Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa
File:                     326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          SYreOKTlTiRGwEpOgqYSlPLDZMVS5B0ZMb3e4wWwKGk=
Subject key identifier:   66:3D:07:2F:F2:04:ED:7F:FF:F2:BB:80:79:44:3B:C0:D1:C2:97:B1
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       1CD065EECFBFCD6B13388AAB976E53D31D5BB8A2
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa
Signing time:             Wed 01 Mar 2023 05:48:13 +0000
ROA not before:           Wed 01 Mar 2023 05:43:13 +0000
ROA not after:            Wed 28 Feb 2024 05:48:13 +0000
asID:                     203635
IP address blocks:        2a0a:6040:60fd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d0:65:ee:cf:bf:cd:6b:13:38:8a:ab:97:6e:53:d3:1d:5b:b8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Mar  1 05:43:13 2023 GMT
            Not After : Feb 28 05:48:13 2024 GMT
        Subject: CN=663D072FF204ED7FFFF2BB8079443BC0D1C297B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:62:ca:f2:b6:86:90:74:4e:95:fd:c7:ff:36:
                    00:4a:e5:d8:bd:30:d5:0d:08:88:c4:fd:25:21:8c:
                    4c:57:da:a6:4d:85:57:c3:25:6b:22:b4:60:8a:ee:
                    aa:67:22:5c:15:68:56:a0:bb:9c:0f:b9:3d:8f:5f:
                    5f:a6:9c:59:f0:49:94:80:2c:c9:63:38:67:31:6e:
                    3d:7f:8b:52:aa:13:f0:3c:8f:7a:1b:3d:1a:3d:18:
                    4c:79:fa:f4:e5:5f:33:cf:54:23:6d:b0:5a:8e:4d:
                    ea:4d:40:a0:2c:92:18:e4:96:30:27:9f:dd:d1:c0:
                    57:f0:e6:b2:35:f3:ff:6f:57:f4:5d:0f:fd:37:c6:
                    50:dc:9d:ee:87:4d:13:d8:01:1a:ea:5b:55:67:68:
                    6a:66:20:24:64:18:4e:5e:73:da:8e:cf:95:81:be:
                    7f:fb:04:59:c9:f7:34:d3:6e:68:b2:95:fe:e3:d1:
                    d2:49:81:46:66:7d:cb:01:cf:a7:9f:08:4a:1a:c2:
                    f4:f4:9e:00:ea:4b:e0:99:f8:4d:d1:09:12:a7:bc:
                    1c:0f:f1:8f:bf:1f:3a:1f:79:47:a9:d2:17:51:6f:
                    26:a0:aa:b7:48:b7:fa:8f:47:82:9e:fb:a8:a5:89:
                    ad:13:13:23:c3:83:25:c2:5f:50:12:7a:32:c8:dc:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3D:07:2F:F2:04:ED:7F:FF:F2:BB:80:79:44:3B:C0:D1:C2:97:B1
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:60fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:b1:5c:e2:16:b5:92:d9:28:23:d2:b0:99:1a:98:e8:5c:20:
         d4:42:f6:79:40:fd:d8:04:19:bf:73:0a:2d:79:4d:ba:39:68:
         65:e6:f2:0b:88:da:8d:16:d4:44:77:94:1f:8c:b7:ac:1a:04:
         1f:6b:3f:b1:35:1f:db:58:75:d4:24:60:90:e4:8f:21:4e:c9:
         84:2f:18:34:79:fb:b4:a4:d0:43:09:b9:88:da:71:e5:5c:5c:
         3c:d5:02:19:67:94:fc:89:a9:71:fb:88:77:03:af:84:c2:d1:
         9a:e6:7e:07:05:66:1c:d7:99:a1:54:47:fb:f1:1a:b7:0f:41:
         92:18:85:a5:71:06:ef:ec:84:fd:24:6b:8e:a1:2f:61:b2:75:
         7a:cf:6a:f4:17:57:6a:e9:69:50:01:4b:3b:4b:22:ee:d4:88:
         fa:c6:27:7a:62:36:a0:d0:7d:97:7a:72:a5:d0:d4:4a:03:da:
         af:44:b0:7e:cd:0c:1d:b6:28:d8:8a:5e:cd:53:fd:25:4d:9d:
         bc:89:c3:a1:93:06:3e:95:1e:4d:19:1b:99:ca:95:be:f3:f5:
         24:a4:c6:ed:e5:52:6e:40:63:92:6a:33:6f:8e:44:b8:30:a6:
         f6:9e:bc:52:dc:17:65:c3:ab:e0:55:a2:8a:ab:48:85:91:e9:
         7c:9a:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----