Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e20323034383537.roa
File:                     326130613a363034303a3a2f34302d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          QpDi+y3BXI2aWv+E2ok6CrD/KT0XrtxkNNbF0Js5U/k=
Subject key identifier:   E3:22:B5:5D:FC:CC:55:6B:D9:AB:60:FB:CF:11:40:62:FA:17:7B:3B
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       47140E714C1F072B7511E3684725E76972EEC681
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e20323034383537.roa
Signing time:             Wed 14 Dec 2022 01:49:22 +0000
ROA not before:           Wed 14 Dec 2022 01:44:22 +0000
ROA not after:            Wed 13 Dec 2023 01:49:22 +0000
asID:                     204857
IP address blocks:        2a0a:6040::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:14:0e:71:4c:1f:07:2b:75:11:e3:68:47:25:e7:69:72:ee:c6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Dec 14 01:44:22 2022 GMT
            Not After : Dec 13 01:49:22 2023 GMT
        Subject: CN=E322B55DFCCC556BD9AB60FBCF114062FA177B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:de:11:cb:21:72:f1:da:ce:c7:90:53:d1:
                    eb:e6:ea:04:42:81:fd:8f:ba:ca:4c:9f:f8:a5:c5:
                    a5:b9:5b:f2:00:82:75:02:3d:0a:cd:62:b5:ca:d3:
                    d1:15:23:9c:f6:26:41:f4:fa:75:87:df:42:ee:bd:
                    ec:ce:6a:d2:31:81:9f:85:21:b7:63:65:12:00:64:
                    25:51:ab:b7:09:54:e4:3b:44:73:a3:db:ed:17:d2:
                    1b:07:05:ab:cc:e8:54:01:b8:9a:76:ab:22:de:81:
                    ae:0d:c6:36:f3:97:fe:d5:fe:11:88:15:82:1c:b6:
                    3e:62:49:87:50:6b:78:8a:8b:55:27:78:41:db:a3:
                    2e:68:19:9a:37:50:56:bb:58:5e:b0:08:d9:fb:13:
                    1a:ee:ba:ee:c3:58:8d:cf:6e:d0:aa:5a:34:48:40:
                    db:e6:71:c1:3c:f4:e5:b9:26:66:b7:f1:52:c4:c2:
                    97:94:d3:08:26:7b:87:69:ad:13:5c:21:a8:6e:94:
                    2a:f3:62:48:3a:e3:b6:f8:34:0c:3f:0b:c1:c5:1e:
                    c2:8c:d5:e2:1b:55:7a:92:4f:c7:f3:33:34:69:95:
                    ed:6f:cf:a9:d9:08:da:d4:0d:58:e3:04:8c:8c:63:
                    45:8e:fb:bb:53:48:18:0e:37:2e:35:5d:c3:87:19:
                    f4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:22:B5:5D:FC:CC:55:6B:D9:AB:60:FB:CF:11:40:62:FA:17:7B:3B
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:32:b8:ec:98:53:e9:c8:ff:7a:25:77:52:da:af:43:29:3d:
         40:d9:4a:dc:b6:a1:67:8f:7c:57:71:e0:b6:4b:c1:25:59:9e:
         1e:e6:c6:34:3e:8a:3d:96:1d:9b:1b:31:4d:a6:0f:17:70:82:
         78:94:2a:25:8c:5e:7c:8b:19:26:cf:e9:23:dc:f1:df:e7:74:
         dc:8f:90:2f:34:01:d4:9e:0b:dd:65:5b:f1:f4:08:51:70:13:
         ed:71:10:8f:b6:5f:0d:5c:7a:56:a0:68:da:72:9c:94:fa:7d:
         09:01:f6:61:07:13:02:d6:d7:4c:d5:94:e4:13:28:a3:35:38:
         0a:53:29:f6:21:e8:08:81:db:64:80:4d:e6:77:76:07:7f:03:
         21:a8:2a:38:fc:8d:56:17:06:bf:78:97:08:08:eb:cb:da:03:
         fd:90:c2:7d:59:31:e1:13:28:ba:68:2e:75:f1:82:a5:e8:f7:
         4b:80:7a:b9:06:80:40:84:ec:2c:0d:01:25:af:e8:03:07:a0:
         63:a9:ef:b9:da:12:12:d8:97:d1:26:76:77:e2:dc:db:32:23:
         ee:ba:90:fb:54:aa:86:78:89:11:df:75:0a:bd:a2:11:a7:61:
         94:87:5c:88:c2:71:41:a0:60:23:44:81:4e:55:eb:51:52:10:
         4b:75:77:d1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIURxQOcUwfByt1EeNoRyXnaXLuxoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1RjRBNjYwREJFN0U2M0E4QkRFNkM0MzQ3NEEzNTQ1
RTc3MUIzMTAeFw0yMjEyMTQwMTQ0MjJaFw0yMzEyMTMwMTQ5MjJaMDMxMTAvBgNV
BAMTKEUzMjJCNTVERkNDQzU1NkJEOUFCNjBGQkNGMTE0MDYyRkExNzdCM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbN4RyyFy8drOx5BT0evm6gRC
gf2PuspMn/ilxaW5W/IAgnUCPQrNYrXK09EVI5z2JkH0+nWH30LuvezOatIxgZ+F
IbdjZRIAZCVRq7cJVOQ7RHOj2+0X0hsHBavM6FQBuJp2qyLega4Nxjbzl/7V/hGI
FYIctj5iSYdQa3iKi1UneEHboy5oGZo3UFa7WF6wCNn7Exruuu7DWI3PbtCqWjRI
QNvmccE89OW5Jma38VLEwpeU0wgme4dprRNcIahulCrzYkg647b4NAw/C8HFHsKM
1eIbVXqST8fzMzRple1vz6nZCNrUDVjjBIyMY0WO+7tTSBgONy41XcOHGfRlAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU4yK1XfzMVWvZq2D7zxFAYvoXezswHwYDVR0j
BBgwFoAUe19KZg2+fmOovebENHSjVF53GzEwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29yay9yZXBvL015
dGhpY2FsS2l0dGVuLzEvN0I1RjRBNjYwREJFN0U2M0E4QkRFNkM0MzQ3NEEzNTQ1
RTc3MUIzMS5jcmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzov
L2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzdCNUY0
QTY2MERCRTdFNjNBOEJERTZDNDM0NzRBMzU0NUU3NzFCMzEuY2VyMIGIBggrBgEF
BQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29y
ay9yZXBvL015dGhpY2FsS2l0dGVuLzEvMzI2MTMwNjEzYTM2MzAzNDMwM2EzYTJm
MzQzMDJkMzQzODIwM2QzZTIwMzIzMDM0MzgzNTM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQAAw
DQYJKoZIhvcNAQELBQADggEBAGUyuOyYU+nI/3old1Lar0MpPUDZSty2oWePfFdx
4LZLwSVZnh7mxjQ+ij2WHZsbMU2mDxdwgniUKiWMXnyLGSbP6SPc8d/ndNyPkC80
AdSeC91lW/H0CFFwE+1xEI+2Xw1celagaNpynJT6fQkB9mEHEwLW10zVlOQTKKM1
OApTKfYh6AiB22SATeZ3dgd/AyGoKjj8jVYXBr94lwgI68vaA/2Qwn1ZMeETKLpo
LnXxgqXo90uAerkGgECE7CwNASWv6AMHoGOp77naEhLYl9Emdnfi3NsyI+66kPtU
qoZ4iRHfdQq9ohGnYZSHXIjCcUGgYCNEgU5V61FSEEt1d9E=
-----END CERTIFICATE-----