Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa
File:                     326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier:          COLpnDfXAwT8T+DOzIFwr1M//H8arsCCxjXpgq9eceM=
Subject key identifier:   FA:DE:8F:31:D2:67:00:4F:8F:39:FC:24:5F:B8:98:C9:04:10:74:0C
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       0CBA3072081212AF1408800BE33CD549C939AEFF
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa
Signing time:             Tue 27 Dec 2022 19:23:54 +0000
ROA not before:           Tue 27 Dec 2022 19:18:54 +0000
ROA not after:            Tue 26 Dec 2023 19:23:54 +0000
asID:                     50224
IP address blocks:        2a0a:6040:6000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ba:30:72:08:12:12:af:14:08:80:0b:e3:3c:d5:49:c9:39:ae:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Dec 27 19:18:54 2022 GMT
            Not After : Dec 26 19:23:54 2023 GMT
        Subject: CN=FADE8F31D267004F8F39FC245FB898C90410740C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:31:ad:ab:b3:61:28:94:04:37:22:eb:11:
                    ec:50:59:ed:78:90:3a:7d:80:e4:2a:9d:20:51:00:
                    a8:72:91:11:47:74:ca:ee:67:4b:f0:52:00:04:52:
                    02:97:dd:2b:d8:fb:6b:3a:aa:a4:fa:96:6f:bf:dd:
                    10:e3:82:3e:be:23:d4:0b:0d:9c:e2:1d:80:6a:de:
                    b7:24:c4:70:91:23:7c:e9:2f:de:6a:ed:8e:b7:b7:
                    13:33:ae:2a:f3:48:9a:f4:aa:cd:e1:fc:6e:44:3a:
                    c7:8a:50:b4:9d:52:e5:8b:39:c7:29:c2:eb:90:d1:
                    39:2c:c6:a5:3b:10:ed:6b:87:97:5e:8d:67:8c:9b:
                    61:51:d1:d5:e2:63:3a:bf:dc:e5:4e:a0:b5:36:f2:
                    61:d7:05:f8:84:1e:2b:e3:68:bd:5c:97:57:8e:09:
                    27:6a:72:4a:4c:b9:8c:d5:10:5b:9b:f7:45:b9:98:
                    94:92:70:4b:be:63:67:19:dd:fc:12:37:ce:0a:00:
                    d9:be:5b:8b:ce:cc:40:1f:eb:23:ba:4d:de:36:21:
                    a0:e6:72:bd:82:2a:69:a5:ce:85:86:ed:88:4d:6c:
                    b8:5b:1e:86:e2:1e:62:56:73:f6:b8:7f:10:b2:f5:
                    d6:9a:79:55:e7:ed:b8:6c:d3:f6:a6:9e:a2:a6:0b:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DE:8F:31:D2:67:00:4F:8F:39:FC:24:5F:B8:98:C9:04:10:74:0C
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         db:88:e6:0e:b3:3c:5d:35:ad:ac:4b:4e:50:ab:48:04:72:cb:
         90:b6:df:af:f9:d0:3a:bd:6b:55:26:ba:fd:be:e9:14:b0:10:
         1e:4c:87:6e:bc:10:28:ee:3a:23:7f:f6:1b:7a:ca:5f:db:c3:
         dd:b9:70:af:98:7d:c0:bf:11:18:2f:63:dc:1c:14:3d:88:a8:
         a3:7e:08:a7:8d:e0:be:23:8b:8a:38:d3:a2:a4:72:15:1c:7f:
         3a:67:ac:6a:25:41:69:66:c7:2b:bf:b0:54:92:50:19:7e:16:
         6d:48:00:25:ac:d1:aa:80:b1:a1:3a:fc:05:90:50:89:d1:0a:
         67:44:a8:24:64:1a:d4:d8:7a:b2:5e:a3:3d:0c:59:bc:bf:21:
         8c:4b:e0:17:cd:e1:15:0e:51:07:88:bc:b9:21:0d:db:cc:f3:
         ad:e2:37:44:7f:a4:cc:51:f8:76:1e:a3:d1:e5:ab:64:18:91:
         ea:fd:60:8f:6a:c3:62:0f:5e:fd:42:42:a6:77:b0:08:a9:e5:
         46:62:59:de:99:04:66:3f:8d:5f:cb:f7:d9:1a:22:3e:58:3c:
         21:37:4e:c3:5e:b0:cf:04:8e:56:af:6b:43:86:bb:69:be:40:
         02:7f:1d:10:2b:82:16:96:a0:6c:72:01:4b:94:00:e1:bd:69:
         a0:1e:8d:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----