Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3430203d3e20323034383537.roa
File:                     326130353a646663313a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier:          oqbEmpU+yv2J7JbyHGAt8tfiatACUr/cj8734pbuFbQ=
Subject key identifier:   4D:B6:D2:15:07:A8:D2:C0:B0:7D:5D:1C:1D:C5:9E:15:FF:49:99:A7
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       2AC72F6AE27B2EA8B4968092DE98CF640E4CCADA
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3430203d3e20323034383537.roa
Signing time:             Fri 24 Mar 2023 23:07:13 +0000
ROA not before:           Fri 24 Mar 2023 23:02:13 +0000
ROA not after:            Fri 22 Mar 2024 23:07:13 +0000
asID:                     204857
IP address blocks:        2a05:dfc1::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c7:2f:6a:e2:7b:2e:a8:b4:96:80:92:de:98:cf:64:0e:4c:ca:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Mar 24 23:02:13 2023 GMT
            Not After : Mar 22 23:07:13 2024 GMT
        Subject: CN=4DB6D21507A8D2C0B07D5D1C1DC59E15FF4999A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:59:9a:82:46:68:d5:a9:fa:03:cc:02:ee:
                    a5:58:5b:7a:03:33:0e:a1:67:7c:c4:86:dd:7e:c3:
                    12:5a:82:59:3b:e3:76:04:6a:28:72:21:16:5b:a8:
                    c9:f5:03:e0:fd:ae:06:9e:d2:d6:2b:4c:f0:1a:40:
                    1e:e1:f0:7e:51:5f:e2:90:8a:38:28:6a:90:a6:5a:
                    56:41:c3:ff:65:5e:5a:61:ca:9f:6e:f6:c4:d2:cf:
                    74:5b:12:c3:38:c4:59:85:0b:16:7b:f8:37:cb:d0:
                    f8:c7:cb:bb:29:df:5a:94:d4:cb:09:60:2b:ef:87:
                    b4:e2:41:0f:2a:ba:58:8e:da:0b:a6:11:92:56:cf:
                    af:b2:5f:f0:75:92:39:9c:4f:06:97:c6:d6:98:da:
                    66:5f:81:f2:87:76:ed:a5:c7:11:24:5b:90:ae:d0:
                    38:db:8b:63:95:ec:d9:5a:a8:da:6e:15:05:06:4b:
                    6d:b1:cc:5c:4b:46:b5:a3:ce:70:72:60:07:56:22:
                    b7:c3:0e:a4:b7:60:96:87:0b:c2:30:92:e4:01:87:
                    23:c8:7d:76:7c:b8:24:cc:93:19:c6:1c:9b:c3:e6:
                    f3:d9:5e:2c:e8:3f:0f:a3:5a:85:73:b3:82:b6:5d:
                    f2:f6:d7:2f:e8:65:f8:1e:ab:3b:23:04:a6:d7:0b:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B6:D2:15:07:A8:D2:C0:B0:7D:5D:1C:1D:C5:9E:15:FF:49:99:A7
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3430203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:c8:cb:31:9c:1f:44:f7:23:9b:44:c8:d9:8c:36:2d:89:
         96:d8:4c:4c:72:24:79:29:d3:68:2a:6f:b6:92:b5:c1:1f:e7:
         c8:57:a7:4d:de:ea:56:e7:db:ec:97:08:23:99:07:12:db:a9:
         00:51:5e:42:92:be:64:2f:b1:19:0d:07:a4:e1:c6:7f:29:af:
         5b:a8:8c:f1:e5:7a:5b:3c:11:79:0b:12:7a:1a:fa:3a:8a:dc:
         f2:1d:e8:ef:0b:68:8e:ee:82:cf:53:df:72:13:85:f8:42:d1:
         1f:fa:54:d5:bf:8d:9a:47:2e:ac:ce:f9:56:59:ef:6f:cb:30:
         1c:49:6f:df:e2:5a:0f:63:34:d0:4e:37:66:92:25:ca:bb:92:
         6f:20:c2:c6:64:37:b4:3c:4d:3e:7a:13:76:a3:8c:38:7f:0b:
         f0:c8:ce:84:64:da:5a:43:4d:5b:4c:3b:d3:9a:88:4f:51:9b:
         b3:46:26:c3:97:da:50:5f:f6:7a:2f:4b:4b:75:ea:ee:c7:4e:
         83:09:e0:20:a8:66:41:47:8b:8a:27:27:79:25:32:92:d6:94:
         37:6f:f4:0f:58:b3:20:cf:6c:55:9b:9d:fe:01:ee:d7:8e:2c:
         d9:d1:95:60:2f:3f:d2:23:8d:67:bf:19:e5:b5:24:02:6f:55:
         59:b5:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----