Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/2/323630323a666166643a6630313a3a2f34382d3438203d3e20323033363335.roa
File:                     323630323a666166643a6630313a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          S1h6bvTsicBW5e6IYHoF54ecR3mWbEcsv4O+Eq26wNw=
Subject key identifier:   A8:4D:BB:74:16:D4:E1:13:72:F0:63:43:21:55:0D:2D:40:AE:DE:3B
Certificate issuer:       /CN=1D321EB974A73510DAB671C8E4E4751B111B94B8
Certificate serial:       0558BE1711A2B94FDF508C73953A9CF365D13645
Authority key identifier: 1D:32:1E:B9:74:A7:35:10:DA:B6:71:C8:E4:E4:75:1B:11:1B:94:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/1D321EB974A73510DAB671C8E4E4751B111B94B8.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/2/323630323a666166643a6630313a3a2f34382d3438203d3e20323033363335.roa
Signing time:             Sat 17 Dec 2022 12:58:57 +0000
ROA not before:           Sat 17 Dec 2022 12:53:57 +0000
ROA not after:            Sat 16 Dec 2023 12:58:57 +0000
asID:                     203635
IP address blocks:        2602:fafd:f01::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:58:be:17:11:a2:b9:4f:df:50:8c:73:95:3a:9c:f3:65:d1:36:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D321EB974A73510DAB671C8E4E4751B111B94B8
        Validity
            Not Before: Dec 17 12:53:57 2022 GMT
            Not After : Dec 16 12:58:57 2023 GMT
        Subject: CN=A84DBB7416D4E11372F0634321550D2D40AEDE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:5d:58:ab:8c:14:a5:45:0f:1f:83:9e:23:
                    66:1d:44:b5:50:1d:88:16:77:76:45:6e:e7:81:3b:
                    06:9d:f8:53:a6:83:39:0e:eb:c3:da:5e:ef:ba:94:
                    bf:c3:08:bd:a1:45:fb:01:48:2c:a0:cc:35:b1:e2:
                    d7:21:97:ac:e9:c2:0b:79:ef:81:c1:7a:29:8c:e3:
                    91:9a:46:01:1b:63:26:a7:59:08:e9:35:66:dc:c6:
                    8e:70:3e:89:f4:09:20:4d:22:73:2e:fe:6a:ff:e9:
                    0f:4d:0d:39:75:fc:1f:9d:06:df:ec:1c:1f:c4:d1:
                    ff:93:52:27:c5:f4:db:0a:b2:6b:31:68:5c:70:b3:
                    b4:9b:7c:69:f1:69:0d:c1:f6:5c:6e:57:32:f8:d6:
                    ff:9e:87:ee:7b:b7:3a:aa:44:9a:97:b7:48:72:b9:
                    66:05:0c:d2:c8:b8:13:28:64:81:6e:91:f9:bc:17:
                    49:a3:58:4a:fe:6d:02:9f:43:63:3f:82:bd:a3:64:
                    43:c6:13:0b:a9:ca:a6:b4:f9:12:9a:e7:08:8d:df:
                    b6:1c:4e:b4:7c:3a:18:09:5e:1e:4a:48:4d:ab:9b:
                    08:0f:af:3e:b2:d8:cc:4c:90:14:59:b4:ae:03:f7:
                    94:28:a3:d2:22:b5:9d:ab:1b:94:1c:58:3f:c8:2d:
                    6e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:BB:74:16:D4:E1:13:72:F0:63:43:21:55:0D:2D:40:AE:DE:3B
            X509v3 Authority Key Identifier:
                keyid:1D:32:1E:B9:74:A7:35:10:DA:B6:71:C8:E4:E4:75:1B:11:1B:94:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/2/1D321EB974A73510DAB671C8E4E4751B111B94B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/1D321EB974A73510DAB671C8E4E4751B111B94B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/2/323630323a666166643a6630313a3a2f34382d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f01::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:42:5c:49:9f:7e:09:59:87:b8:4a:ce:e6:16:70:3d:18:db:
         f0:e8:1b:fe:21:4d:d8:41:cb:a2:9c:89:40:bb:27:96:d7:1c:
         a7:f7:47:20:f0:1b:ab:22:07:9b:e7:b7:0c:ba:be:38:89:f0:
         82:d8:7c:1f:ad:25:d2:33:c2:d1:51:b9:88:1d:8f:9f:0f:a5:
         39:57:1f:e8:46:34:fd:8d:b8:ec:db:e9:4c:38:c4:71:20:78:
         42:3b:8d:40:d1:2d:c5:00:0f:20:60:18:7f:af:c0:e2:9b:09:
         df:19:68:d9:58:cc:fe:5d:2f:a0:d7:89:04:e7:44:0a:96:80:
         ac:b7:20:c8:6e:ac:72:f4:af:2c:23:24:94:2b:f9:5d:4a:5e:
         ba:28:97:16:05:78:90:ed:a2:55:6a:be:1d:29:d9:19:d7:db:
         f7:67:ee:d0:af:03:78:ea:f2:06:71:f8:f9:2e:c1:c0:bc:dd:
         b6:5c:99:42:84:9b:d2:4d:59:98:d7:2f:17:ce:42:a6:ad:56:
         79:e1:f5:63:9b:bd:48:28:55:99:96:6e:62:89:59:73:f6:f6:
         b7:2b:05:a0:8a:55:5e:32:45:64:ba:ad:63:1e:93:b9:4c:ec:
         82:78:aa:5e:67:30:02:21:1e:77:dc:70:29:f1:b0:a0:45:7d:
         40:9b:c6:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----