Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa
File:                     326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier:          g5AIZaMHpm8L8mDU3/nAWA6X6OX+qrbqKP4E3ALHmd0=
Subject key identifier:   E7:8C:AF:23:49:88:D9:58:0B:D0:67:4D:25:90:13:4C:21:15:D2:60
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       4AA54F352820239A07E566F599B938B3E5D4B2B1
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa
Signing time:             Thu 30 Mar 2023 19:31:21 +0000
ROA not before:           Thu 30 Mar 2023 19:26:21 +0000
ROA not after:            Thu 28 Mar 2024 19:31:21 +0000
asID:                     48581
IP address blocks:        2a0a:6040:6000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a5:4f:35:28:20:23:9a:07:e5:66:f5:99:b9:38:b3:e5:d4:b2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Mar 30 19:26:21 2023 GMT
            Not After : Mar 28 19:31:21 2024 GMT
        Subject: CN=E78CAF234988D9580BD0674D2590134C2115D260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:a8:6c:50:3c:0c:c0:c2:20:5f:42:fc:a7:
                    e6:d6:4a:69:b1:7c:99:40:b8:0c:3d:9c:fc:2d:95:
                    ff:09:4d:cd:16:4d:b2:19:3d:9d:24:ea:d5:b9:d6:
                    45:cb:cb:45:e1:4d:b3:0f:20:ea:bd:67:a9:57:62:
                    78:a4:bb:dd:3e:7b:06:6d:d1:66:12:b5:d3:2c:05:
                    12:e5:b3:38:db:03:50:28:ed:13:2c:bd:79:18:bd:
                    39:af:f0:01:a4:af:f2:cf:1b:ee:97:ca:4b:1d:57:
                    c5:a6:7a:2b:2b:ed:39:32:c7:64:ce:09:80:9c:6d:
                    56:6d:50:c7:4a:36:10:3e:d2:d8:8b:03:2c:b9:6d:
                    78:db:76:e4:dd:31:cc:fb:c1:cc:45:37:c5:69:46:
                    aa:47:a2:7a:80:e0:cb:af:c9:51:a1:4c:72:8f:37:
                    2f:54:eb:8f:59:4c:5f:3c:6e:bd:69:de:4a:06:54:
                    cd:67:9a:93:99:25:f0:02:17:18:c5:ef:58:59:8c:
                    70:16:bf:5f:47:70:7d:57:65:6d:4a:64:bd:cb:e5:
                    dc:36:cb:56:5b:76:64:4e:e7:b0:49:dc:7d:fe:ca:
                    09:99:3d:d1:1e:b9:07:73:c1:af:17:78:85:59:2a:
                    4a:b4:66:83:a9:5c:5d:69:3d:96:df:67:ee:7f:8c:
                    2a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8C:AF:23:49:88:D9:58:0B:D0:67:4D:25:90:13:4C:21:15:D2:60
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:e4:2d:96:f5:da:f3:14:7e:e1:1e:83:c9:9d:0e:bf:12:51:
         d1:54:a3:0f:0a:9b:0c:e1:c6:44:63:7b:c2:3e:6f:96:cd:e3:
         d4:c0:9f:2e:c3:8a:a9:6c:21:4d:ba:18:f0:14:56:89:ed:5b:
