Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa
File:                     326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa (raw, json)
Hash identifier:          tVali2sNrvgbp0TRkwIFvvbbhlo1dKWN7WMcX+xh6wA=
Subject key identifier:   E3:B8:FA:71:FF:34:2F:9C:E3:64:CC:EB:A7:31:50:1B:CD:D6:E8:1B
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       33197C597BE29FDAF5F8BB0715ACFFCFFE645C93
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa
Signing time:             Sun 02 Apr 2023 12:05:33 +0000
ROA not before:           Sun 02 Apr 2023 12:00:33 +0000
ROA not after:            Sun 31 Mar 2024 12:05:33 +0000
asID:                     208548
IP address blocks:        2a05:dfc1:1fff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:19:7c:59:7b:e2:9f:da:f5:f8:bb:07:15:ac:ff:cf:fe:64:5c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Apr  2 12:00:33 2023 GMT
            Not After : Mar 31 12:05:33 2024 GMT
        Subject: CN=E3B8FA71FF342F9CE364CCEBA731501BCDD6E81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:6c:f3:dd:e2:94:e3:6f:aa:7d:16:0a:42:
                    ed:24:75:d3:f7:f7:02:bb:5a:dc:d3:09:e5:fc:93:
                    61:e5:90:2c:85:88:fe:42:1e:1e:36:ea:c8:22:e4:
                    dd:21:b1:4e:15:23:20:c1:9b:0b:be:5e:bc:8e:18:
                    2a:98:fb:3d:a7:d8:cf:e5:78:90:c3:bc:f1:bc:08:
                    0b:7e:1b:06:bf:e4:bd:5c:df:05:56:c4:f6:01:71:
                    1d:eb:25:10:58:75:e8:d7:16:d5:94:17:45:89:1b:
                    fc:dd:54:30:70:53:a2:70:c3:e9:57:ac:ee:bb:72:
                    31:3e:ee:d5:80:ea:46:3c:19:10:5a:b9:7a:f6:14:
                    5f:da:99:82:9c:59:33:0e:78:6a:e8:19:25:c4:3f:
                    9e:46:c5:1d:2c:d7:b9:9d:ca:f5:4c:d3:b1:24:67:
                    a4:a3:4e:14:77:1d:d8:80:8e:f3:9d:08:94:bd:42:
                    07:a8:98:50:d9:83:f2:bf:e0:b2:0a:6d:e4:df:dc:
                    02:0d:3c:12:f5:38:d6:28:f0:c6:0a:5d:cf:99:ed:
                    67:25:89:59:fc:b6:df:61:63:ef:22:42:76:af:a2:
                    a8:12:52:d4:88:4e:1f:18:16:d3:f3:99:f4:cc:73:
                    43:64:e6:a2:6b:2b:43:39:fc:3e:a7:d7:17:17:2c:
                    a2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B8:FA:71:FF:34:2F:9C:E3:64:CC:EB:A7:31:50:1B:CD:D6:E8:1B
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:ae:e4:fa:b6:1e:35:73:0e:7b:df:17:8e:47:a6:94:9e:20:
         3f:1b:af:9c:f7:0f:e2:37:10:d7:83:33:4c:2e:9f:9a:a5:78:
         e2:11:ce:0e:2e:04:3f:a8:79:a5:b3:9a:63:24:e3:43:a1:65:
         e5:40:e4:c4:79:c2:1f:13:91:ee:ea:38:7e:e2:2d:39:df:f2:
         42:2f:d7:50:d8:c4:ef:4e:b1:6d:cc:50:ac:d6:df:a5:d2:a6:
         6f:f6:6a:74:9c:71:b5:8b:48:66:31:2f:ff:69:74:2f:b1:8b:
         c9:42:9c:9f:c1:c0:ca:55:bf:d0:10:86:9e:19:19:52:ed:e0:
         6f:ec:f9:e4:24:5b:f2:f0:2d:5f:8a:63:f6:5e:09:a0:aa:4c:
         78:01:66:66:b3:91:37:85:f7:9e:5c:0c:07:96:61:c5:a1:31:
         62:5e:6a:61:a8:e8:0b:3f:81:6e:84:00:3b:d9:54:24:9f:04:
         98:7f:db:bf:56:c3:ca:d0:7d:ac:0f:a7:60:a3:09:ab:08:ed:
         22:0d:7e:8e:6b:30:83:9e:5f:11:ce:eb:99:4a:58:b7:67:d8:
         56:8d:ed:73:f9:70:eb:85:51:d3:8c:a7:f9:18:6b:7d:02:27:
         91:23:8a:19:8a:a0:16:94:01:d0:6f:30:40:96:7a:ec:c3:6d:
         e4:e7:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----