Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316665303a3a2f34342d3438203d3e20323132363138.roa
File:                     326130353a646663313a316665303a3a2f34342d3438203d3e20323132363138.roa (raw, json)
Hash identifier:          8ySi746s+qrMP1bhVabv2/qearsH/REkYIT3Lm+5Jdk=
Subject key identifier:   FA:15:FA:BF:B0:C6:8A:6A:B9:C9:DB:1C:F8:56:B5:02:94:05:B1:4E
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       68BF831A7A007A9B2E88C3B293E6710EDB8B3151
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316665303a3a2f34342d3438203d3e20323132363138.roa
Signing time:             Sun 09 Apr 2023 04:01:21 +0000
ROA not before:           Sun 09 Apr 2023 03:56:21 +0000
ROA not after:            Sun 07 Apr 2024 04:01:21 +0000
asID:                     212618
IP address blocks:        2a05:dfc1:1fe0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bf:83:1a:7a:00:7a:9b:2e:88:c3:b2:93:e6:71:0e:db:8b:31:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Apr  9 03:56:21 2023 GMT
            Not After : Apr  7 04:01:21 2024 GMT
        Subject: CN=FA15FABFB0C68A6AB9C9DB1CF856B5029405B14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:d0:5b:ce:c4:3d:c8:32:de:45:28:77:a6:
                    f2:75:fc:17:c1:8b:dc:f7:05:54:9b:f4:7c:f5:c9:
                    c7:3f:ee:50:4e:6e:83:ec:49:86:6c:a0:b0:7a:18:
                    70:5d:7c:65:05:1d:8d:c0:eb:f8:36:17:81:74:45:
                    9a:79:95:31:f2:b5:d3:ce:7d:49:3e:c5:72:71:cb:
                    59:fd:b2:50:3d:ae:bb:a8:0f:97:61:59:1f:dc:a9:
                    98:67:3d:d0:9c:29:84:3d:cf:10:72:42:ed:d3:29:
                    c3:5d:b8:03:22:67:a4:a6:36:86:77:0e:a3:5a:cd:
                    08:56:29:a1:2c:6b:79:cb:76:24:9a:d0:a3:b6:93:
                    5c:a3:90:75:d7:c9:a6:4f:83:a7:61:f3:4d:fc:11:
                    ec:22:dc:b5:bd:e8:31:ce:37:bf:fb:f5:71:3b:b1:
                    61:79:15:bb:45:e5:27:47:97:63:c3:37:c9:ae:18:
                    42:41:e7:d1:5f:55:68:a2:cc:8a:91:c5:31:78:34:
                    c8:3a:bc:bc:3b:2b:c7:8b:bf:eb:3d:da:d6:1e:3b:
                    0d:94:89:c8:25:f9:c6:32:e4:cb:14:7b:ec:6c:83:
                    17:5d:b1:db:ef:21:86:55:c5:5c:cb:df:47:2b:d7:
                    62:08:43:dc:b5:b1:ff:19:3a:8c:6f:80:6a:7c:e5:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:FA:BF:B0:C6:8A:6A:B9:C9:DB:1C:F8:56:B5:02:94:05:B1:4E
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316665303a3a2f34342d3438203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1fe0::/44

    Signature Algorithm: sha256WithRSAEncryption
         cb:fe:a2:36:10:f1:5b:5b:41:e5:b4:3c:9f:18:d8:e2:35:02:
         f8:89:87:a5:a9:97:29:ea:40:13:61:64:66:47:42:f7:8c:89:
         bb:24:93:05:23:55:46:5d:85:07:72:22:a3:68:61:02:de:b8:
         f8:ac:40:21:42:bc:f4:c6:32:2d:1d:cf:30:5b:3d:6c:c9:18:
         42:2c:a1:50:37:cc:47:86:f3:89:80:77:14:45:3b:ea:e1:1f:
         2c:9d:13:9e:69:af:5e:c4:50:51:39:5d:0c:6b:72:cc:6c:c9:
         c4:0d:f5:05:66:f5:60:a4:1b:20:77:bc:02:fc:62:b2:e8:0d:
         36:15:f3:8c:d7:21:6f:5a:ab:d2:c6:c1:f9:21:4c:ef:70:e1:
         ee:c8:7f:00:3b:2d:be:fc:64:81:bc:c5:1f:39:ad:cb:78:2b:
         2a:87:54:4f:12:55:fe:6b:64:5b:ad:83:ed:7f:62:17:84:32:
         d8:22:1e:88:80:79:c7:c2:6e:40:cf:fc:f5:17:2b:d5:eb:fd:
         bd:63:b4:ae:d2:b3:c2:d2:5e:f1:9e:9a:a0:7c:26:9c:d8:30:
         b6:d6:78:e4:fc:a4:57:39:43:eb:8d:fe:ff:39:86:26:c2:7f:
         53:b3:fb:18:47:86:39:f7:36:25:df:cd:7c:87:a8:1e:1e:98:
         f9:9e:66:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----