Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203438353831.roa
File:                     326130613a363034303a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier:          I9Jz/u20ZKTnjN4hsnr469TsHGxRB8p9Z6G6cHMy0kQ=
Subject key identifier:   8C:75:38:CB:40:44:22:76:0E:E8:D0:F1:A8:00:50:D8:CB:A2:43:0F
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       16B65EB76E24B191E269A78304046E422A4F6C50
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203438353831.roa
Signing time:             Thu 30 Mar 2023 19:31:42 +0000
ROA not before:           Thu 30 Mar 2023 19:26:42 +0000
ROA not after:            Thu 28 Mar 2024 19:31:42 +0000
asID:                     48581
IP address blocks:        2a0a:6040::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b6:5e:b7:6e:24:b1:91:e2:69:a7:83:04:04:6e:42:2a:4f:6c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Mar 30 19:26:42 2023 GMT
            Not After : Mar 28 19:31:42 2024 GMT
        Subject: CN=8C7538CB404422760EE8D0F1A80050D8CBA2430F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2b:52:d2:a0:86:e2:6f:e3:a3:43:12:48:79:
                    f3:03:8c:a0:d4:21:a4:07:5c:97:c0:f9:98:f7:db:
                    45:ff:b5:87:07:a4:10:23:22:61:a7:c3:7c:c3:b5:
                    f6:d7:4d:be:77:9a:7a:94:a7:dd:f2:cb:7a:d8:86:
                    20:92:0c:8a:5f:9d:5e:6f:51:ac:8f:e2:09:f1:04:
                    d4:5b:1a:3c:84:c9:25:99:e7:3a:97:5a:fb:b0:7f:
                    8f:bc:80:75:2d:d6:03:62:1c:1f:a4:89:62:d7:b3:
                    de:8c:06:2a:d2:44:fa:32:c5:c4:68:e7:d2:2d:90:
                    44:ef:27:55:a8:be:8a:a4:45:b9:d8:d5:a5:b3:88:
                    17:26:ed:9a:43:5b:e8:b1:c5:b9:cb:e9:5e:eb:78:
                    cf:53:95:3d:64:58:27:ab:1f:3c:40:66:3d:d3:d7:
                    b2:8b:67:04:23:1f:d3:fb:ca:1d:6d:ab:39:a7:14:
                    3a:75:43:34:e4:ea:7b:3a:92:3b:63:1d:51:b1:16:
                    f5:b5:64:81:a9:74:28:09:7b:54:3d:5c:ce:2a:32:
                    7f:98:81:16:e8:91:22:11:c3:38:f9:3f:fb:13:00:
                    b2:10:ea:8c:1f:1e:16:54:4d:91:92:39:a7:08:ce:
                    ee:ec:51:33:bb:3a:2d:68:cb:9a:8d:da:50:2e:52:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:75:38:CB:40:44:22:76:0E:E8:D0:F1:A8:00:50:D8:CB:A2:43:0F
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:77:44:f3:a3:74:1a:24:70:66:65:00:31:4b:84:63:8c:
         18:08:60:f1:2f:85:f9:ae:f8:d0:75:1e:36:bb:f4:8e:10:7d:
         8d:43:be:ae:24:a4:b5:cb:20:ae:d6:ae:2e:ca:ea:78:1d:9b:
