Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203438353831.roa
File:                     326130353a646663313a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier:          RuiB+NCecfo2JGyaVir7GU3tX/KLIxiuWLdAdUNtv9U=
Subject key identifier:   94:C7:7E:35:89:C4:2B:00:C3:45:A3:90:D9:A4:45:A4:D5:44:8D:91
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       16CD6B83BBBEF918F7781971983F21BE8980BF1E
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203438353831.roa
Signing time:             Thu 30 Mar 2023 19:30:59 +0000
ROA not before:           Thu 30 Mar 2023 19:25:59 +0000
ROA not after:            Thu 28 Mar 2024 19:30:59 +0000
asID:                     48581
IP address blocks:        2a05:dfc1::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cd:6b:83:bb:be:f9:18:f7:78:19:71:98:3f:21:be:89:80:bf:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Mar 30 19:25:59 2023 GMT
            Not After : Mar 28 19:30:59 2024 GMT
        Subject: CN=94C77E3589C42B00C345A390D9A445A4D5448D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:4d:b1:a2:dd:27:ad:13:ad:ac:c4:32:d0:
                    64:e8:90:79:38:96:22:08:39:ba:02:4e:64:4d:48:
                    09:39:c8:c9:5d:59:92:71:e0:c6:1a:d8:de:c3:8f:
                    ea:f1:34:db:76:54:1f:6d:77:e3:9f:24:5f:76:6c:
                    8d:f0:1c:bf:aa:4b:42:37:27:c9:21:d0:0d:f6:5e:
                    55:a7:a3:41:ef:9c:0e:c9:63:6d:0e:b0:94:03:67:
                    54:4e:e8:e9:4b:8b:b1:86:ef:68:97:9e:43:54:74:
                    a7:ce:06:7f:9e:ef:d8:7a:a3:e1:a1:4b:ee:52:cf:
                    65:9f:d6:15:f9:b9:40:cf:7a:3a:5c:ed:98:62:57:
                    8d:fc:98:e5:41:78:80:76:27:84:6c:03:fc:f6:85:
                    f0:f4:78:8b:b0:92:0f:56:6f:c5:8b:f2:a6:d8:1d:
                    48:ed:da:dd:6e:0e:ae:44:bf:21:58:f7:53:54:2d:
                    cb:19:54:96:26:23:31:6d:44:2c:c0:c0:10:98:dc:
                    a1:1c:ff:99:94:85:1f:2d:a0:24:b5:9c:4a:93:1a:
                    5d:1f:51:ef:81:fb:30:83:5c:f6:42:ea:94:ff:99:
                    ba:e5:b1:e9:94:6d:a1:db:b3:58:b6:b2:7b:ef:c2:
                    b3:f4:ea:37:00:e6:9c:0b:16:a5:50:70:38:1d:bf:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:7E:35:89:C4:2B:00:C3:45:A3:90:D9:A4:45:A4:D5:44:8D:91
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:d4:c5:8c:2a:58:a1:a3:64:2f:6a:a3:2c:d5:39:c6:99:bc:
         8c:d5:a5:6d:5c:df:11:f0:ec:b1:15:21:dd:a9:4b:d3:01:98:
         28:cf:b4:73:53:1d:b5:64:ca:20:69:3d:a3:c7:3e:72:93:10:
         ea:29:5a:cb:c9:be:b8:80:e6:f3:9e:33:66:f9:64:57:de:e4:
         82:73:13:a6:b1:95:45:aa:18:80:17:7f:3b:21:ac:9f:6e:40:
         a5:ff:5a:80:94:c6:d8:e4:35:72:70:2d:93:4e:66:46:c8:ca:
         31:41:eb:5d:fc:bb:e3:4e:e2:9c:32:e5:ff:36:ce:82:00:9b:
         f6:44:72:15:08:df:e9:47:78:f7:8f:62:dd:ce:56:d4:8d:4d:
         bd:42:04:28:31:bf:83:85:38:4d:b7:2f:a7:83:c5:95:d2:d5:
         4e:8b:2e:e5:b7:4b:bf:6d:ec:c1:a6:3e:dd:6c:d9:0b:4f:85:
         8f:3d:61:f9:cc:da:7e:b5:29:12:34:65:6d:70:04:b7:81:c7:
         a4:de:04:96:08:b9:57:37:8b:fd:f8:a2:0d:ce:7d:52:2f:1d:
         bf:71:66:c3:db:59:b5:77:bf:cc:3c:2c:bb:f7:79:6a:a9:ed:
         9c:2c:79:6c:27:c0:6d:e9:a0:8f:ed:98:7f:25:bd:a7:99:42:
         16:d2:06:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----