Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/SamCoThePug/2/326131333a646638373a3a2f33322d3438203d3e203537383730.roa
File:                     326131333a646638373a3a2f33322d3438203d3e203537383730.roa (raw, json)
Hash identifier:          gaS6e99Ctks/3bAqI2yqc8kIlaRfw0a002fYmB4mOz0=
Subject key identifier:   71:E1:AE:F8:E1:30:42:A0:07:17:E5:88:36:B7:C6:C9:58:0C:41:0B
Certificate issuer:       /CN=F6FA7F2164BAB794F0265DAA3D6C3262AF4257DA
Certificate serial:       2A4B749766BEDD3D7165693BA6C2EFE15A9606BE
Authority key identifier: F6:FA:7F:21:64:BA:B7:94:F0:26:5D:AA:3D:6C:32:62:AF:42:57:DA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/F6FA7F2164BAB794F0265DAA3D6C3262AF4257DA.cer
Subject info access:      rsync://rpki.kitten.network/repo/SamCoThePug/2/326131333a646638373a3a2f33322d3438203d3e203537383730.roa
Signing time:             Mon 27 Mar 2023 18:19:49 +0000
ROA not before:           Mon 27 Mar 2023 18:14:49 +0000
ROA not after:            Mon 25 Mar 2024 18:19:49 +0000
asID:                     57870
IP address blocks:        2a13:df87::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4b:74:97:66:be:dd:3d:71:65:69:3b:a6:c2:ef:e1:5a:96:06:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6FA7F2164BAB794F0265DAA3D6C3262AF4257DA
        Validity
            Not Before: Mar 27 18:14:49 2023 GMT
            Not After : Mar 25 18:19:49 2024 GMT
        Subject: CN=71E1AEF8E13042A00717E58836B7C6C9580C410B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:d4:25:28:71:6a:c3:f6:42:e8:4a:93:d6:
                    bf:38:19:d0:05:d1:8a:1f:f5:09:1a:6a:7b:c0:67:
                    6f:42:ee:3d:3f:72:f9:bc:fb:34:2c:fa:a7:a8:ed:
                    94:74:81:5f:90:d1:bf:5a:83:60:4e:dc:11:96:f2:
                    7d:7a:34:fd:02:c1:3a:1b:d5:aa:1e:5b:95:fe:87:
                    07:4f:a0:49:83:51:8b:9d:e5:4f:7d:5a:a9:24:5a:
                    35:46:a0:f2:be:4a:10:15:15:7a:0a:99:a4:30:40:
                    b0:da:a1:f3:4b:4e:d3:00:30:86:dc:96:83:c4:80:
                    ef:29:95:a4:e3:29:81:64:f2:d0:e6:1d:34:de:ba:
                    02:5f:2b:79:40:20:59:5b:68:32:09:1b:bf:00:c5:
                    2b:6b:c3:93:dc:a7:ff:60:58:8c:83:7b:1f:1c:aa:
                    8b:b9:17:af:e5:9d:42:3b:b6:40:19:98:04:b3:88:
                    f7:32:3b:0f:e0:a7:7e:23:1f:91:92:e0:15:b0:77:
                    9b:be:6f:d9:de:f7:17:a8:9b:9f:42:d5:9e:7f:64:
                    98:f2:b7:2a:2f:47:e9:51:84:7e:64:97:0d:a4:c6:
                    c8:ff:20:87:f3:84:c0:77:66:af:6b:ee:ce:98:33:
                    88:ec:77:fc:0e:c5:13:97:80:9f:5c:c8:15:15:ad:
                    c3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E1:AE:F8:E1:30:42:A0:07:17:E5:88:36:B7:C6:C9:58:0C:41:0B
            X509v3 Authority Key Identifier:
                keyid:F6:FA:7F:21:64:BA:B7:94:F0:26:5D:AA:3D:6C:32:62:AF:42:57:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/SamCoThePug/2/F6FA7F2164BAB794F0265DAA3D6C3262AF4257DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/94fc4752-f81a-47b6-8f0d-ff74c8b0b0a4/0/F6FA7F2164BAB794F0265DAA3D6C3262AF4257DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/SamCoThePug/2/326131333a646638373a3a2f33322d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:a0:49:20:a9:c0:46:0a:38:9f:92:7e:a5:68:3c:f4:90:15:
         49:3d:a6:45:e7:b8:9f:0b:bc:70:91:63:c5:a3:e7:74:bd:e5:
         e1:ae:c7:b2:6b:05:64:10:5c:1f:ef:2d:5e:47:28:2f:36:3b:
         69:f6:f2:4a:dd:69:87:60:5a:f8:b3:d9:82:c2:cf:ba:00:c5:
         de:4a:6d:d1:29:1f:46:f9:c3:73:a7:29:de:36:d1:3b:49:30:
         15:14:ea:12:40:65:f9:53:61:34:21:16:08:8d:06:78:e5:50:
         8e:bb:8e:93:65:ce:fb:02:2a:36:57:25:60:de:bc:a4:85:49:
         dc:19:b3:36:c3:ba:7a:be:a0:a3:37:0b:c9:a3:ac:5f:42:5c:
         76:0f:bf:90:71:2b:0d:57:d3:fe:ba:ed:d8:55:80:96:1d:60:
         8f:81:d4:77:e6:4e:a1:df:43:21:67:ee:17:d6:c2:69:f1:a5:
         c4:a4:bd:6f:b1:c9:29:9c:c1:ad:b2:79:ca:47:f2:8a:bd:af:
         d0:3d:c9:4f:8b:31:3c:b9:b6:7c:82:bf:82:df:29:82:05:0d:
         71:c9:f0:b2:b0:38:0e:6c:3c:9a:c6:b6:61:b9:45:3c:b1:b4:
         c0:da:24:f0:7d:f1:71:e3:74:5c:08:c1:6d:29:35:2f:64:6a:
         23:39:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----