add OpenBSD TA constraints and localhost TLS examples

examples/config/validate-localhost.toml

@@ -0,0 +1,20 @@
+# Copy this file into a temporary test directory next to the generated fixture.
+# The fixture is created by tests/support/generate_repository.py.
+config-version = 1
+mode = "validate"
+out = "output/localhost"
+rrdp-state-dir = "state/localhost"
+rrdp-sync-mode = "snapshot"
+ccr-out = "output/localhost/result.ccr"
+http-timeout-secs = 5
+# This is the CA for the fixture's HTTPS RRDP server, not an RPKI TA.
+http-root-cert = ["fixture/certs/rrdp-ca.pem"]
+log-level = "info"
+log-format = "text"
+require-complete = true
+run-timeout-secs = 300
+
+[[anchors]]
+id = "custom"
+tal = "fixture/tal/custom.tal"
+ta = "fixture/ta/custom-ta.cer"