Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa
File:                     326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier:          bd90CU0t4gxWRsB3bdi4jxBIfBZZx3lXw3Brsi2EzdU=
Subject key identifier:   B9:14:69:95:9F:7F:77:AB:94:7D:EE:75:76:3F:10:2A:52:B2:02:FA
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       6AB1F3C70DB97E0E7A4BEB8A0675E75A1E232AAD
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa
Signing time:             Tue 27 Dec 2022 19:31:58 +0000
ROA not before:           Tue 27 Dec 2022 19:26:58 +0000
ROA not after:            Tue 26 Dec 2023 19:31:58 +0000
asID:                     204857
IP address blocks:        2a0a:6040:6000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b1:f3:c7:0d:b9:7e:0e:7a:4b:eb:8a:06:75:e7:5a:1e:23:2a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Dec 27 19:26:58 2022 GMT
            Not After : Dec 26 19:31:58 2023 GMT
        Subject: CN=B91469959F7F77AB947DEE75763F102A52B202FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:cc:62:3c:0c:6e:20:58:75:16:2e:2d:78:
                    43:63:8a:a8:82:55:14:60:14:18:01:3a:1a:bf:e5:
                    d8:01:20:8d:01:cb:7a:69:02:55:00:67:fd:bc:89:
                    25:4f:58:d3:f1:68:01:26:bc:b7:ab:07:82:93:64:
                    5b:ee:eb:c7:c6:16:60:70:86:bd:9a:99:b0:7f:7c:
                    af:e2:76:9e:a8:3f:2b:bd:b3:98:10:f7:56:12:ad:
                    d3:1d:48:74:f4:ce:87:35:1a:06:e3:89:a3:74:59:
                    41:b5:b8:5f:0d:67:46:4b:d6:fa:c1:2d:83:f2:15:
                    7d:2e:a2:60:f2:89:6b:af:41:77:46:46:6f:eb:f1:
                    f1:c8:11:a0:24:49:71:5c:ce:1b:21:aa:f4:88:54:
                    00:e9:2a:87:2b:30:25:b7:d7:ed:6c:74:13:9c:66:
                    33:51:78:12:3a:91:f2:d3:a3:ed:f0:1e:cf:8d:d3:
                    f3:d3:53:64:88:aa:5e:bf:27:a4:75:32:a8:6a:36:
                    a8:b0:44:de:64:34:52:a2:ed:6f:a6:88:b0:28:4b:
                    03:54:45:09:4a:4b:4b:57:05:85:0d:f8:42:5a:d5:
                    5c:8f:07:31:10:a0:ae:b2:29:45:27:b7:dc:a6:4c:
                    32:47:06:83:13:95:3f:8f:57:14:c0:75:8f:52:6e:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:14:69:95:9F:7F:77:AB:94:7D:EE:75:76:3F:10:2A:52:B2:02:FA
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:dd:8a:4a:ec:b8:6a:ac:d8:10:9a:f6:f4:99:b1:3a:ec:70:
         25:06:c2:57:20:d7:4c:c2:68:8f:79:cd:67:28:a9:60:7b:f9:
         49:dc:af:7a:53:dc:7f:15:1c:10:61:cf:11:80:99:be:73:ed:
         b1:2f:2d:99:85:95:32:fd:e8:3c:bc:f9:b9:d9:09:82:89:21:
         bc:22:99:66:b6:b7:bb:95:de:9c:76:d6:7b:1c:d0:60:4f:ef:
         8a:0f:88:06:16:07:2d:8d:79:76:81:50:67:33:2d:2d:b9:b4:
         77:e2:7d:3e:65:ca:ec:e4:55:b5:b1:dc:45:d1:b3:54:d1:14:
         31:4d:d9:5f:9c:16:41:0f:bd:a6:13:d5:33:91:44:2c:e9:70:
         69:de:7e:03:6b:c5:19:9b:7c:df:0e:44:01:ac:70:4b:69:b1:
         6e:01:05:71:dc:f7:3f:ca:17:3a:2e:cd:f1:fc:1a:66:3f:14:
         35:d5:48:16:bf:dc:93:67:de:ac:1c:57:d8:9c:fb:16:e4:8c:
         5e:21:d8:f4:ca:28:15:c5:06:50:9e:58:89:75:0c:00:0e:13:
         e9:1b:17:7d:06:16:77:5d:9b:75:61:81:de:c8:aa:5f:b1:44:
         33:77:95:07:5e:a0:6c:6a:0b:19:05:cd:b6:5e:2c:ec:a6:58:
         e8:ce:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----