Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa
File:                     326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa (raw, json)
Hash identifier:          22r77kZPVTN0PT3hL6qGhV5XktCDJbNGLXxM7XGWQv8=
Subject key identifier:   A0:A4:6F:EA:33:3D:A6:96:1A:FD:79:70:B2:C9:89:06:89:1D:A8:47
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       70E1AF14AEACCFCFB385A4827E536938D65CFC03
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa
Signing time:             Mon 30 Jan 2023 20:53:16 +0000
ROA not before:           Mon 30 Jan 2023 20:48:16 +0000
ROA not after:            Mon 29 Jan 2024 20:53:16 +0000
asID:                     203867
IP address blocks:        2a0a:6040:60e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e1:af:14:ae:ac:cf:cf:b3:85:a4:82:7e:53:69:38:d6:5c:fc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Jan 30 20:48:16 2023 GMT
            Not After : Jan 29 20:53:16 2024 GMT
        Subject: CN=A0A46FEA333DA6961AFD7970B2C98906891DA847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:33:cd:c9:ac:1d:84:94:35:02:54:bb:33:
                    24:53:cb:a8:13:9f:91:cf:36:56:d2:a8:1b:80:3c:
                    e4:70:62:5c:47:f6:8c:d4:cd:10:2a:15:a7:f1:58:
                    08:5c:82:22:b9:a6:01:f6:d6:1d:f7:aa:b7:3a:c5:
                    94:b6:f8:f2:73:70:ad:a1:10:68:ea:f6:c2:ff:5f:
                    2b:9b:2d:98:c8:af:d6:db:0b:66:c4:39:d1:ab:31:
                    47:cd:7d:9c:fe:a3:d6:bd:61:f1:f3:b9:f4:d9:c1:
                    29:7a:ff:7b:5c:d3:bf:d6:8d:6e:67:1c:35:f2:7b:
                    e5:49:b1:94:2a:fb:e9:e4:8f:a9:6a:21:0e:40:63:
                    b1:4d:12:7d:c1:c2:ed:f1:ef:43:d1:06:bf:f5:aa:
                    a2:be:fa:ca:72:f8:c2:ed:a5:cc:91:2b:b1:79:c8:
                    18:43:78:a8:76:a3:05:8c:f5:00:bb:83:12:2f:f6:
                    2b:a3:5f:03:9a:b8:df:63:5a:8d:c4:e4:6b:3e:26:
                    60:18:d1:2f:64:0a:5e:f0:19:d8:68:27:f9:f7:71:
                    7d:1d:df:c3:88:04:59:73:1a:02:37:01:ce:f8:f4:
                    a7:2a:48:67:27:35:fd:ba:6f:05:f5:41:8f:10:ee:
                    14:91:3c:b0:0a:f8:aa:f6:77:a8:3a:34:b6:73:c4:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A4:6F:EA:33:3D:A6:96:1A:FD:79:70:B2:C9:89:06:89:1D:A8:47
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:60e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         39:6b:c1:7f:90:3f:f6:58:a4:6c:a1:33:13:45:13:14:6c:bc:
         75:35:ff:dd:5f:16:b6:43:92:2a:78:92:33:c4:a1:e0:c5:c1:
         a6:6b:cb:2e:bb:b4:5e:94:b6:db:1f:53:21:45:09:1b:1d:c2:
         22:e6:7c:8a:2a:de:9b:a1:b6:43:33:ea:94:62:44:89:c7:cb:
         9e:f7:4d:4a:db:6f:00:c5:a1:59:81:9d:4b:00:34:e0:cb:d3:
         b5:88:e0:7f:bd:25:c1:8e:ca:ad:6f:70:77:2d:6a:d4:6c:a3:
         48:6d:7c:23:4f:00:7a:27:59:d9:60:4d:10:39:b8:44:ed:a9:
         4e:5c:f8:0b:3b:9f:ee:72:16:f0:4c:2e:c1:4b:d1:ab:7a:fe:
         af:b0:7d:69:2e:ca:20:3e:8b:4f:1f:c7:7c:54:0f:70:a7:9c:
         f3:77:c6:d6:c1:b8:f0:69:36:bf:79:2c:c2:9e:17:fe:45:fc:
         91:43:ce:cd:a7:e3:af:8a:cb:b8:85:fa:a6:32:d3:c8:65:bd:
         07:fb:5a:d0:6a:99:00:9a:ab:51:85:8b:5c:11:f8:14:5a:36:
         b1:74:a7:9a:fd:fc:8a:20:14:f3:79:e3:9f:af:0f:35:3c:fc:
         a9:6f:ac:24:f9:a0:01:06:b1:40:9b:ce:83:2a:d2:a9:d1:fc:
         5a:a4:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----