log-level = "info"
+log-format = "text"
+require-complete = true
+run-timeout-secs = 300
+
+[[anchors]]
+id = "custom"
+tal = "/fixture/tal/custom.tal"
+ta = "/fixture/ta/custom-ta.cer"