         a7:0b:1b:87:d3:3d:4c:e0:89:56:0b:d4:a9:6c:51:91:a9:bf:
         97:23:e4:58:47:3a:de:e9:52:e9:e4:3e:82:93:73:93:9a:01:
         6e:01:81:d0:6d:02:dc:85:43:62:c3:b4:c6:4f:6f:41:ab:bc:
         c4:e7:47:2f:48:c2:37:09:cd:45:27:e2:e9:6c:1b:ab:16:12:
         ad:c6:94:24:b7:55:91:d2:ec:d2:10:45:8e:e2:9e:93:3d:09:
         97:4a:d2:ba:8e:a2:9d:95:85:6f:d5:76:be:b4:16:b3:1a:ae:
         41:61:3a:7b:4d:34:c0:c3:32:a9:96:6a:63:00:93:f7:e8:3c:
         0a:70:91:7d:4a:3f:56:9e:77:ca:8a:aa:18:7f:52:70:b2:16:
         4e:33:99:4c:00:f6:c8:49:03:ff:02:3f:a0:85:c6:a9:4d:fd:
         d4:89:a0:b0:48:96:83:0a:2b:3f:a8:5e:b4:5f:4c:3e:9a:81:
         e6:29:7b:48:81:34:de:38:12:6c:44:4d:c4:3b:52:00:74:77:
         37:39:d4:76
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUSqVPNSggI5oH5Wb1mbk4s+XUsrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1RjRBNjYwREJFN0U2M0E4QkRFNkM0MzQ3NEEzNTQ1
RTc3MUIzMTAeFw0yMzAzMzAxOTI2MjFaFw0yNDAzMjgxOTMxMjFaMDMxMTAvBgNV
BAMTKEU3OENBRjIzNDk4OEQ5NTgwQkQwNjc0RDI1OTAxMzRDMjExNUQyNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpKhsUDwMwMIgX0L8p+bWSmmx
fJlAuAw9nPwtlf8JTc0WTbIZPZ0k6tW51kXLy0XhTbMPIOq9Z6lXYniku90+ewZt
0WYStdMsBRLlszjbA1Ao7RMsvXkYvTmv8AGkr/LPG+6XyksdV8Wmeisr7Tkyx2TO
CYCcbVZtUMdKNhA+0tiLAyy5bXjbduTdMcz7wcxFN8VpRqpHonqA4MuvyVGhTHKP
Ny9U649ZTF88br1p3koGVM1nmpOZJfACFxjF71hZjHAWv19HcH1XZW1KZL3L5dw2
y1ZbdmRO57BJ3H3+ygmZPdEeuQdzwa8XeIVZKkq0ZoOpXF1pPZbfZ+5/jCrJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU54yvI0mI2VgL0GdNJZATTCEV0mAwHwYDVR0j
BBgwFoAUe19KZg2+fmOovebENHSjVF53GzEwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29yay9yZXBvL015
dGhpY2FsS2l0dGVuLzEvN0I1RjRBNjYwREJFN0U2M0E4QkRFNkM0MzQ3NEEzNTQ1
RTc3MUIzMS5jcmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzov
L2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzdCNUY0
QTY2MERCRTdFNjNBOEJERTZDNDM0NzRBMzU0NUU3NzFCMzEuY2VyMIGTBggrBgEF
BQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBraS5raXR0ZW4ubmV0
d29yay9yZXBvL015dGhpY2FsS2l0dGVuLzEvMzI2MTMwNjEzYTM2MzAzNDMwM2Ez
NjMwMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM0MzgzNTM4MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAqCmBAYDANBgkqhkiG9w0BAQsFAAOCAQEAouQtlvXa8xR+4R6DyZ0OvxJR
0VSjDwqbDOHGRGN7wj5vls3j1MCfLsOKqWwhTboY8BRWie1bpwsbh9M9TOCJVgvU
qWxRkam/lyPkWEc63ulS6eQ+gpNzk5oBbgGB0G0C3IVDYsO0xk9vQau8xOdHL0jC
NwnNRSfi6WwbqxYSrcaUJLdVkdLs0hBFjuKekz0Jl0rSuo6inZWFb9V2vrQWsxqu
QWE6e000wMMyqZZqYwCT9+g8CnCRfUo/Vp53yoqqGH9ScLIWTjOZTAD2yEkD/wI/
oIXGqU391ImgsEiWgworP6hetF9MPpqB5il7SIE03jgSbERNxDtSAHR3NznUdg==
-----END CERTIFICATE-----