Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316630303a3a2f34302d3438203d3e203438353831.roa
File:                     326130353a646663313a316630303a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier:          RBIGeJJot3MSSMECPwwXaN5eCxpBU2QLt/mYKAyMbwI=
Subject key identifier:   54:4F:0C:93:68:8D:AD:34:06:A4:85:59:21:79:B7:D9:5D:AF:6F:6C
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       1B104F35C356AC93BD6790914C869AF96075442F
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316630303a3a2f34302d3438203d3e203438353831.roa
Signing time:             Sun 02 Apr 2023 12:05:45 +0000
ROA not before:           Sun 02 Apr 2023 12:00:45 +0000
ROA not after:            Sun 31 Mar 2024 12:05:45 +0000
asID:                     48581
IP address blocks:        2a05:dfc1:1f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:10:4f:35:c3:56:ac:93:bd:67:90:91:4c:86:9a:f9:60:75:44:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Apr  2 12:00:45 2023 GMT
            Not After : Mar 31 12:05:45 2024 GMT
        Subject: CN=544F0C93688DAD3406A485592179B7D95DAF6F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:59:0d:5c:9e:8a:9c:a3:b8:f8:f9:d6:5f:95:
                    a2:3f:0b:98:a2:86:36:69:96:b1:b7:64:e1:0a:9f:
                    ae:8a:39:00:16:82:a0:24:5d:4f:73:a4:7b:75:8e:
                    bf:93:e4:25:67:a7:55:7a:77:41:fa:fa:d0:6d:ba:
                    4c:73:b0:33:cd:6d:40:29:65:6f:e4:01:9a:4b:bd:
                    cd:1a:34:78:c8:2d:ee:48:91:04:66:0d:9e:d1:2d:
                    2c:8e:fc:2c:71:a4:0f:78:b5:69:37:03:72:9f:2c:
                    5f:95:de:bc:1b:21:72:a2:e1:02:d7:96:d2:c4:e2:
                    31:3d:79:41:e0:24:7b:5a:f9:61:0b:62:6a:27:3f:
                    1a:eb:61:d9:d4:1c:1d:0b:c6:66:b4:94:51:37:4b:
                    a2:7c:84:f4:0c:5b:79:b2:0d:6d:09:34:df:7e:c8:
                    27:90:9d:3c:2c:5b:09:7c:1a:4a:0b:ab:e4:af:8a:
                    67:58:64:a1:22:3b:d0:a8:ab:a8:8d:8b:a3:2a:60:
                    0a:39:d8:cb:39:30:7f:cb:9e:b1:08:55:d8:1c:0f:
                    c6:b1:f7:9e:c6:c8:e7:df:00:61:2b:32:55:74:0a:
                    fb:43:ac:7a:f3:cc:3d:ac:9d:4b:b9:1d:9d:bc:d2:
                    7d:1d:ed:f4:e7:51:ae:76:ad:9b:7c:1c:5d:6b:fb:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4F:0C:93:68:8D:AD:34:06:A4:85:59:21:79:B7:D9:5D:AF:6F:6C
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316630303a3a2f34302d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:a8:b6:fc:a3:2d:c3:8a:d9:eb:58:18:d8:38:32:9b:b5:
         91:13:61:71:41:64:26:3c:45:77:13:a4:c6:de:4b:05:a5:7e:
         9f:73:15:cc:90:38:ce:45:30:15:66:9b:0c:42:4e:59:05:23:
         52:75:fb:ad:c2:46:c3:a6:ca:e3:1d:87:ba:8f:88:88:ba:f4:
         34:c8:36:4a:f2:6b:6b:7e:ea:fc:78:2b:e8:9e:bf:13:8a:fb:
         b4:c2:97:c9:c8:c2:54:43:6c:5f:e6:21:8e:eb:10:14:af:44:
         6b:c2:43:08:9a:ad:f7:d3:f3:ef:b1:ea:e8:3f:58:29:91:72:
         65:77:ba:b4:ab:dc:21:a2:19:38:8e:75:25:82:10:b5:53:ba:
         87:c9:2b:01:7b:27:c2:85:b6:ea:7a:be:17:1d:98:0d:59:ae:
         f5:37:0a:3a:2e:7e:43:fb:f3:aa:11:5f:91:3a:71:33:ca:18:
         df:ec:dc:98:36:d1:b9:60:62:77:21:c6:bb:1c:fa:1a:d3:20:
         04:3d:3b:99:ca:8d:c1:f8:31:e3:2e:53:73:8b:e1:41:20:57:
         2d:45:3c:e3:c5:9c:e2:03:66:70:be:8a:79:a0:94:b9:82:56:
         68:14:3a:3f:8a:71:a6:4a:ae:b5:b6:03:38:70:d2:e7:96:22:
         8e:14:37:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----