Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e20323033363335.roa
File:                     326130613a363034303a363030303a3a2f34302d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          hKnylceIzp9qt9ofI1YFcFIKN0SE7Elmu5bYMR34SD8=
Subject key identifier:   91:56:CF:4B:E6:8C:12:03:C9:2D:94:5C:E3:B3:20:D2:7C:5A:AE:FC
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       488FBCC6C320C605714CE43D9ABE9B80BABB5D08
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e20323033363335.roa
Signing time:             Tue 27 Dec 2022 19:27:03 +0000
ROA not before:           Tue 27 Dec 2022 19:22:03 +0000
ROA not after:            Tue 26 Dec 2023 19:27:03 +0000
asID:                     203635
IP address blocks:        2a0a:6040:6000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8f:bc:c6:c3:20:c6:05:71:4c:e4:3d:9a:be:9b:80:ba:bb:5d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Dec 27 19:22:03 2022 GMT
            Not After : Dec 26 19:27:03 2023 GMT
        Subject: CN=9156CF4BE68C1203C92D945CE3B320D27C5AAEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:79:b2:5f:ec:e9:59:3b:ee:d9:5f:31:d1:6c:
                    d4:7b:ff:93:8b:f0:b4:52:4e:df:9a:2b:43:a3:d0:
                    73:fd:40:41:67:a3:80:43:92:09:b7:6c:f3:1a:e3:
                    cf:6b:62:71:1d:5c:94:80:30:d0:f1:40:b3:99:03:
                    74:f0:06:1f:30:f9:08:54:aa:1f:0c:c0:0c:5f:c9:
                    b3:bb:bc:74:1f:2e:0c:08:18:60:d9:57:1c:13:6d:
                    59:4b:a9:da:79:11:b9:be:54:5c:42:ae:d4:96:1e:
                    24:6a:74:51:7c:6f:a8:61:34:2c:36:2d:61:2e:76:
                    b2:ec:ec:d0:1f:08:0e:76:a5:3f:d4:1d:aa:da:61:
                    70:f5:be:82:89:eb:ad:ae:0f:6b:73:14:3c:4d:00:
                    65:47:f4:5f:37:dd:57:1d:3b:4e:4c:58:08:22:f4:
                    d0:60:58:52:86:39:94:cc:46:47:8e:be:60:29:f0:
                    de:c0:d5:30:f3:44:e4:2d:ff:e5:80:ce:df:33:ff:
                    eb:7a:79:bc:d0:30:6f:79:11:64:9b:dd:5a:0f:a4:
                    59:df:a2:8e:33:70:6b:2d:99:a8:d0:bf:72:a4:c7:
                    80:36:f9:59:52:47:dd:2e:db:84:6d:dd:ba:58:48:
                    af:a7:ca:75:47:b9:94:62:68:a5:d1:f7:9e:a2:22:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:56:CF:4B:E6:8C:12:03:C9:2D:94:5C:E3:B3:20:D2:7C:5A:AE:FC
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         da:cd:21:bf:7d:c7:f4:79:4c:59:d5:52:e7:f2:2e:cb:7b:37:
         ba:2f:6d:cf:ea:6c:39:5c:4b:52:92:60:f7:e5:4c:47:75:89:
         fd:f9:66:40:c7:87:e0:5c:f9:d5:f3:a3:74:56:48:35:df:41:
         0f:30:d8:00:f8:0b:71:5a:01:4b:90:7d:88:f3:c0:92:74:89:
         06:ab:09:ce:ba:ff:31:35:d8:9b:82:80:0a:2b:dd:b9:b1:fa:
         99:7b:9e:b0:52:36:f3:d3:98:67:cc:59:e1:da:21:a2:9f:91:
         0b:1f:ad:bf:f9:23:f7:df:dd:73:2c:f3:a9:64:b8:8e:3b:51:
         49:cd:71:c7:70:16:73:fc:96:6d:40:8e:28:50:0b:ae:1c:79:
         c7:f6:68:98:94:b4:19:b6:69:18:3c:d4:8c:62:e3:42:b2:81:
         c9:a9:10:51:ca:35:bc:33:f4:5b:1e:4c:10:e0:02:e4:78:75:
         9a:f7:d3:43:7c:3b:80:f1:79:8a:cd:7f:12:f6:8f:07:44:53:
         24:1a:54:55:14:ed:a7:04:c6:c8:1d:1b:4d:3d:7a:13:c5:41:
         5a:8a:8c:86:0c:8f:f5:8a:e2:9a:0a:8d:14:fe:3a:8a:0e:93:
         df:6c:96:32:e0:7a:58:50:f8:bd:82:e8:5b:35:55:84:07:e8:
         17:2c:a5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----