         9d:6e:41:a8:16:5f:56:84:e3:52:cc:fd:ec:5c:1e:e0:1e:fb:
         23:65:92:ec:e0:4e:25:87:e9:d1:3b:f9:d0:1f:08:77:4b:0f:
         72:98:5a:16:aa:b9:16:33:77:de:e9:db:c1:fa:1f:1d:0c:84:
         86:b1:40:5e:d7:e7:74:48:84:b8:51:0c:93:14:c2:63:b8:30:
         ab:25:5a:29:34:3e:ca:6c:42:38:1c:4c:14:1e:87:4f:0a:d3:
         b4:47:c6:af:a5:0d:20:8c:56:a5:bb:ee:10:06:90:74:eb:d6:
         b8:13:0c:f4:c0:d0:1d:a1:c3:ef:03:c1:10:75:23:f1:10:eb:
         1a:80:54:26:97:34:7b:64:3f:17:2f:ec:08:2c:a1:57:79:ca:
         14:3f:15:7b:1b:5b:4e:1a:39:bb:cd:d6:d3:82:15:ec:13:17:
         70:e3:e7:2d:b8:12:53:76:12:5e:3e:13:6a:a8:68:80:ab:36:
         07:0b:07:60:78:a5:a2:d2:f6:11:63:96:0d:84:e5:6f:10:dd:
         76:ed:38:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUFrZet24ksZHiaaeDBARuQipPbFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1RjRBNjYwREJFN0U2M0E4QkRFNkM0MzQ3NEEzNTQ1
RTc3MUIzMTAeFw0yMzAzMzAxOTI2NDJaFw0yNDAzMjgxOTMxNDJaMDMxMTAvBgNV
BAMTKDhDNzUzOENCNDA0NDIyNzYwRUU4RDBGMUE4MDA1MEQ4Q0JBMjQzMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqK1LSoIbib+OjQxJIefMDjKDU
IaQHXJfA+Zj320X/tYcHpBAjImGnw3zDtfbXTb53mnqUp93yy3rYhiCSDIpfnV5v
UayP4gnxBNRbGjyEySWZ5zqXWvuwf4+8gHUt1gNiHB+kiWLXs96MBirSRPoyxcRo
59ItkETvJ1WovoqkRbnY1aWziBcm7ZpDW+ixxbnL6V7reM9TlT1kWCerHzxAZj3T
17KLZwQjH9P7yh1tqzmnFDp1QzTk6ns6kjtjHVGxFvW1ZIGpdCgJe1Q9XM4qMn+Y
gRbokSIRwzj5P/sTALIQ6owfHhZUTZGSOacIzu7sUTO7Oi1oy5qN2lAuUrf/AgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQUjHU4y0BEInYO6NDxqABQ2MuiQw8wHwYDVR0j
BBgwFoAUe19KZg2+fmOovebENHSjVF53GzEwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29yay9yZXBvL015
dGhpY2FsS2l0dGVuLzEvN0I1RjRBNjYwREJFN0U2M0E4QkRFNkM0MzQ3NEEzNTQ1
RTc3MUIzMS5jcmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzov
L2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzdCNUY0
QTY2MERCRTdFNjNBOEJERTZDNDM0NzRBMzU0NUU3NzFCMzEuY2VyMIGGBggrBgEF
BQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29y
ay9yZXBvL015dGhpY2FsS2l0dGVuLzEvMzI2MTMwNjEzYTM2MzAzNDMwM2EzYTJm
MzQzMDJkMzQzODIwM2QzZTIwMzQzODM1MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoKYEAAMA0G
CSqGSIb3DQEBCwUAA4IBAQCMhndE86N0GiRwZmUAMUuEY4wYCGDxL4X5rvjQdR42
u/SOEH2NQ76uJKS1yyCu1q4uyup4HZudbkGoFl9WhONSzP3sXB7gHvsjZZLs4E4l
h+nRO/nQHwh3Sw9ymFoWqrkWM3fe6dvB+h8dDISGsUBe1+d0SIS4UQyTFMJjuDCr
JVopND7KbEI4HEwUHodPCtO0R8avpQ0gjFalu+4QBpB069a4Ewz0wNAdocPvA8EQ
dSPxEOsagFQmlzR7ZD8XL+wILKFXecoUPxV7G1tOGjm7zdbTghXsExdw4+ctuBJT
dhJePhNqqGiAqzYHCwdgeKWi0vYRY5YNhOVvEN127TjD
-----END CERTIFICATE-----